Get Email Activity And Mailbox Usage Details Of All Users Using Graph API

In this article, I would like to explain the steps for fetching the email activity and details of all the O365 users using Graph API. In the previous one, we already saw how to Get all the site collections and their usage.

For my organization, we need all the users' email activities, such as sent mail count, received mail count, and read mail count in the last 30 days. We have used Graph API to achieve this. Here, I’m sharing the steps involved in getting the email activities and how to check the Graph API results in O365 portal reports.

Here is the sample output from the Graph API Email Activity in the beta version.

From Microsoft documentation

“Microsoft Graph is the gateway to data and intelligence in Microsoft 365. Microsoft Graph provides a unified programmability model that you can use to take advantage of the tremendous amount of data in Office 365, Enterprise Mobility + Security, and Windows 10.

You can use the Microsoft Graph API to build apps for organizations and consumers that interact with the data of millions of users. With Microsoft Graph, you can connect to a wealth of resources, relationships, and intelligence, all through a single endpoint:”

Reference URL:

Here is the Microsoft Documentation URL.

Steps to retrieve Email activity details using node.js

Follow the below-listed steps and code.

Graph_Token_body = "client_id=" + configValues.clientId + "&scope=" + configValues.scope + "&client_secret=" + configValues.clientSecretId + "&grant_type=client_credentials"

Step 1. Register the app in Azure AD using that client ID, Tenant ID, and secret key.

Follow the below URL to Register the app in Azure.

How to Register An App In Azure Active Directory

Make sure to check that your registered Azure app has permission to read the directory data.

Step 2. In your node.js solution, just create the config file and provide the below values. We have created the config file to avoid the hard-coded things. Provide your tenantId, clientId, and secret key. Please don't use the below-mentioned one, it is just a sample (it won't work).

    "scope": "",
    "tenantId": "7aa111ae-1ab6-4256-af4c-a0c1cdb4575d",
    "clientId": "bff7fae8-c253-37e5-9b6a-e096bed54f11",
    "clientSecretId": "XgfrmWfX0K/N7SRouCdAskTKrz0cnKN2rS12IkJ9SJk="

Step 3. Refer to that config file in your JS file, as shown below.

var request = require('sync-request');
var fs = require('fs');
var configValues = JSON.parse(fs.readFileSync('emailactivityconfig.json'));

Step 4. Then, frame the Graph token URL and Graph token body to get the auth token.

var graphAccessUrl = "" + configValues.tenantId + "/oauth2/v2.0/token";    
var graphTokenBody = "client_id=" + configValues.clientId + "&scope=" + configValues.scope + "&client_secret=" + configValues.clientSecretId + "&grant_type=client_credentials";

Step 5. Get the Authorized token using the below method.

var contentType = "application/x-www-form-urlencoded; charset=utf-8";
var graphTokenError = "Failed to get graph token";
var graphToken = "";

// Call the get token method
getToken(graphAccessUrl, contentType, graphTokenBody, graphTokenError);

// This method is using to get the token from the graph token url and body
function getToken(url, type, content, errorMessage, callback) {
    var options = {
        'headers': {
            'Content-Type': type
        'body': content

    // Posting access parameters to the server
    var tokenResponse = httpPost(url, options);
    if (tokenResponse.statusCode === 200) {
        error = errorMessage;
        if (errorMessage === graphTokenError) {
            var token = JSON.parse(tokenResponse.body.toString('utf-8'));
            graphToken = token.access_token;
        if (callback) {
            return callback();
    } else {

Step 6. Once you receive the token, make the HTTP call using endpoint and get the results.

Step 7. Email Activity Report in Graph API v1.0 provides the results in CSV format not in JSON format so we have no need to use the top. In a single API call, we can retrieve all the user results.

var reqUrl = " (period='D30')";
var usersCount = 0;

function getEmailActivityReportData(reqUrl) {
    try {
        console.log("Inside get user last logon data method!!!");
        var emailActivityRes = httpGet(encodeURI(reqUrl), GRAPH_TOKEN);
        if (emailActivityRes.statusCode == 200) {
            failIndex = 0;
            var parsedJson = convertCSVToJSON(emailActivityRes.body.toString('utf-8'));
            //add use case value to json valued array
            var parsJson = JSON.parse(parsedJson);
            if (parsJson) {
                usersCount = usersCount + parsJson.length;
                for (var i = 0; i < parsJson.length; i++) {
                    var currItem = parsJson[i];
                    if (currItem) {
                        //process your data here
            console.log("Email users count: " + usersCount);
        } else {
            console.log("Email user activity api received failed response: " + emailActivityRes.statusCode)
    } catch (ex) {

//The below method is using to convert the csv values to json values
function convertCSVToJSON(csv) {
    /// <summary>This function is used to convert CSV to JSON</summary>   
    /// <param name="csv" type="String">CSV string</param>
    /// <returns type="Array">Return as JSON Array</returns>
    try {
        var lines = csv.split("\n");
        var result = [];
        var headers = lines[0].split(",");
        for (var i = 1; i < lines.length; i++) {
            var obj = {};
            if (lines[i]) {
                var currentline = lines[i].split(",");
                for (var j = 0; j < headers.length; j++) {
                    obj[headers[j]] = currentline[j];
        return JSON.stringify(result);
    } catch (ex) {
        console.log(ex + " in csvToJSON method...");

Step 8. Then, bind the results based on your requirements. You will receive the below object when you call the Email Activity API.

Steps to Check the Exchange Email Activity details from the admin portal

Once you get the results, you can verify the results from O365 and also, follow the below-listed steps to verify the output.

Step 1. Log into Microsoft 365 Admin Center. Learn more here.

Step 2. Provide a valid username and password to log into your account.

Step 3. From the Microsoft 365 Admin Center main menu, click the Reports option and then the Usage option.

Get All The Users Email Activity And Mailbox Usage Using Graph API

Step 4. On the Usage pane, click the "Select a report" drop-down list, expand Exchange, and click the "Email activity" option.

Get All The Users Email Activity And Mailbox Usage Using Graph API

Step 5. Click on the Export option; you will get the last 30 days' report for email activities with relevant data.

Get All The Users Email Activity And Mailbox Usage Using Graph API

Using the same endpoint, you can get the reports for 7 days, 30 days, 90 days, and 180 days. (period='D30')

Reference Link:


In this article, we have explored how to get the activity details of Exchange users, such as read, sent, and received mail counts from the Office365 portal and using Graph API. I hope this article is useful to you. Please share your feedback in the comments section. Thanks for visiting my article.

Similar Articles