Get details of a risky user given its Risky User ID.
  • Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.
External DocumentationTo learn more, visit the Microsoft Entra ID documentation.

​
Parameters

ParameterDescription
Risky User IDThe ID of the risky user to get details of. Can be retrieved from the List Risky Users action.

​
Example Output

{
	"value": [
		{
			"@odata.type": "#microsoft.graph.riskyUser",
			"id": "d1d4a5d4-a5d4-d1d4-d4a5-d4d1d4a5d4d1",
			"isDeleted": "Boolean",
			"isProcessing": "Boolean",
			"riskLastUpdatedDateTime": "String (timestamp)",
			"riskLevel": "String",
			"riskState": "String",
			"riskDetail": "String",
			"userDisplayName": "String",
			"userPrincipalName": "String"
		}
	]
}

​
Workflow Library Example

Get Risky User with Microsoft Entra Id and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop