I am currently streaming my Azure AD sign-in logs to Log Analytics (as described in this MS Doc). I also have a separate Azure Function that retrieves all Users from Graph A