entraAccessDriftDetail resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents an access drift detail specific to Microsoft Entra reconciliation. Extends accessDriftDetail with role and access package information.

Inherits from accessDriftDetail.

Methods

This resource is part of a polymorphic collection managed by the accessDriftDetail base type. Operations are performed through the base type endpoints.

Properties

Property	Type	Description
accessPackage	driftAccessPackageInfo	The access package associated with this drift record.
assignedRole	String	The role currently assigned to the identity on the resource.
createdDateTime	DateTimeOffset	The date and time when the drift record was created. Inherited from accessDriftDetail.
driftSource	accessDriftSource	The comparison system that detected the drift. Inherited from accessDriftDetail. The possible values are: entra, externalApplication, unknownFutureValue.
driftType	accessDriftType	The classification of the drift. Inherited from accessDriftDetail. The possible values are: unauthorized, missing, inSync, unknownFutureValue.
expectedRole	String	The role expected based on the access package assignment.
id	String	The unique identifier for the drift detail. Inherited from entity.
resource	driftResourceInfo	The governed resource associated with this drift record. Inherited from accessDriftDetail.

Relationships

Relationship	Type	Description
identities	driftIdentityInfo collection	The identities affected by this drift record. Inherited from accessDriftDetail.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.entraAccessDriftDetail",
  "id": "String (identifier)",
  "resource": {"@odata.type": "microsoft.graph.driftResourceInfo"},
  "driftSource": "String",
  "driftType": "String",
  "createdDateTime": "String (timestamp)",
  "assignedRole": "String",
  "expectedRole": "String",
  "accessPackage": {"@odata.type": "microsoft.graph.driftAccessPackageInfo"}
}