investigationIdentitySet resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Identifies the principals recorded in the initiatedBy property of an agentic session or agentRun. Recorded identities describe provenance; they don't select execution credentials or grant access.

Inherits from identitySet.

Methods

None.

Properties

Property	Type	Description
agent	identity	The initiating agent principal, when recorded by the service.
application	identity	The recorded application identity. Inherited from identitySet.
device	identity	The recorded device identity. Inherited from identitySet.
user	identity	The recorded user identity. Inherited from identitySet.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.investigationIdentitySet",
  "user": {
    "@odata.type": "microsoft.graph.identity"
  },
  "application": {
    "@odata.type": "microsoft.graph.identity"
  },
  "device": {
    "@odata.type": "microsoft.graph.identity"
  },
  "agent": {
    "@odata.type": "microsoft.graph.identity"
  }
}