Azure Active Directory
This article lists the currently supported Azure Active Directory reports with all of the properties that Syskit Point loads.
Reports
Applications
Name
Name of the app.
Available To Other Tenants
Indicates whether this application is available in other tenants.
Group Membership Claims
A bitmask that configures the groups claim issued in a user or OAuth 2.0 access token that the application expects. The bitmask values are: 0: None, 1: Security groups and Azure AD roles, 2: Reserved, and 4: Reserved. Setting the bitmask to 7 will get all of the security groups, distribution groups, and Azure AD directory roles that the signed-in user is a member of.
Homepage
The URL to the application's homepage.
Identifier Uris
User-defined URI(s) that uniquely identify a Web application within its Azure AD tenant, or within a verified custom domain.
Known Client Applications
Client applications that are tied to this resource application.
Logout URL
The logout url for this application.
Oauth 2 Allow Implicit Flow
Specifies whether this web application can request OAuth2.0 implicit flow tokens. The default is false.
Oauth 2 Allow Url Path Matching
Specifies whether, as part of OAuth 2.0 token requests, Azure AD will allow path matching of the redirect URI against the application's replyUrls. The default is false.
Oauth 2 Require Post Response
Set this to true if an Oauth2 post response is required.
Public Client
Specifies whether this application is a public client (such as an installed application running on a mobile device). Default is false.
Reply URLs
Specifies the URLs that user tokens are sent to for sign in, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to.
Saml Metadata Url
The URL to the SAML metadata for the application.
Group Lifecycle Policy
Group Lifetime In Days
The number of days a group can exist before it needs to be renewed.
Managed Group Types
This property allows the admin to select which office 365 groups the policy will apply to. 'None' will create the policy in a disabled state. 'All' will apply the policy to every Office 365 group in the tenant. 'Selected' will allow the admin to choose specific Office 365 groups that the policy will apply to.
Alternate Notification Emails
Notification emails for groups that have no owners will be sent to these email addresses.
Group Naming Policy
Prefix Suffix Naming Requirement
Prefixes and suffixes to add to the group name.
Custom Blocked Words List
Comma delimited list of words that should be blocked from being included in groups' names.
Group Settings
Enable Group Creation
The flag indicating whether Office 365 group creation is allowed in the directory by non-admin users. This setting does not require an Azure Active Directory Premium P1 license.
Allow Guests To Be Group Owner
Boolean indicating whether or not a guest user can be an owner of groups.
Allow Guests To Access Groups
Boolean indicating whether or not a guest user can have access to Office 365 groups content. This setting does not require an Azure Active Directory Premium P1 license.
Guest Usage Guidelines Url
The url of a link to the guest usage guidelines.
Group Creation Allowed Group Name
Name of the security group for which the members are allowed to create Office 365 groups even when 'Enable Group Creation' == false.
Allow To Add Guests
A boolean indicating whether or not is allowed to add guests to this directory.
Usage Guidelines Url
A link to the Group Usage Guidelines.
Policies
Name
DisplayName of the Policy.
Alternative Identifier
AlternativeIdentifier Policy.
Definition
Definition of the Policy.
Is Organization Default
IsOrganizationDefault of the Policy.
Type
Type of the Policy.
Role Definitions
Name
Specifies a display name for the role definition.
Description
Specifies a description for the role definition.
Resource Scopes
Specifies the resource scopes for the role definition.
Is Enabled
Specifies whether the role definition is enabled.
Role Permissions
Specifies permissions for the role definition.
Template Id
Specifies template id for the role definition.
Version
Specifies version for the role definition.
Service Principals
Name
Displayname of the aad service principal.
Application ID
The unique identifier for the associated application.
Object ID
The 'Object ID' of the aad service principal.
Alternative Names
The atlernative names for this service principal.
Account Enabled
True if the service principal account is enabled; otherwise, false.
App Role Assignment Required
Indicates whether an application role assignment is required.
Error Url
Specifies the error URL of the aad service principal.
