Skip to content

security-markuserascompromisedresponseaction.md

Latest commit

 

History

History
43 lines (34 loc) · 2.16 KB

security-markuserascompromisedresponseaction.md

File metadata and controls

43 lines (34 loc) · 2.16 KB
title markUserAsCompromisedResponseAction resource type
description Describes a response action that sets the user's risk level to 'high' in Microsoft Entra ID.
author mmekler
ms.localizationpriority medium
ms.subservice security
doc_type resourcePageType
ms.date 03/06/2024

markUserAsCompromisedResponseAction resource type

Namespace: microsoft.graph.security

[!INCLUDE beta-disclaimer]

Describes a response action that sets the user's risk level to "high" in Microsoft Entra ID. This response action sets the user's risk level to high in Microsoft Entra ID, which triggers the identity protection policies for a high risk level.

Inherits from microsoft.graph.security.responseAction.

Properties

Property Type Description
identifier microsoft.graph.security.markUserAsCompromisedEntityIdentifier Unique identifier for the response action. The possible values are: accountObjectId, initiatingProcessAccountObjectId, servicePrincipalId, recipientObjectId, unknownFutureValue.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.security.markUserAsCompromisedResponseAction",
  "identifier": "String"
}