Edit

Share via

userEvidence resource type

  • Article

Namespace: microsoft.graph.security

A user that is reported in the alert as evidence.

Inherits from alertEvidence.

Properties

Property Type Description
userAccount microsoft.graph.security.userAccount The user account details.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.userEvidence",
  "createdDateTime": "String (timestamp)",
  "verdict": "String",
  "remediationStatus": "String",
  "remediationStatusDetails": "String",
  "roles": [
    "String"
  ],
  "tags": [
    "String"
  ],
  "userAccount": {
    "@odata.type": "microsoft.graph.security.userAccount"
  }
}