Edit

Share via


riskServicePrincipalActivity resource type

Namespace: microsoft.graph

Represents the risk activity of a Microsoft Entra service principal as determined by Microsoft Entra ID Protection.

Properties

Property Type Description
detail riskDetail Details of the detected risk.
Note: Details for this property are only available for Workload Identities Premium customers. Events in tenants without this license will be returned hidden.
riskEventTypes String collection The type of risk event detected. The possible values are: investigationsThreatIntelligence, generic, adminConfirmedServicePrincipalCompromised, suspiciousSignins, leakedCredentials, anomalousServicePrincipalActivity, maliciousApplication, suspiciousApplication.

JSON representation

{
    "riskEventTypes": ["String"],
    "detail": "String"
}