1) From exchange get graph app-only and delegate for a day - appuser, appcount,
tenantcount, callvolume, usercount,
2) based on scope (being null or non-null), request category, traffictype, httpfilter, count # of userid, userpuid, oidorpuid, appuser, appcount, tenantcount, callvolume 3) All three userid, userpuid and oidoruserid is null and exchange workload and 200 status - output full schema,