Azure Active Directory

This article lists the currently supported Azure Active Directory reports with all of the properties that Syskit Point loads.

Reports

Applications

Name
Description

Name

Name of the app.

Available To Other Tenants

Indicates whether this application is available in other tenants.

Group Membership Claims

A bitmask that configures the groups claim issued in a user or OAuth 2.0 access token that the application expects. The bitmask values are: 0: None, 1: Security groups and Azure AD roles, 2: Reserved, and 4: Reserved. Setting the bitmask to 7 will get all of the security groups, distribution groups, and Azure AD directory roles that the signed-in user is a member of.

Homepage

The URL to the application's homepage.

Identifier Uris

User-defined URI(s) that uniquely identify a Web application within its Azure AD tenant, or within a verified custom domain.

Known Client Applications

Client applications that are tied to this resource application.

Logout URL

The logout url for this application.

Oauth 2 Allow Implicit Flow

Specifies whether this web application can request OAuth2.0 implicit flow tokens. The default is false.

Oauth 2 Allow Url Path Matching

Specifies whether, as part of OAuth 2.0 token requests, Azure AD will allow path matching of the redirect URI against the application's replyUrls. The default is false.

Oauth 2 Require Post Response

Set this to true if an Oauth2 post response is required.

Public Client

Specifies whether this application is a public client (such as an installed application running on a mobile device). Default is false.

Reply URLs

Specifies the URLs that user tokens are sent to for sign in, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to.

Saml Metadata Url

The URL to the SAML metadata for the application.

Group Lifecycle Policy

Name
Description

Group Lifetime In Days

The number of days a group can exist before it needs to be renewed.

Managed Group Types

This property allows the admin to select which office 365 groups the policy will apply to. 'None' will create the policy in a disabled state. 'All' will apply the policy to every Office 365 group in the tenant. 'Selected' will allow the admin to choose specific Office 365 groups that the policy will apply to.

Alternate Notification Emails

Notification emails for groups that have no owners will be sent to these email addresses.

Group Naming Policy

Name
Description

Prefix Suffix Naming Requirement

Prefixes and suffixes to add to the group name.

Custom Blocked Words List

Comma delimited list of words that should be blocked from being included in groups' names.

Group Settings

Name
Description

Enable Group Creation

The flag indicating whether Office 365 group creation is allowed in the directory by non-admin users. This setting does not require an Azure Active Directory Premium P1 license.

Allow Guests To Be Group Owner

Boolean indicating whether or not a guest user can be an owner of groups.

Allow Guests To Access Groups

Boolean indicating whether or not a guest user can have access to Office 365 groups content. This setting does not require an Azure Active Directory Premium P1 license.

Guest Usage Guidelines Url

The url of a link to the guest usage guidelines.

Group Creation Allowed Group Name

Name of the security group for which the members are allowed to create Office 365 groups even when 'Enable Group Creation' == false.

Allow To Add Guests

A boolean indicating whether or not is allowed to add guests to this directory.

Usage Guidelines Url

A link to the Group Usage Guidelines.

Policies

Name
Description

Name

DisplayName of the Policy.

Alternative Identifier

AlternativeIdentifier Policy.

Definition

Definition of the Policy.

Is Organization Default

IsOrganizationDefault of the Policy.

Type

Type of the Policy.

Role Definitions

Name
Description

Name

Specifies a display name for the role definition.

Description

Specifies a description for the role definition.

Resource Scopes

Specifies the resource scopes for the role definition.

Is Enabled

Specifies whether the role definition is enabled.

Role Permissions

Specifies permissions for the role definition.

Template Id

Specifies template id for the role definition.

Version

Specifies version for the role definition.

Service Principals

Name
Description

Name

Displayname of the aad service principal.

Application ID

The unique identifier for the associated application.

Object ID

The 'Object ID' of the aad service principal.

Alternative Names

The atlernative names for this service principal.

Account Enabled

True if the service principal account is enabled; otherwise, false.

App Role Assignment Required

Indicates whether an application role assignment is required.

Error Url

Specifies the error URL of the aad service principal.

