MOCKUP — E - Never Signed In · Phase 2 · security · identity · Follow REPORT-DESIGN-SPEC.md in Power BI Desktop to build this
Cq Claritiq · E - Never Signed In Refreshed today
Critical Caution Healthy · target
Scope: eni.enigron.com · c1.eni.enigron.com
Never Signed In (Entra)
52
5% of enabled
Ghost (No AD, No Entra)
14
investigate now
Licensed Ghosts
8
$456 / mo waste
Created > 90 Days Ago
32
not pending provisioning
In Service Accounts OU
12
expected · OU-based heuristic
EmpType: Contractor
8
if EmpType populated
Never-signed-in by disposition
DispositionCountLicensed$ waste/mo
Ghost (no AD, no Entra activity)
14
4$228
Contractor who no-showed
8
2$72
Recently created (< 14 days, benign)
18
0$0
Service account (expected)
12
0$0
14 true ghosts. 4 of those are licensed — remove licenses first, then investigate origin.
Never-signed-in by age bucket
Age bucketUsers
< 14 days (benign — onboarding)
18
14–90 days
14
90–365 days
12
1–2 years
6
2+ years
2
Quick views
Cloud ghost accounts — investigation queue Showing 6 of 52 · Sorted by Created ↑ (oldest first)
Display NameUPNCreatedOn-prem ADLastLogonEntra Last Sign-InLicensedSKUDisposition
contractor-legacy-2023contractor2023@contoso.com2023-02-14YesM365 E3Ghost · disable + unlicense
svc-adfs-legacysvc-adfs-legacy@contoso.com2019-05-22NoService account — expected
Partner X Userpartner.x@contoso.com2024-08-11YesM365 F3No-show? unlicense
Test Onboarding 09test.onboard.09@contoso.com2025-01-03YesM365 E3Test account · remove
Marcus Holt (new)marcus.holt@contoso.com2026-04-02YesM365 E3Benign — recent onboarding
svc-monitor-newsvc-monitor-new@contoso.com2026-03-22NoService account — expected