Get Risky User - BlinkOps Documentation

Get details of a risky user given its Risky User ID.

Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.

External DocumentationTo learn more, visit the Microsoft Entra ID documentation.

Parameters

Parameter	Description
Risky User ID	The ID of the risky user to get details of. Can be retrieved from the `List Risky Users` action.

Example Output

{
	"value": [
		{
			"@odata.type": "#microsoft.graph.riskyUser",
			"id": "d1d4a5d4-a5d4-d1d4-d4a5-d4d1d4a5d4d1",
			"isDeleted": "Boolean",
			"isProcessing": "Boolean",
			"riskLastUpdatedDateTime": "String (timestamp)",
			"riskLevel": "String",
			"riskState": "String",
			"riskDetail": "String",
			"userDisplayName": "String",
			"userPrincipalName": "String"
		}
	]
}

Workflow Library Example

Get Risky User with Microsoft Entra Id and Send Results Via Email

Preview this Workflow on desktop

Dismiss Risky User Get User Details

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example