{{ user.displayName }}

Display name{{ user.displayName }}
UserPrincipalName{{ user.userPrincipalName }}
ObjectId{{ user.objectId }}
Email{{ user.mail }}
Department{{ user.department }}
Last password change{{ user.lastPasswordChangeDateTime }}
Job Title{{ user.jobTitle }}
Mobile{{ user.mobile }}
Account source{{ user.dirSyncEnabled? 'Synced with AD':'Cloud-only' }}
Account type{{ user.userType }}
Status{{ user.accountEnabled? 'Enabled':'Disabled' }}
Manage in Entra portalopen_in_new
 Group memberships ({{ user.memberOf.length }})
Name {{row.displayName}} Description {{row.description}} Role assignable? check
Role memberships ({{ user.memberOfRole.length }})
Devices ({{ user.ownedDevices.length }})
Name {{row.displayName}} Enabled check Manufacturer {{row.deviceManufacturer}} Model {{row.deviceModel}} OS {{row.deviceOSType}} OS Version {{row.deviceOSVersion}} Trust type {{row.deviceTrustType}} Compliant check Managed check Rooted check
ServicePrincipals ({{ user.ownedServicePrincipals.length }})
Name {{row.displayName}} Publisher {{row.publisherName}} Microsoft app check Passwords {{row.passwordCredentials.length}} Keys {{row.keyCredentials.length}} Roles defined {{row.appRoles.length}} OAuth2 Permissions {{row.oauth2Permissions.length}} Custom owner check
Applications ({{ user.ownedApplications.length }})
Name {{row.displayName}} Passwords {{row.passwordCredentials.length}} Keys {{row.keyCredentials.length}} Roles defined {{row.appRoles.length}} OAuth2 Permissions {{row.oauth2Permissions.length}} Custom owner check
Groups ({{ user.ownedGroups.length }})
Name {{row.displayName}} Description {{row.description}} Role assignable? check
Direct PIM assignments
Type Directory Role Group {{row.resource.type}} Resource / Role
{{row.roleDefinition.displayName}}
{{row.resource.displayName}}
{{row.roleDefinition.displayName}}
{{row.resource.displayName}}
{{row.roleDefinition.displayName}}
 State {{row.assignmentState}} Approval Required Not required Unknown Member Type {{row.memberType}} Duration
Permanent
From: {{row.startDateTime}}
To: {{row.endDateTime}}
Not specified
 Status {{row.status}}
Group based PIM assignments
Type Directory Role Group {{row.resource.type}} Resource / Role
{{row.roleDefinition.displayName}}
{{row.resource.displayName}}
{{row.roleDefinition.displayName}}
 State {{row.assignmentState}} Approval Required Not required Unknown Member Type {{row.memberType}} Duration
Permanent
From: {{row.startDateTime}}
To: {{row.endDateTime}}
Not specified
 Status {{row.status}}
Access Packages ({{ accessPackages?.length || 0 }})
Package Name
{{row.accessPackage.displayName}}
{{row.accessPackage.description}}
Resources
folder_shared {{resource}}
No resources configured
Approval
Required
person {{approver}}
Not required 		Duration
{{utils.formatDuration(row.durationInDays)}}
autorenew Renewable
inbox

No access packages available

 Azure Role Assignments ({{ azureRoleAssignments?.length || 0 }})
Role
{{row.role.role_name}}
{{row.role.role_type === 'BuiltInRole' ? 'Built-in' : 'Custom'}}
{{row.role.description}}
Scope Type
{{utils.getScopeIcon(utils.parseAzureScope(row.scope))}} {{utils.parseAzureScope(row.scope).type}}
Scope Details
{{utils.parseAzureScope(row.scope).displayName}}
key Subscription: {{utils.parseAzureScope(row.scope).subscriptionId}}
folder Resource Group: {{utils.parseAzureScope(row.scope).resourceGroup}}
category Provider: {{utils.parseAzureScope(row.scope).resourceProvider}}
rule Conditional assignment
inbox

No Azure role assignments
Policy processing for guest users is currently not completely accurate. Policies scoped to guest types are not processed.
This table shows Conditional Access policies scoped to the current user. It only shows enabled policies, policies in report only mode or disabled policies are skipped.
Name
{{row.displayName}}
Disabled Report Only 		Applies to
Includes {{scope.displayName}} {{scope.displayName}}
Excludes {{scope.displayName}} {{scope.displayName}}
Conditions & Controls
Clients {{client}}
Auth flows {{authflow}}
Locations (inc.) {{location}} {{policyLocations[location].displayName}} Unknown: {{location}}
Locations (exc.) {{location}} {{policyLocations[location].displayName}} Unknown: {{location}}
Platforms (inc.) {{platform}}
Platforms (exc.) {{platform}}
Devices (inc.) {{row.policyDetail.Conditions.Devices.Include[0].DeviceRule}}
Devices (exc.) {{row.policyDetail.Conditions.Devices.Exclude[0].DeviceRule}}
Sign in risk {{risk}}
User risk {{risk}}
Sign-in controls {{control.Control.join(' or ')}} Auth strength: {{utils.translateAuthStrength(guid)}}
Sign-in Extensible Controls Microsoft Managed risk remediation {{control}}
Session controls SignInFrequency (Unknown setting) SignInFrequency (Every time) SignInFrequency (Every {{row.policyDetail.SignInFrequencyTimeSpan}}) SignInFrequency (Unknown SIF type {{row.policyDetail.SignInFrequencyType}}) PersistentBrowserSession: {{row.policyDetail.PersistentBrowserSessionMode}} {{control}}