SELECT LOCATION,
    COUNT(DISTINCT IDENTITY) distinct_identities_count,
    MIN(EVENT_TIME) first_seen,
    MAX(EVENT_TIME) last_seen,
    ARRAY_AGG(DISTINCT IDENTITY) distinct_identities
FROM RAW.AZURE_SIGNIN
WHERE EVENT_TIME >= CURRENT_TIMESTAMP - INTERVAL '30 days'
GROUP BY LOCATION
ORDER BY distinct_identities ASC