To learn more, visit the Microsoft Defender For Cloud Apps documentation.
Example Output
{ "data": [ { "type": 1, "status": null, "displayName": "johndoe@companyonmicrosoft.com", "id": "johndoe@companyonmicrosoft.com", "_id": "649bfdbfefd40883dbcf3ea7", "userGroups": [], "identifiers": [], "sid": null, "appData": { "name": "Microsoft 365", "appId": 11161, "saas": 11161, "instance": 0 }, "isAdmin": false, "isExternal": false, "email": "johndoe@companyonmicrosoft.com", "role": null, "organization": null, "domain": "havivblinkops.onmicrosoft.com", "scoreTrends": null, "subApps": [ { "appId": 20595, "name": "Microsoft Defender for Cloud Apps" } ], "threatScore": null, "idType": 1001, "isFake": false, "ii": "11161|0|johndoe@companyonmicrosoft.com", "actions": [ { "task_name": "UserAADSettingsLink", "display_title": "TASKS_ADALIBPY_USER_AAD_SETTINGS_LINK_DISPLAY_TITLE", "type": "user", "governance_type": "link", "bulk_support": null, "has_icon": true, "display_description": "https://portal.azure.com/#blade/Microsoft_AAD_IAM/UserDetailsMenuBlade/Profile/userId/johndoe@companyonmicrosoft.com", "bulk_display_description": null, "preview_only": false, "display_alert_text": null, "display_alert_success_text": null, "is_blocking": null, "confirm_button_style": "red", "optional_notify": null, "uiGovernanceCategory": null, "alert_display_title": null, "confirmation_button_text": null, "confirmation_link": null } ], "username": "{\"id\": \"johndoe@companyonmicrosoft.com\", \"saas\": 11161, \"inst\": 0}", "sctime": null } ], "hasNext": false, "max": 100, "total": 1, "moreThanTotal": false}
Workflow Library Example
List Entities with Microsoft Defender for Cloud Apps and Send Results Via Email
Preview this Workflow on desktop