Retrieve a list of entities.

External Documentation

To learn more, visit the Microsoft Defender For Cloud Apps documentation.

Example Output

{
	"data": [
		{
			"type": 1,
			"status": null,
			"displayName": "johndoe@companyonmicrosoft.com",
			"id": "johndoe@companyonmicrosoft.com",
			"_id": "649bfdbfefd40883dbcf3ea7",
			"userGroups": [],
			"identifiers": [],
			"sid": null,
			"appData": {
				"name": "Microsoft 365",
				"appId": 11161,
				"saas": 11161,
				"instance": 0
			},
			"isAdmin": false,
			"isExternal": false,
			"email": "johndoe@companyonmicrosoft.com",
			"role": null,
			"organization": null,
			"domain": "havivblinkops.onmicrosoft.com",
			"scoreTrends": null,
			"subApps": [
				{
					"appId": 20595,
					"name": "Microsoft Defender for Cloud Apps"
				}
			],
			"threatScore": null,
			"idType": 1001,
			"isFake": false,
			"ii": "11161|0|johndoe@companyonmicrosoft.com",
			"actions": [
				{
					"task_name": "UserAADSettingsLink",
					"display_title": "TASKS_ADALIBPY_USER_AAD_SETTINGS_LINK_DISPLAY_TITLE",
					"type": "user",
					"governance_type": "link",
					"bulk_support": null,
					"has_icon": true,
					"display_description": "https://portal.azure.com/#blade/Microsoft_AAD_IAM/UserDetailsMenuBlade/Profile/userId/johndoe@companyonmicrosoft.com",
					"bulk_display_description": null,
					"preview_only": false,
					"display_alert_text": null,
					"display_alert_success_text": null,
					"is_blocking": null,
					"confirm_button_style": "red",
					"optional_notify": null,
					"uiGovernanceCategory": null,
					"alert_display_title": null,
					"confirmation_button_text": null,
					"confirmation_link": null
				}
			],
			"username": "{\"id\": \"johndoe@companyonmicrosoft.com\", \"saas\": 11161, \"inst\": 0}",
			"sctime": null
		}
	],
	"hasNext": false,
	"max": 100,
	"total": 1,
	"moreThanTotal": false
}

Workflow Library Example

List Entities with Microsoft Defender for Cloud Apps and Send Results Via Email

Preview this Workflow on desktop