List Risky Users - BlinkOps Documentation

Retrieve a list of Microsoft Entra users who are at risk.

Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.

External DocumentationTo learn more, visit the Microsoft Entra ID documentation.

Parameters

Parameter	Description
Filter	Filters results (rows). Example: startswith(givenName,‘J’)
Page Size	Sets the page size of results. The page size can be set up to a maximum of 500 results.
Return All Pages	Automatically fetch all resources, page by page.

Example Output

{
	"@odata.context": "<string>",
	"@odata.nextLink": "<string>",
	"value": [
		{
			"id": "<string>",
			"isDeleted": true,
			"isProcessing": false,
			"riskLevel": "<string>",
			"riskState": "<string>",
			"riskDetail": "<string>",
			"riskLastUpdatedDateTime": "2023-12-04T16:36:34",
			"userDisplayName": "<string>",
			"userPrincipalName": "<string>"
		}
	]
}

Workflow Library Example

List Risky Users with Microsoft Entra Id and Send Results Via Email

Preview this Workflow on desktop

List Groups List User Authentication Methods

⌘I

​Parameters

​Example Output

​Workflow Library Example

Parameters

Example Output

Workflow Library Example