question

BMaster-8866 avatar image
0 Votes"
BMaster-8866 asked ·

Requests to the server are being throttled

While experimenting with conditional access policies, I often go to Azure AD -> Monitoring -> Sign-ins to verify the new policies. Sometimes this works (although very slowly - it takes like 20 seconds to display the list), but a lot of the times I get the error "Requests to the server are being throttled" after these 20 seconds.
I saw https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/troubleshooting-throttling-errors where it's suggested to check for x-ms-ratelimit-... response headers, but in the response headers I get back, I only see a header 'x-ms-ags-diagnostic'.
Any idea what's causing the throttling?

azure-active-directory
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

JamesTran-MSFT avatar image
0 Votes"
JamesTran-MSFT answered ·

@BMaster-8866
Thank you for the detailed post!

When it comes to the Sign-in activity reports within the Azure Portal, I believe it's using the Graph API endpoint of .../v1.0/auditLogs/signIns, to retrieve the data. If so, the Graph API throttling limits would be 2000 requests per second of any request type. Therefore, to better handle throttling it's recommended to:

  • Reduce the number of operations per request.

  • Reduce the frequency of calls.

  • Avoid immediate retries, because all requests accrue against your usage limits.

You can also try filtering the sign-in logs to "Last 24hrs" if you're having issues getting data older than 24hrs.


Additional Links:
Subscription and tenant limits
Graph API - List signIns


If you have any other questions or are still experiencing this issue after filtering the amount of data to be returned, please let me know.
Thank you for your time and patience throughout this issue.

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

· 5 ·
10 |1000 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BMaster-8866 avatar image BMaster-8866 ·

I don't understand those 2000 requests per second. The link says that this is "Per app across all tenants". Does this mean that this is across ALL tenants, not only ours? Because it's impossible that we reached 2000 requests per second only for our own tenant.

PS: yesterday it worked a lot better, and today it seems fine too. I'll keen an eye on it...

0 Votes 0 ·
JamesTran-MSFT avatar image JamesTran-MSFT BMaster-8866 ·

@BMaster-8866
Thank you for the quick response!

From the doc it says, "any request can be evaluated against multiple limits, depending on the scope of the limit (per app across all tenants, per tenant for all apps, per app per tenant, and so on), the request type (GET, POST, PATCH, and so on), and other factors.

When it comes to throttling issues, this could also be related to the Azure Portal, networking, etc., and not anything on your end. But I'm glad that the logs seemed better today, if you're still experiencing this issue, please let me know so our support team can take a closer look into your environment.


Thank you for your time and patience throughout this issue.

0 Votes 0 ·
JamesTran-MSFT avatar image JamesTran-MSFT JamesTran-MSFT ·

@BMaster-8866
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?

0 Votes 0 ·
Show more comments