To learn more, visit the Microsoft Defender For Cloud Apps documentation.

​
Example Output​

{    "data": [        {            "type": 1,            "status": null,            "displayName": "johndoe@companyonmicrosoft.com",            "id": "johndoe@companyonmicrosoft.com",            "_id": "649bfdbfefd40883dbcf3ea7",            "userGroups": [],            "identifiers": [],            "sid": null,            "appData": {                "name": "Microsoft 365",                "appId": 11161,                "saas": 11161,                "instance": 0            },            "isAdmin": false,            "isExternal": false,            "email": "johndoe@companyonmicrosoft.com",            "role": null,            "organization": null,            "domain": "havivblinkops.onmicrosoft.com",            "scoreTrends": null,            "subApps": [                {                    "appId": 20595,                    "name": "Microsoft Defender for Cloud Apps"                }            ],            "threatScore": null,            "idType": 1001,            "isFake": false,            "ii": "11161|0|johndoe@companyonmicrosoft.com",            "actions": [                {                    "task_name": "UserAADSettingsLink",                    "display_title": "TASKS_ADALIBPY_USER_AAD_SETTINGS_LINK_DISPLAY_TITLE",                    "type": "user",                    "governance_type": "link",                    "bulk_support": null,                    "has_icon": true,                    "display_description": "https://portal.azure.com/#blade/Microsoft_AAD_IAM/UserDetailsMenuBlade/Profile/userId/johndoe@companyonmicrosoft.com",                    "bulk_display_description": null,                    "preview_only": false,                    "display_alert_text": null,                    "display_alert_success_text": null,                    "is_blocking": null,                    "confirm_button_style": "red",                    "optional_notify": null,                    "uiGovernanceCategory": null,                    "alert_display_title": null,                    "confirmation_button_text": null,                    "confirmation_link": null                }            ],            "username": "{\"id\": \"johndoe@companyonmicrosoft.com\", \"saas\": 11161, \"inst\": 0}",            "sctime": null        }    ],    "hasNext": false,    "max": 100,    "total": 1,    "moreThanTotal": false}

​
Workflow Library Example​

List Entities with Microsoft Defender for Cloud Apps and Send Results Via Email

Preview this Workflow on desktop

List AlertsList Files