unifiedRoleManagementAlertIncident resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

An abstract type that represents the details of an incident as part of a security alert in Privileged Identity Management (PIM) for Microsoft Entra roles.

This abstract type is inherited by the following derived types:

• invalidLicenseAlertIncident
• noMfaOnRoleActivationAlertIncident
• redundantAssignmentAlertIncident
• rolesAssignedOutsidePrivilegedIdentityManagementAlertIncident
• sequentialActivationRenewalsAlertIncident
• staleSignInAlertIncident
• tooManyGlobalAdminsAssignedToTenantAlertIncident

Inherits from entity.

For more information about working with security alerts for Microsoft Entra roles using PIM APIs, see Manage security alerts for Microsoft Entra roles using PIM APIs in Microsoft Graph.

Methods

Method	Return type	Description
List alertIncidents	unifiedRoleManagementAlertIncident collection	Get a list of the unifiedRoleManagementAlertIncident objects and their properties.
Get unifiedRoleManagementAlertIncident	unifiedRoleManagementAlertIncident	Read the properties and relationships of an unifiedRoleManagementAlertIncident object.
remediate	None	Remediate or mitigate an incident of an alert.

Properties

Property	Type	Description
id	String	The identifier of the alert incident. Inherited from entity. Supports $filter (eq, ne).

Relationships

None.

JSON representation

The following is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.unifiedRoleManagementAlertIncident",
  "id": "String (identifier)"
}

Related content

• Manage security alerts for Microsoft Entra roles using PIM APIs in Microsoft Graph.