overprovisionedAzureServicePrincipalFinding resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents over-provisioned Azure service prinicipals.

Inherits from identityFinding.

Methods

Method Return type Description
List overprovisionedAzureServicePrincipalFinding collection Get a list of the overprovisionedAzureServicePrincipalFinding objects and their properties.
Get overprovisionedAzureServicePrincipalFinding Read the properties and relationships of an overprovisionedAzureServicePrincipalFinding object.

Properties

Property Type Description
actionSummary actionSummary Contains information on authorization system actions granted to an identity and actions executed by this identity in the last 90 days. This property and its values are a snapshot as of when the finding was created and might not reflect the current values for the identity. Inherited from identityFinding.
createdDateTime DateTimeOffset Defines when the finding was created. Inherited from finding.
id String Unique identifier for the finding. Inherited from entity.
identityDetails identityDetails An identity's information details. Inherited from identityFinding.
permissionsCreepIndex permissionsCreepIndex A score for an identity's excessive permissions that is classified into three buckets: 0-33: low, 34-66: medium, 67-100: high. This property and its values are a snapshot as of when the finding was created and might not reflect the current score for the identity. Supports $filter (gt) and $orderby. Inherited from identityFinding.

Relationships

Relationship Type Description
identity authorizationSystemIdentity Represents an identity in an authorization system.Inherited from microsoft.graph.identityFinding

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.overprovisionedAzureServicePrincipalFinding",
  "id": "String (identifier)",
  "createdDateTime": "String (timestamp)",
  "permissionsCreepIndex": {
    "@odata.type": "microsoft.graph.permissionsCreepIndex"
  },
  "identityDetails": {
    "@odata.type": "#microsoft.graph.identityDetails"
  },
  "actionSummary": {
    "@odata.type": "microsoft.graph.actionSummary"
  }
}