Support

Submit a ticket My Tickets Login
Welcome
Login

User profile tracking in tyGraph Pages

By popular request, the tyGraph Pages Engine now collects limited user profile data including the following fields using the Microsoft Graph.  These fields will enable future filters in our Power BI reports allowing segmentation of data across various user and location attributes.  User profile tracking is available in Engine version 20211001.0 and newer.


What data do we track?

We track the following fields from the current user's profile from Azure Active Directory using the existing user.read permission scope from the Microsoft Graph that many customers have already granted to tyGraph Pages:


  • city
  • companyName
  • country
  • createdDateTime
  • department
  • displayName
  • employeeOrgData
  • employeeType
  • jobTitle
  • mail
  • officeLocation
  • onPremisesExtensionAttributes
    • extensionAttribute1
    • extensionAttribute2
    • extensionAttribute3
    • extensionAttribute4
    • extensionAttribute5
    • extensionAttribute6
    • extensionAttribute7
    • extensionAttribute8
    • extensionAttribute9
    • extensionAttribute10
    • extensionAttribute11
    • extensionAttribute12
    • extensionAttribute13
    • extensionAttribute14
    • extensionAttribute15
  • preferredLanguage
  • state
  • usageLocation
  • userPrincipalName

In addition to the above fields, we also collect an anonymous identifier created by hashing the userPrincipalName.


How do I turn on user profile tracking?

For tenants currently using partial obfuscation, we will track user profiles automatically since we already have the necessary Microsoft Graph permissions to query the user data.  For tenants using none or all obfuscation, you will need to grant user.read permission in the SharePoint Admin center.  For details on how to enable this setting, refer to the Installation Guide.


Is user data obfuscated?

If you have enabled user data obfuscation, the displayName and userPrincipalName fields will be obfuscated using a hash of the userPrincipalName.  This allows tyGraph Pages to distinguish between individual users but not track who the individual user is.  You may also request that we obfuscate specific fields such as department or jobTitle.  Please contact tyGraph Support if you would like to obfuscate specific fields.  User profile field obfuscation requires tyGraph Engine version 20220211.0 or higher.


How do I opt out?

A tenant may opt out of user profile tracking if they do not need or want this functionality.  Please contact tyGraph Support if you would like to opt out.


How do I use user profile data in reports?

User profile data shows as new filters in your tyGraph Pages Reports.  You can add filters for these new properties to segment the data in your reports.