| title | user resource type (account in Microsoft Defender for Identity) |
|---|---|
| description | User fields |
| author | SamuelBenichou |
| ms.date | 06/22/2025 |
| ms.localizationpriority | medium |
| ms.subservice | security |
| doc_type | resourcePageType |
Namespace: microsoft.graph.security
[!INCLUDE beta-disclaimer]
Represents details of a user identity account.
Inherits from microsoft.graph.security.identityAccounts.
| Property | Type | Description |
|---|---|---|
| accounts | microsoft.graph.security.account collection | Collection of accounts of the identity in different identity providers. Inherited from microsoft.graph.security.identityAccounts. |
| cloudSecurityIdentifier | String | The cloud security identifier of the identity account. Inherited from microsoft.graph.security.identityAccounts. |
| displayName | String | The display name of the identity account. Inherited from microsoft.graph.security.identityAccounts. |
| domain | String | The domain name of the identity account. Inherited from microsoft.graph.security.identityAccounts. |
| emailAddress | String | Email address of the user. |
| id | String | Unique identifier to represent the identity account. Inherited from microsoft.graph.entity. Inherits from entity |
| isEnabled | Boolean | Boolean indicating if the identity account is enabled. Inherited from microsoft.graph.security.identityAccounts. |
| onPremisesSecurityIdentifier | String | The on-premises security identifier of the identity account. Inherited from microsoft.graph.security.identityAccounts. |
| userPrincipalName | String | The user principal name. |
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.user",
"id": "String (identifier)",
"displayName": "String",
"domain": "String",
"onPremisesSecurityIdentifier": "String",
"cloudSecurityIdentifier": "String",
"isEnabled": "Boolean",
"accounts": [
{
"@odata.type": "microsoft.graph.security.account"
}
],
"emailAddress": "String",
"userPrincipalName": "String"
}