Homepage

Specifies the homepage of the aad service principal.

Logout Url

Specifies the 'Logout Url' of the aad service principal.

Publisher Name

Specifies the 'Publisher Name' of the aad service principal.

Reply Urls

The URLs that user tokens are sent to for sign in with the associated application, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to for the associated application.

Saml Metadata Url

The URL for the SAML metadata of the aad service principal.

Service Principal Names

Specifies an array of service principal names. Based on the identifierURIs collection, plus the application's appId property, these URIs are used to reference an application's service principal.

Service Principal Type

The type of the service principal.

Tags

Tags linked to this service principal.Note that if you intend for this service principal to show up in the All Applications list in the admin portal, you need to set this value to {WindowsAzureActiveDirectoryIntegratedApp}.

Tenant Details

Name
Description

Marketing Notification Emails

Email-addresses from the people who should receive Marketing Notifications.

Security Compliance Notification Mails

Email-addresses from the people who should receive Security Compliance Notifications.

Security Compliance Notification Phones

Phone Numbers from the people who should receive Security Notifications.

Technical Notification Mails

Email-addresses from the people who should receive Technical Notifications.

Conditional Access ⯈ Conditional Access Policies

Name
Description

Name

DisplayName of the AAD CA Policy.

State

Specifies the 'State' of the Policy.

Included Users

Users in scope of the Policy.

Excluded Users

Users out of scope of the Policy.

Included Groups

Groups in scope of the Policy.

Excluded Groups

Groups out of scope of the Policy.

Included Applications

Cloud Apps in scope of the Policy.

Excluded Applications

Cloud Apps out of scope of the Policy.

Included User Actions

User Actions in scope of the Policy.

Included Roles

AAD Admin Roles in scope of the Policy.

Excluded Roles

AAD Admin Roles out of scope of the Policy.

Included Platforms

Client Device Platforms in scope of the Policy.

Excluded Platforms

Client Device Platforms out of scope of the Policy.

Included Locations

AAD Named Locations in scope of the Policy.

Excluded Locations

AAD Named Locations out of scope of the Policy.

Included Device States

Client Device Compliance states in scope of the Policy.

Excluded Device States

Client Device Compliance states out of scope of the Policy.

User Risk Levels

AAD Identity Protection User Risk Levels in scope of the Policy.

Sign In Risk Levels

AAD Identity Protection Sign-in Risk Levels in scope of the Policy.

Client App Types

Client App types in scope of the Policy.

Grant Control Operator

Operator to be used for Grant Controls.

Built In Controls

List of built-in Grant Controls to be applied by the Policy.

Application Enforced Restrictions Is Enabled

Specifies, whether Application Enforced Restrictions are enabled in the Policy.

Cloud App Security Is Enabled

Specifies, whether Cloud App Security is enforced by the Policy.

Cloud App Security Type

Specifies, what Cloud App Security control is enforced by the Policy.

Sign In Frequency Value

Sign in frequency time in the given unit to be enforced by the policy.

Sign In Frequency Type

Sign in frequency unit (days/hours) to be interpreted by the policy.

Sign In Frequency Is Enabled

Specifies, whether sign-in frequency is enforced by the Policy.

Persistent Browser Is Enabled

Specifies, whether Browser Persistence is controlled by the Policy.

Persistent Browser Mode

Specifies, what Browser Persistence control is enforced by the Policy.

Conditional Access ⯈ Named Locations

Name
Description

Name

Specifies the Display Name of a Named Location policy in Azure Active Directory.

Ip Ranges

Specifies the IP ranges of the Named Location policy in Azure Active Directory.

Is Trusted

Specifies the isTrusted value for the Named Location policy in Azure Active Directory.

Countries And Regions

Specifies the countries and regions for the Named Location policy in Azure Active Directory.

Include Unknown Countries And Regions

Specifies the includeUnknownCountriesAndRegions value for the Named Location policy in Azure Active Directory.

Odata Type

Specifies the Odata Type of a Named Location policy object in Azure Active Directory.

Last updated