Built-in report library
Start with reports for recently created, renamed, updated, or deleted objects, top actors, membership changes, empty groups, applications, policies, and privileged activity.
Microsoft Entra ID reports
Scheduled Microsoft Entra ID audit reports for useful review
Run and schedule practical identity reports covering lifecycle changes, group membership, privileged access, applications, Conditional Access, risk, and directory health.
Immediate or scheduled
Run XLSX reports on demand or configure daily, weekly, and monthly delivery for recurring operational and governance reviews.
Evidence-backed results
Build reports from tenant-scoped retained evidence and directory snapshots, preserving traceability to the underlying captured change.
Reports that answer operational questions
Useful identity reporting should begin with a question: which accounts were created, who changed privileged membership, which groups are empty, or what policy configuration moved during the review period. IAMCastle organises built-in reports around those jobs rather than exposing an undifferentiated log export.
Search and report filters can narrow by time, actor, object type, risk, operation, and changed value. XLSX output keeps the complete selected column set so identity teams can investigate, share, or retain the result through their existing processes.
Scheduled delivery can include customer administrators and an additional configured mailbox, allowing a security operations or governance address to receive the same recurring evidence.