Microsoft Entra ID · M365 & Platform Services

Usage Summary Reports Reader

Read Usage reports and Adoption Score but cannot access user-level details.

Scope: Aggregated usage reporting without personally identifiable information

Permissions

  • Read tenant-level usage reports
  • View Adoption Score
  • Read network performance data
  • View aggregated usage metrics
  • Cannot access user-level data

Common use cases

  • Executive reporting on M365 adoption
  • Adoption Score monitoring
  • License utilization analysis
  • Productivity insights (aggregate)
  • ROI reporting for M365

Best practices

  • Use for executive dashboards
  • Track Adoption Score trends
  • Report on license utilization
  • Identify adoption opportunities
  • Compare to benchmarks

Security considerations

  • Read-only role
  • Cannot see individual user data
  • Aggregate data only - privacy safe
  • Good for broad reporting needs

Common questions

When should I assign the Usage Summary Reports Reader role?

Assign Usage Summary Reports Reader when you need to: Executive reporting on M365 adoption; Adoption Score monitoring; License utilization analysis; Productivity insights (aggregate); and ROI reporting for M365. It is part of Microsoft Entra ID and should be granted as a least-privilege alternative to broader roles like Global Administrator.

What can someone with the Usage Summary Reports Reader role do?

The Usage Summary Reports Reader role grants permissions including: Read tenant-level usage reports; View Adoption Score; Read network performance data; View aggregated usage metrics; and Cannot access user-level data. See the Permissions section above for the full list.

What are the security risks of the Usage Summary Reports Reader role?

Key considerations when assigning Usage Summary Reports Reader: Read-only role; Cannot see individual user data; Aggregate data only - privacy safe; and Good for broad reporting needs. Review the Security considerations section before assignment, and pair with Privileged Identity Management (PIM) for just-in-time access where possible.

Official Microsoft Learn documentation →

Open the interactive RBACMap →