Confirm Risky User Compromise
Confirm the risk of a risky user(s). This action sets the targeted user(s) risk level to high.
- Least privileged Microsoft Graph permission to access the action via application:
IdentityRiskyUser.ReadWrite.All.
External Documentation
To learn more, visit the Microsoft Entra ID documentation.
Parameters
| Parameter | Description |
|---|---|
| User IDs | A comma separated list of risky user IDs to confirm compromise. Can be retrieved from the List Risky Users action. |
Workflow Library Example
Confirm Risky User Compromise with Microsoft Entra Id and Send Results Via Email
Preview this Workflow on desktop