Retrieve a list of Microsoft Entra users who are at risk.

  • Least privileged Microsoft Graph permission to access the action via application: IdentityRiskyUser.ReadWrite.All.

External Documentation

To learn more, visit the Microsoft Entra ID documentation.

​
Parameters

ParameterDescription
FilterFilters results (rows).Example: startswith(givenName,‘J’)
Page SizeSets the page size of results. The page size can be set up to a maximum of 500 results.

​
Example Output

{
	"value": [
		{
			"@odata.type": "#microsoft.graph.riskyUser",
			"id": "d1d4a5d4-a5d4-d1d4-d4a5-d4d1d4a5d4d1",
			"isDeleted": "Boolean",
			"isProcessing": "Boolean",
			"riskLastUpdatedDateTime": "String (timestamp)",
			"riskLevel": "String",
			"riskState": "String",
			"riskDetail": "String",
			"userDisplayName": "String",
			"userPrincipalName": "String"
		}
	]
}

​
Workflow Library Example

List Risky Users with Microsoft Entra Id and Send Results Via Email

Preview this Workflow on desktop