Entra ID
AI summary
Members of the Entra ID team can view objects from your Entra ID and Microsoft 365 environments in the inventory, reports, and policy results, including users, groups, devices, applications, and credentials. The objects are organized by category and show how many policies and automations apply to each. Your role determines what actions you can perform with these objects.
Members of the Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more team see these objects in the inventory, in reports and in policy results. The team decides what a user can see; their role decides what they can do with it. Objects are grouped by topic, with how many policies and automations work on each.
Entra ID
Users, groups and access 8
Who is in the tenant, which groups and roles they hold, and what is shared with whom.
- App role assignment
- All app role assignments in Entra ID.
- App role
- All app roles in Entra ID.
- Device 1 policy
- All devices (computers, phones) that are registered in Entra ID.
- Directory role
- All directory rolesDirectory roleA directory role is a Microsoft Entra admin role, such as Global Administrator or Teams Administrator, that grants a set of permissions across the tenant.Read more registered in Entra ID.
- Enterprise application OAuth2 permission scope
- All enterprise applicationEnterprise applicationAn enterprise application is the local instance of an app in a Microsoft Entra tenant, its service principal, where admins control who can sign in and which permissions it holds.Read more OAuth2 permission scopes in Entra ID.
- OAuth2 permission grant
- All OAuth permission grants in Entra ID.
- OAuth2 permission scope
- All OAuth permission scopes in Entra ID.
- User registration credential
- All Entra ID registration credentials of a user (MFAMultifactor authenticationMultifactor authentication asks a user for a second form of verification, such as a code on their phone or a fingerprint, in addition to the password.Read more, Admin, Auth methods).
Agents, apps and automations 8
Agents, apps, flows and the connections, credentials and triggers they run on.
- Registration certificate
- All application registrationApp registrationAn app registration is the global definition of an application in Microsoft Entra ID.Read more certificate of Entra ID.
- Client secret
- All client secretsClient secretA client secret is a password-like string that an app registration uses to prove its identity when it requests a token from Microsoft Entra ID.Read more registered in Entra ID.
- Application registration 5 policies
- All Entra ID application registrations.
- Enterprise registration certificate
- All enterprise application registration certificate of Entra ID.
- Enterprise app client secret
- All enterprise applications client secrets registered in Entra ID.
- Enterprise application verified publisher
- All verified publishers of enterprise applications in Entra ID.
- Enterprise application 7 policies
- All registered Enterprise Applications in Entra ID.
- Verified publisher
- All verified publishers of application registrations in Entra ID.
Usage, activity and costs 3
Who uses what and how often, what it costs, and the spend limits that apply.
- Directory Audit
- Read for this team, without a reference page of its own.
- Risky Entra ID sign-in 1 policy
- Shows Risky Entra ID Sign-Ins.
- Sign In Activity
- Read for this team, without a reference page of its own.
Settings and configuration 1
Tenant and workspace settings, labels, templates and other configuration objects.
- Domain
- All registered domains in Entra ID.
Deleted, locked and redirected objects 4
Objects that were deleted, locked or moved, so you can restore or clean them up.
- Deleted app registration certificate
- All deleted application registration certificate of Entra ID.
- Deleted app client secret
- All deleted applications client secrets registered in Entra ID.
- Deleted application registration
- All deleted applications registration in Entra ID.
- Deleted application verified publisher
- All verified publishers of deleted applications in Entra ID.
Microsoft 365
Users, groups and access 2
Who is in the tenant, which groups and roles they hold, and what is shared with whom.
- Group 4 policies
- All Entra ID groups in your Tenant (Security groupsSecurity groupA security group is a Microsoft Entra group that gives a set of users access to resources.Read more, Microsoft 365 groupsMicrosoft 365 groupA Microsoft 365 Group is the membership object behind many Microsoft 365 workspaces.Read more).
- User 20 policies
- All users registered in your tenant (internal, external).
Usage, activity and costs 2
Who uses what and how often, what it costs, and the spend limits that apply.
- Subscription 7 policies
- All subscriptions with their licenses available in your tenant.
Frequently asked questions
What can members of the Entra ID team see?
What can members of the Entra ID team see?28 inventory object types from Entra ID and Microsoft 365.
Which connectors does the Entra ID team cover?
Which connectors does the Entra ID team cover?Entra ID and Microsoft 365.
Can I create my own team?
Yes, on the Enterprise Plan. Create a custom team under Settings, Users & Roles when no built-in team fits.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?