# Report Expiring Application Credentials Scheduled

### Description

This runbook lists the expiry dates of application registration credentials, including client secrets and certificates. It can optionally filter by application IDs and can limit output to credentials that are about to expire.

### Setup regarding email sending

This runbook sends emails using the Microsoft Graph API. To send emails via Graph API, you need to configure an existing email address in the runbook customization.

This process is described in detail in the [Setup Email Reporting](https://github.com/realmjoin/realmjoin-runbooks/tree/master/docs/general/setup-email-reporting.md) documentation.

### Location

Organization → Applications → Report Expiring Application Credentials (Scheduled)

**Full Runbook name**

rjgit-org\_applications\_report-expiring-application-credentials\_scheduled

### Permissions

#### Application permissions

* **Type**: Microsoft Graph
  * Application.Read.All
  * Mail.Send

### Parameters

#### listOnlyExpiring

If only credentials that are about to expire within the specified number of days should be listed, select "List only credentials about to expire" (final value: true). If you want to list all credentials regardless of their expiry date, select "List all credentials" (final value: false).

| Property      | Value   |
| ------------- | ------- |
| Required      | false   |
| Default Value | True    |
| Type          | Boolean |

#### Days

The number of days before a credential expires to consider it "about to expire".

| Property      | Value |
| ------------- | ----- |
| Required      | false |
| Default Value | 30    |
| Type          | Int32 |

#### CredentialType

Filter by credential type: "Both" (default), "ClientSecrets", or "Certificates".

| Property      | Value  |
| ------------- | ------ |
| Required      | false  |
| Default Value | Both   |
| Type          | String |

#### ApplicationIds

Optional - comma-separated list of Application IDs to filter the credentials.

| Property      | Value  |
| ------------- | ------ |
| Required      | false  |
| Default Value |        |
| Type          | String |

#### EmailTo

If specified, an email with the report will be sent to the provided address(es). Can be a single address or multiple comma-separated addresses (string). The function sends individual emails to each recipient for privacy reasons.

| Property      | Value  |
| ------------- | ------ |
| Required      | true   |
| Default Value |        |
| Type          | String |

#### EmailFrom

The sender email address. This needs to be configured in the runbook customization.

| Property      | Value  |
| ------------- | ------ |
| Required      | false  |
| Default Value |        |
| Type          | String |

[Back to Runbook Reference overview](/automation/runbooks/runbook-references.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.realmjoin.com/automation/runbooks/runbook-references/org/applications/report-expiring-application-credentials_scheduled.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.