The EWS usage report

Checked 19 October 2026.

The EWS usage report shows which apps called Exchange Web Services in your tenant, by application ID. Microsoft's notices on the EWS retirement (MC1447678 and MC1485116) tell admins to review it before deciding what goes on the EWS allow list.

Where to find it

Microsoft 365 admin center: Reports, Usage, Exchange, the EWS usage tab. Export downloads the report as a CSV. The report can show the last 7, 30 or 90 days; pick 90, the longest it offers. Microsoft's page on the report says usage is aggregated weekly and can take up to 10 days to appear, so an app that ran this week may not be in it yet.

What the IDs mean

Each row is one SOAP action by one application ID, a GUID such as 00000002-0000-0ff1-ce00-000000000000, so an app with several actions has several rows. The report never names the app: its columns are the application ID, the SOAP action, the call volume and the last activity date. Some IDs are Microsoft's own apps. Others belong to vendors, and some vendors, backup and migration tools among them, register a separate app in each tenant, so their ID is different everywhere.

Paste an ID here to see the app, the vendor and, where the vendor has published one, its plan for moving off EWS:

A busy tenant, or several

Looking up IDs one at a time works for a handful of apps. For a full report, the plan page reads the CSV in your browser, never uploads it, and shows every app in it for free. The paid plan adds each vendor's Graph status and date, the apps missing from your allow list, and a CSV to keep: $49 per tenant, or $199 for ten tenants with one view across them. See pricing.

The dates behind all this are on EWS retirement dates.