userSecurityState resource type

Namespace: microsoft.graph

Contains stateful information about the user account.

Properties

Property	Type	Description
aadUserId	String	AAD User object identifier (GUID) - represents the physical/multi-account user entity.
accountName	String	Account name of user account (without Active Directory domain or DNS domain) - (also called mailNickName).
domainName	String	NetBIOS/Active Directory domain of user account (that is, domain\account format).
emailRole	emailRole	For email-related alerts - user account's email 'role'. Possible values are: unknown, sender, recipient.
isVpn	Boolean	Indicates whether the user logged on through a VPN.
logonDateTime	DateTimeOffset	Time at which the sign-in occurred. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.
logonId	String	User sign-in ID.
logonIp	String	IP Address the sign-in request originated from.
logonLocation	String	Location (by IP address mapping) associated with a user sign-in event by this user.
logonType	logonType	Method of user sign in. Possible values are: unknown, interactive, remoteInteractive, network, batch, service.
onPremisesSecurityIdentifier	String	Active Directory (on-premises) Security Identifier (SID) of the user.
riskScore	String	Provider-generated/calculated risk score of the user account. Recommended value range of 0-1, which equates to a percentage.
userAccountType	userAccountSecurityType	User account type (group membership), per Windows definition. Possible values are: unknown, standard, power, administrator.
userPrincipalName	String	User sign-in name - internet format: (user account name)@(user account DNS domain name).

JSON representation

The following is a JSON representation of the resource.

{
  "aadUserId": "String",
  "accountName": "String",
  "domainName": "String",
  "emailRole": "@odata.type: microsoft.graph.emailRole",
  "isVpn": true,
  "logonDateTime": "String (timestamp)",
  "logonId": "String",
  "logonIp": "String",
  "logonLocation": "String",
  "logonType": "@odata.type: microsoft.graph.logonType",
  "onPremisesSecurityIdentifier": "String",
  "riskScore": "String",
  "userAccountType": "@odata.type: microsoft.graph.userAccountSecurityType",
  "userPrincipalName": "String"
}