Retrieve a list of Microsoft Entra users who are at risk.
  • Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.
External DocumentationTo learn more, visit the Microsoft Entra ID documentation.

​
Parameters

ParameterDescription
FilterFilters results (rows).
Example: startswith(givenName,‘J’)
Page SizeSets the page size of results. The page size can be set up to a maximum of 500 results.

​
Example Output

{
	"@odata.context": "<string>",
	"@odata.nextLink": "<string>",
	"value": [
		{
			"id": "<string>",
			"isDeleted": true,
			"isProcessing": false,
			"riskLevel": "<string>",
			"riskState": "<string>",
			"riskDetail": "<string>",
			"riskLastUpdatedDateTime": "2023-12-04T16:36:34",
			"userDisplayName": "<string>",
			"userPrincipalName": "<string>"
		}
	]
}

​
Workflow Library Example

List Risky Users with Microsoft Entra Id and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop