> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# List Risky Users

Retrieve a list of Microsoft Entra users who are at risk.

* **Least privileged** Microsoft Graph permission to access the action via **application**: `IdentityRiskyUser.ReadWrite.All`.

<Note>
  External Documentation

  To learn more, visit the [Microsoft Entra ID documentation](https://learn.microsoft.com/en-us/graph/api/riskyuser-list?view=graph-rest-1.0\&tabs=http).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter        | Description                                                                             |
  | ---------------- | --------------------------------------------------------------------------------------- |
  | Filter           | Filters results (rows).<br />**Example:** startswith(givenName,'J')                     |
  | Page Size        | Sets the page size of results. The page size can be set up to a maximum of 500 results. |
  | Return All Pages | Automatically fetch all resources, page by page.                                        |
</div>

## Example Output

```json theme={"dark"}
{
	"@odata.context": "<string>",
	"@odata.nextLink": "<string>",
	"value": [
		{
			"id": "<string>",
			"isDeleted": true,
			"isProcessing": false,
			"riskLevel": "<string>",
			"riskState": "<string>",
			"riskDetail": "<string>",
			"riskLastUpdatedDateTime": "2023-12-04T16:36:34",
			"userDisplayName": "<string>",
			"userPrincipalName": "<string>"
		}
	]
}
```

## Workflow Library Example

[List Risky Users with Microsoft Entra Id and Send Results Via Email](https://library.blinkops.com/workflows/list-risky-users-with-microsoft-entra-id-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/list-risky-users-with-microsoft-entra-id-and-send-results-via-email/canvas" />
</div>
