Skip to content

sequentialactivationrenewalsalertincident.md

Latest commit

 

History

History
69 lines (58 loc) · 3.06 KB

sequentialactivationrenewalsalertincident.md

File metadata and controls

69 lines (58 loc) · 3.06 KB
title sequentialActivationRenewalsAlertIncident resource type
description Represents the details of an alert incident that is triggered if a user activates the same privileged role multiple times within the last 30 days.
author rkarim-ms
ms.localizationpriority medium
ms.subservice entra-id-governance
doc_type resourcePageType
toc.title Sequential activation
ms.date 09/19/2024

sequentialActivationRenewalsAlertIncident resource type

Namespace: microsoft.graph

[!INCLUDE beta-disclaimer]

Represents an alert incident that is triggered if a user activates the same privileged role multiple times within the last 30 days. The threshold that triggers this alert when it's reached is defined in the sequentialActivationRenewalsAlertConfiguration resource type.

Inherits from unifiedRoleManagementAlertIncident.

Methods

None.

For the list of API operations for managing this resource type, see the unifiedRoleManagementAlertIncident resource type.

Properties

Property Type Description
activationCount Int32 The length of sequential activation of the same role.
assigneeDisplayName String Display name of the subject that the incident applies to.
assigneeId String The identifier of the subject that the incident applies to.
assigneeUserPrincipalName String User principal name of the subject that the incident applies to. Applies to user principals.
id String The identifier for an alert incident. For example, it could be a role assignment id if the incident represents a role assignment Inherited from entity. Supports $filter (eq, ne).
roleDefinitionId String The identifier for the directory role definition that's in scope of this incident.
roleDisplayName String The display name for the directory role.
roleTemplateId String The globally unique identifier for the directory role.
sequenceEndDateTime DateTimeOffset End date time of the sequential activation event.
sequenceStartDateTime DateTimeOffset Start date time of the sequential activation event.

Relationships

None.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.sequentialActivationRenewalsAlertIncident",
  "id": "String (identifier)",
  "roleTemplateId": "String",
  "roleDisplayName": "String",
  "roleDefinitionId": "String",
  "assigneeId": "String",
  "assigneeDisplayName": "String",
  "assigneeUserPrincipalName": "String",
  "activationCount": "Integer",
  "sequenceStartDateTime": "String (timestamp)",
  "sequenceEndDateTime": "String (timestamp)"
}