I spent 4 hours getting a Copilot Studio agent to read Entra audit logs. Here is what actually broke.

Description and use

<p><em>Or: how a "simple" Microsoft Graph integration turned into a debugging session across five different UI layers.</em></p> <h2> The goal was small </h2> <p>I wanted my Compliance & Audit Agent in Microsoft Copilot Studio to answer one question:</p> <blockquote> <p>"Show me admin activity from the last 7 days."</p> </blockquote> <p>The agent should pull real audit logs from Microsoft Entra ID, triage them by severity, and give me a scannable table. Not a chatbot. A triage tool.</p> <p>That is it. One agent, one flow, one Graph API endpoint. On paper, a two hour job.</p> <p>It took four

Problem

<p><em>Or: how a "simple" Microsoft Graph integration turned into a debugging session across five different UI layers.</em></p> <h2> The goal was small </h2> <p>I wanted my Compliance & Audit Agent in Microsoft Copilot Studio to answer one question:</p> <blockquote> <p>"Show me admin activity from the last 7 days."</p> </blockquote> <p>The agent should pull real audit logs from Microsoft Entra ID, triage them by severity, and give me a scannable table. Not a chatbot. A triage tool.</p> <p>That is it. One agent, one flow, one Graph API endpoint. On paper, a two hour job.</p> <p>It took four

Outcome

<p><em>Or: how a "simple" Microsoft Graph integration turned into a debugging session across five different UI layers.</em></p> <h2> The goal was small </h2> <p>I wanted my Compliance & Audit Agent in Microsoft Copilot Studio to answer one question:</p> <blockquote> <p>"Show me admin activity from the last 7 days."</p> </blockquote> <p>The agent should pull real audit logs from Microsoft Entra ID, triage them by severity, and give me a scannable table. Not a chatbot. A triage tool.</p> <p>That is it. One agent, one flow, one Graph API endpoint. On paper, a two hour job.</p> <p>It took four

Evidence

I spent 4 hours getting a Copilot Studio agent to read Entra audit logs. Here is what actually broke.

Source