Azure Active Directory Identity Protection
Deprecated. Use Microsoft Graph Identity and Access instead.
- Category
- Authentication & Identity Management
- Pack
- AzureActiveDirectory
Configuration parameters
- app_id — Application ID (Client ID for Client credentials mode) (required)
- subscription_id — Subscription ID (required)
- azure_ad_endpoint — Azure Active Directory endpoint (required)
- client_credentials — Use Client Credentials Authorization Flow
- tenant_id — Tenant ID (required for Client Credentials mode)
- credentials —
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
- isFetch — Fetch incidents
- incidentType — Incident type
- first_fetch — First Fetch Time Interval
- max_fetch — Max fetch interval
- fetch_filter_expression — Fetch filter expression
- fetch_user_id — Fetch User ID
- fetch_user_principal_name — Fetch User Principal Name
Commands (9)
- azure-ad-auth-complete — Run this command to complete the authorization process. This should be used after running the azure-ad-auth-start command.
- azure-ad-auth-reset — Run this command to rerun the authentication process.
- azure-ad-auth-start — Run this command to start the authorization process. Follow the instructions shown.
- azure-ad-auth-test — Tests the connectivity to Azure.
- azure-ad-identity-protection-risks-list — Retrieves the properties of a collection of riskDetection objects.
- azure-ad-identity-protection-risky-user-confirm-compromised — Confirms one or more of the risky user's objects as compromised. This action sets the targeted user's risk level to high.
- azure-ad-identity-protection-risky-user-dismiss — Dismisses the risk of one or more of the risky user's objects. This action sets the targeted user's risk level to none.
- azure-ad-identity-protection-risky-user-history-list — Gets the risk history of a riskyUser resource.
- azure-ad-identity-protection-risky-user-list — Retrieves the properties of a collection of riskDetection objects.