Skip to main content

List Entities

Retrieve a list of entities.

External Documentation

To learn more, visit the Microsoft Defender For Cloud Apps documentation.

Example Output​

{
    "data": [
        {
            "type": 1,
            "status": null,
            "displayName": "johndoe@companyonmicrosoft.com",
            "id": "johndoe@companyonmicrosoft.com",
            "_id": "649bfdbfefd40883dbcf3ea7",
            "userGroups": [],
            "identifiers": [],
            "sid": null,
            "appData": {
                "name": "Microsoft 365",
                "appId": 11161,
                "saas": 11161,
                "instance": 0
            },
            "isAdmin": false,
            "isExternal": false,
            "email": "johndoe@companyonmicrosoft.com",
            "role": null,
            "organization": null,
            "domain": "havivblinkops.onmicrosoft.com",
            "scoreTrends": null,
            "subApps": [
                {
                    "appId": 20595,
                    "name": "Microsoft Defender for Cloud Apps"
                }
            ],
            "threatScore": null,
            "idType": 1001,
            "isFake": false,
            "ii": "11161|0|johndoe@companyonmicrosoft.com",
            "actions": [
                {
                    "task_name": "UserAADSettingsLink",
                    "display_title": "TASKS_ADALIBPY_USER_AAD_SETTINGS_LINK_DISPLAY_TITLE",
                    "type": "user",
                    "governance_type": "link",
                    "bulk_support": null,
                    "has_icon": true,
                    "display_description": "https://portal.azure.com/#blade/Microsoft_AAD_IAM/UserDetailsMenuBlade/Profile/userId/johndoe@companyonmicrosoft.com",
                    "bulk_display_description": null,
                    "preview_only": false,
                    "display_alert_text": null,
                    "display_alert_success_text": null,
                    "is_blocking": null,
                    "confirm_button_style": "red",
                    "optional_notify": null,
                    "uiGovernanceCategory": null,
                    "alert_display_title": null,
                    "confirmation_button_text": null,
                    "confirmation_link": null
                }
            ],
            "username": "{\"id\": \"johndoe@companyonmicrosoft.com\", \"saas\": 11161, \"inst\": 0}",
            "sctime": null
        }
    ],
    "hasNext": false,
    "max": 100,
    "total": 1,
    "moreThanTotal": false
}

Workflow Library Example​

List Entities with Microsoft Defender for Cloud Apps and Send Results Via Email

Workflow LibraryPreview this Workflow on desktop