> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Confirm Risky User Compromise

Confirm the risk of a risky user(s). This action sets the targeted user(s) risk level to high.

* **Least privileged** Microsoft Graph permission to access the action via **application**: `IdentityRiskyUser.ReadWrite.All`.

<Note>
  External Documentation

  To learn more, visit the [Microsoft Entra ID documentation](https://learn.microsoft.com/en-us/graph/api/riskyuser-confirmcompromised?view=graph-rest-1.0\&tabs=http).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter | Description                                                                                                          |
  | --------- | -------------------------------------------------------------------------------------------------------------------- |
  | User IDs  | A comma separated list of risky user IDs to confirm compromise. Can be retrieved from the `List Risky Users` action. |
</div>

## Workflow Library Example

[Confirm Risky User Compromise with Microsoft Entra Id and Send Results Via Email](https://library.blinkops.com/workflows/confirm-risky-user-compromise-with-microsoft-entra-id-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/confirm-risky-user-compromise-with-microsoft-entra-id-and-send-results-via-email/canvas" />
</div>