Homepage
Specifies the homepage of the aad service principal.
Logout Url
Specifies the 'Logout Url' of the aad service principal.
Publisher Name
Specifies the 'Publisher Name' of the aad service principal.
Reply Urls
The URLs that user tokens are sent to for sign in with the associated application, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to for the associated application.
Saml Metadata Url
The URL for the SAML metadata of the aad service principal.
Service Principal Names
Specifies an array of service principal names. Based on the identifierURIs collection, plus the application's appId property, these URIs are used to reference an application's service principal.
Service Principal Type
The type of the service principal.
Tags
Tags linked to this service principal.Note that if you intend for this service principal to show up in the All Applications list in the admin portal, you need to set this value to {WindowsAzureActiveDirectoryIntegratedApp}.
Tenant Details
Marketing Notification Emails
Email-addresses from the people who should receive Marketing Notifications.
Security Compliance Notification Mails
Email-addresses from the people who should receive Security Compliance Notifications.
Security Compliance Notification Phones
Phone Numbers from the people who should receive Security Notifications.
Technical Notification Mails
Email-addresses from the people who should receive Technical Notifications.
Conditional Access ⯈ Conditional Access Policies
Name
DisplayName of the AAD CA Policy.
State
Specifies the 'State' of the Policy.
Included Users
Users in scope of the Policy.
Excluded Users
Users out of scope of the Policy.
Included Groups
Groups in scope of the Policy.
Excluded Groups
Groups out of scope of the Policy.
Included Applications
Cloud Apps in scope of the Policy.
Excluded Applications
Cloud Apps out of scope of the Policy.
Included User Actions
User Actions in scope of the Policy.
Included Roles
AAD Admin Roles in scope of the Policy.
Excluded Roles
AAD Admin Roles out of scope of the Policy.
Included Platforms
Client Device Platforms in scope of the Policy.
Excluded Platforms
Client Device Platforms out of scope of the Policy.
Included Locations
AAD Named Locations in scope of the Policy.
Excluded Locations
AAD Named Locations out of scope of the Policy.
Included Device States
Client Device Compliance states in scope of the Policy.
Excluded Device States
Client Device Compliance states out of scope of the Policy.
User Risk Levels
AAD Identity Protection User Risk Levels in scope of the Policy.
Sign In Risk Levels
AAD Identity Protection Sign-in Risk Levels in scope of the Policy.
Client App Types
Client App types in scope of the Policy.
Grant Control Operator
Operator to be used for Grant Controls.
Built In Controls
List of built-in Grant Controls to be applied by the Policy.
Application Enforced Restrictions Is Enabled
Specifies, whether Application Enforced Restrictions are enabled in the Policy.
Cloud App Security Is Enabled
Specifies, whether Cloud App Security is enforced by the Policy.
Cloud App Security Type
Specifies, what Cloud App Security control is enforced by the Policy.
Sign In Frequency Value
Sign in frequency time in the given unit to be enforced by the policy.
Sign In Frequency Type
Sign in frequency unit (days/hours) to be interpreted by the policy.
Sign In Frequency Is Enabled
Specifies, whether sign-in frequency is enforced by the Policy.
Persistent Browser Is Enabled
Specifies, whether Browser Persistence is controlled by the Policy.
Persistent Browser Mode
Specifies, what Browser Persistence control is enforced by the Policy.
Conditional Access ⯈ Named Locations
Name
Specifies the Display Name of a Named Location policy in Azure Active Directory.
Ip Ranges
Specifies the IP ranges of the Named Location policy in Azure Active Directory.
Is Trusted
Specifies the isTrusted value for the Named Location policy in Azure Active Directory.
Countries And Regions
Specifies the countries and regions for the Named Location policy in Azure Active Directory.
Include Unknown Countries And Regions
Specifies the includeUnknownCountriesAndRegions value for the Named Location policy in Azure Active Directory.
Odata Type
Specifies the Odata Type of a Named Location policy object in Azure Active Directory.
Last updated