MS 1st Party Apps are available in the report. about appimpersonationusersreport

[cparker-msft]

@MugundGH I've updated the script. Please try again and confirm if you're no longer seeing the 1P apps in the report.

[cparker-msft]

Following up on this @MugundGH , is the script now working as expected for you?

[MugundGH]

Hello @cparker-msft ,

Now we could see that the First party app arent appearing in the report. However since we have more than 100k users in our infra, we are not even able to run this report for more than a hours time beyond which its timing out. Can there be any enhancements that can be targetted for the large user base??

[cparker-msft]

@MugundGH that is unfortunately a limitation of the underlying Search-UnifiedAudit log cmdlet used to perform the search. The script allows for the search window parameters to be tweaked (e.g.: reduce search window) which may help, or you may have better results by performing the search in the Microsoft Purview Audit portal (albeit without the additional functionality provided by the script).

Thank you for confirming that the 1P apps no longer appear in the report. Will go ahead and close this issue as resolved.