Get Risky User - BlinkOps Documentation

Get details of a risky user given its Risky User ID.

Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.

External DocumentationTo learn more, visit the Microsoft Entra ID documentation.

Parameters

Parameter	Description
Risky User ID	The ID of the risky user to get details of. Can be retrieved from the `List Risky Users` action.

Example Output

{
	"value": [
		{
			"@odata.type": "#microsoft.graph.riskyUser",
			"id": "d1d4a5d4-a5d4-d1d4-d4a5-d4d1d4a5d4d1",
			"isDeleted": "Boolean",
			"isProcessing": "Boolean",
			"riskLastUpdatedDateTime": "String (timestamp)",
			"riskLevel": "String",
			"riskState": "String",
			"riskDetail": "String",
			"userDisplayName": "String",
			"userPrincipalName": "String"
		}
	]
}