List Risky Users

Retrieve a list of Microsoft Entra users who are at risk.

Requires the IdentityRiskyUser.Read.All permission.

External Documentation

To learn more, visit the Microsoft Entra ID documentation.

Parameters

Parameter	Description
Filter	Filters results (rows).Example: startswith(givenName,'J')
Page Size	Sets the page size of results. The page size can be set up to a maximum of 500 results.

Example Output

{
    "value": [
        {
            "@odata.type": "#microsoft.graph.riskyUser",
            "id": "d1d4a5d4-a5d4-d1d4-d4a5-d4d1d4a5d4d1",
            "isDeleted": "Boolean",
            "isProcessing": "Boolean",
            "riskLastUpdatedDateTime": "String (timestamp)",
            "riskLevel": "String",
            "riskState": "String",
            "riskDetail": "String",
            "userDisplayName": "String",
            "userPrincipalName": "String"
        }
    ]
}

Workflow Library Example

List Risky Users with Microsoft Entra Id and Send Results Via Email

Preview this Workflow on desktop