Edit

Share via

riskServicePrincipalActivity resource type

  • Article

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents the risk activity of a Microsoft Entra service principal as determined by Microsoft Entra ID Protection.

Properties

Property Type Description
riskEventTypes String collection The type of risk event detected. The possible values are: investigationsThreatIntelligence, generic, adminConfirmedServicePrincipalCompromised, suspiciousSignins, leakedCredentials, anomalousServicePrincipalActivity, maliciousApplication, suspiciousApplication.
detail riskDetail Details of the detected risk.
Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without that license will be returned hidden.
The possible values are: none, hidden, adminConfirmedServicePrincipalCompromised, adminDismissedAllRiskForServicePrincipal. Use the Prefer: include-unknown-enum-members request header to get the following value(s) in this evolvable enum: adminConfirmedServicePrincipalCompromised , adminDismissedAllRiskForServicePrincipal.

Relationships

None.

JSON representation

{
    "riskEventTypes": ["String"],
    "detail": "String"
}