Skip to content

redundantassignmentalertconfiguration.md

Latest commit

 

History

History
62 lines (52 loc) · 3.26 KB

redundantassignmentalertconfiguration.md

File metadata and controls

62 lines (52 loc) · 3.26 KB
title redundantAssignmentAlertConfiguration resource type
description Represents an alert configuration that is triggered if a user goes over a specified number of days without activating a role.
author rkarim-ms
ms.localizationpriority medium
ms.subservice entra-id-governance
doc_type resourcePageType
toc.title Redundant assignment
ms.date 09/19/2024

redundantAssignmentAlertConfiguration resource type

Namespace: microsoft.graph

[!INCLUDE beta-disclaimer]

Represents an alert configuration that is triggered if a user goes over a specified number of days without activating a role. Assigning users privileged roles that they don't need increases the risks of a security attack. It's also easier for security threats to remain unnoticed in accounts that aren't actively used.

Inherits from unifiedRoleManagementAlertConfiguration.

Methods

None.

For the list of API operations for managing this resource type, see the unifiedRoleManagementAlertConfiguration resource type.

Properties

Property Type Description
alertDefinitionId String The identifier of an alert definition. Inherited from unifiedRoleManagementAlertConfiguration. Supports $filter (eq, ne).
duration Duration The number of days without activation to look back on from current timestamp.
id String The identifier of the alert configuration. Inherited from entity.
isEnabled Boolean true if the alert is enabled. Setting it to false disables PIM scanning the tenant to identify instances that trigger this alert. Inherited from unifiedRoleManagementAlertConfiguration.
scopeId String The identifier of the scope to which the alert is related. Only / is supported to represent the tenant scope. Inherited from unifiedRoleManagementAlertConfiguration. Supports $filter (eq, ne).
scopeType String The type of scope where the alert is created. DirectoryRole is the only currently supported scope type for Microsoft Entra roles. Inherited from unifiedRoleManagementAlertConfiguration.

Relationships

Relationship Type Description
alertDefinition unifiedRoleManagementAlertDefinition The definition of the alert that contains its description, impact, and measures to mitigate or prevent it. Supports $expand.

JSON representation

The following JSON representation shows the resource type.

{
  "@odata.type": "#microsoft.graph.redundantAssignmentAlertConfiguration",
  "id": "String (identifier)",
  "alertDefinitionId": "String",
  "scopeType": "String",
  "scopeId": "String",
  "isEnabled": "Boolean",
  "duration": "String (duration)"
}