Confirm Risky User Compromise - BlinkOps Documentation

Confirm the risk of a risky user(s). This action sets the targeted user(s) risk level to high.

Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.

External DocumentationTo learn more, visit the Microsoft Entra ID documentation.

Parameters

Parameter	Description
User IDs	A comma separated list of risky user IDs to confirm compromise. Can be retrieved from the `List Risky Users` action.

Preview this Workflow on desktop