Office 365 Users and Guests Inactive | Suspend Users rule

Query criteria

Query criteria are sent with the query and may improve query performance.

User type

Specify members, guests or both should be suspended.

Last Microsoft 365 sign in (days ago)

Set a minimum number of days past since a user signs in to Microsoft 365. Use 0 to disable this check.

Set a minimum number of days past since a user accesses Microsoft 365 services.

This queries the dates of the Microsoft activities report and takes the most recent service activity date across all services.

Set a minimum number of days past the license assignment to avoid counting new users as inactive. Use 0 to ignore the license assignment date.

Other Query Settings

Properties to display

System properties

Post query-filter

To hide unwanted data based on criteria, not supported by Microsoft 365 query, set the filtering conditions here.

Sort by

Limit result set

MSGraph query condition (OData)

By default Query criteria is used. But when it is specified, it overrides the Query criteria setting.

Example: find all Teams with displayname starting from 'Team.'

(startswith(displayName,'Team'))

Initialization script

Usually, rules use query criteria to limit the query search scope. It improves the performance of the executed rule.

Due to PowerShell limitations, it is not possible to use calculated expressions in query criteria. That is the point where initialization script can help. You can initialize a global variable in this setting and then use it in query criteria.

Example: Update AD users, created in the last ten days.

1. Add this initialization script:

{$global:DatePeriod = (Get-Date).AddDays(-10)}

2. Use $DatePeriod variable in query criteria builder:

MS Graph advanced queries

Enables consistency level eventual which uses an index that might not be up-to-date with recent changes to the object.