Edit

Share via

privilegeEscalationUserFinding resource type

  • Article

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents findings for a list of users who can potentially exploit of a misconfigured IAM policy or configuration oversight to gain elevated access to other permissions and resources in AWS and GCP.

Inherits from privilegeEscalationFinding.

Methods

Method Return type Description
List privilegeEscalationUserFinding collection Get a list of the privilegeEscalationUserFinding objects and their properties.
Get privilegeEscalationUserFinding Read the properties and relationships of a privilegeEscalationUserFinding object.

Properties

Property Type Description
createdDateTime DateTimeOffset Defines when the finding was created. Inherited from finding.
id String Unique identifier for the finding. Inherited from entity.
identityDetails identityDetails An identity's information details. Inherited from privilegeEscalationFinding.
permissionsCreepIndex permissionsCreepIndex A score for an identity's excessive permissions that is classified into three buckets: 0-33: low, 34-66: medium, 67-100: high. This property and its values are a snapshot as of when the finding was created and might not reflect the current score for the identity. Supports $filter (gt) and $orderby. Inherited from privilegeEscalationFinding.

Relationships

Relationship Type Description
identity authorizationSystemIdentity Represents an identity in an authorization system onboarded to Permissions Management. Inherited from identityFinding. Autoexpanded by default.
privilegeEscalationDetails privilegeEscalation collection The list of escalations that the identity is capable of performing. Inherited from microsoft.graph.privilegeEscalationFinding

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.privilegeEscalationUserFinding",
  "id": "String (identifier)",
  "createdDateTime": "String (timestamp)",
  "permissionsCreepIndex": {
    "@odata.type": "microsoft.graph.permissionsCreepIndex"
  },
  "identityDetails": {
    "@odata.type": "#microsoft.graph.identityDetails"
  }
}