{"resources":{"microsoft":{"id":"microsoft","name":"microsoft","fields":{"accessReviews":{"name":"accessReviews","type":"\u001bmicrosoft.identityAndAccess.accessReviews","title":"Access review definitions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"adminConsentRequestPolicy":{"name":"adminConsentRequestPolicy","type":"\u001bmicrosoft.adminConsentRequestPolicy","title":"Policy for enabling or disabling the Microsoft Entra admin consent workflow","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"application":{"name":"application","type":"\u001bmicrosoft.application","title":"Microsoft Entra ID Application Registration","desc":"Examine a single application registration in Microsoft Entra ID. Exposes identity fields (`id`, `appId`, `name`, `signInAudience`), credential health via `hasExpiredCredentials`, `secrets` (password credentials), and `certificates` (key credentials). Also provides access to `appRoles`, `permissions` granted to the linked service principal, and configuration for web, SPA, and public client scenarios. Can be selected by `name` or `id` — for example `microsoft.application(name: \"MyApp\")`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"applications":{"name":"applications","type":"\u001bmicrosoft.applications","title":"List of applications","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"authenticationMethodConfiguration":{"name":"authenticationMethodConfiguration","type":"\u001bmicrosoft.authenticationMethodConfiguration","title":"Configuration for a specific authentication method","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"authenticationMethodsPolicy":{"name":"authenticationMethodsPolicy","type":"\u001bmicrosoft.authenticationMethodsPolicy","title":"The tenant-wide policy that controls which authentication methods are allowed","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"conditionalAccess":{"name":"conditionalAccess","type":"\u001bmicrosoft.conditionalAccess","title":"Microsoft Entra Conditional Access","desc":"Use this namespace to access conditional access configuration for the tenant. Exposes `policies` (the list of conditional access policies), `namedLocations` (IP-based and country-based location conditions), and `authenticationMethodsPolicy` (tenant-wide allowed authentication methods).","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"crossTenantAccessPolicyDefault":{"name":"crossTenantAccessPolicyDefault","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault","title":"Default configuration of cross-tenant access policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"device":{"name":"device","type":"\u001bmicrosoft.device","title":"Microsoft device","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"devicemanagement":{"name":"devicemanagement","type":"\u001bmicrosoft.devicemanagement","title":"Microsoft Intune Device Management","desc":"Use this namespace to access Microsoft Intune device management configuration and inventory. Exposes `managedDevices` (enrolled devices with compliance state, OS details, and encryption status), `deviceConfigurations`, `deviceCompliancePolicies`, and `deviceEnrollmentConfigurations`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"devices":{"name":"devices","type":"\u001bmicrosoft.devices","title":"Microsoft Entra ID Devices","desc":"Iterate over devices registered in Microsoft Entra ID. Supports optional `filter` (OData property filter) and `search` (keyword search) parameters. Each entry is a `microsoft.device` exposing compliance state, management status, operating system details, enrollment type, trust type, and on-premises sync information.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"domain":{"name":"domain","type":"\u001bmicrosoft.domain","title":"Microsoft domain","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"domaindnsrecord":{"name":"domaindnsrecord","type":"\u001bmicrosoft.domaindnsrecord","title":"Microsoft domain DNS record","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"domains":{"name":"domains","type":"\u0019\u001bmicrosoft.domain","title":"List of domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enterpriseApplications":{"name":"enterpriseApplications","type":"\u0019\u001bmicrosoft.serviceprincipal","title":"List of enterprise applications","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"externalIdentitiesPolicy":{"name":"externalIdentitiesPolicy","type":"\u001bmicrosoft.externalIdentitiesPolicy","title":"Tenant-wide policy that controls whether external users can leave a tenant via self-service controls","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"graph":{"name":"graph","type":"\u001bmicrosoft.graph","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"group":{"name":"group","type":"\u001bmicrosoft.group","title":"Microsoft group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"groupLifecyclePolicies":{"name":"groupLifecyclePolicies","type":"\u0019\u001bmicrosoft.groupLifecyclePolicy","title":"Group lifecycle policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"groupLifecyclePolicy":{"name":"groupLifecyclePolicy","type":"\u001bmicrosoft.groupLifecyclePolicy","title":"Microsoft group lifecycle policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"groupSettings":{"name":"groupSettings","type":"\u0019\u001bmicrosoft.setting","title":"Microsoft 365 settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"groups":{"name":"groups","type":"\u001bmicrosoft.groups","title":"List of groups","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identityAndAccess":{"name":"identityAndAccess","type":"\u001bmicrosoft.identityAndAccess","title":"Identity and Access policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"keyCredential":{"name":"keyCredential","type":"\u001bmicrosoft.keyCredential","title":"Microsoft Entra AD Application certificate","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"oauth2PermissionGrant":{"name":"oauth2PermissionGrant","type":"\u001bmicrosoft.oauth2PermissionGrant","title":"Microsoft Entra ID OAuth2 Permission Grant","desc":"Examine a delegated permission grant — a record that a client application has been authorized to call an API on behalf of signed-in users. The `consentType` is `AllPrincipals` when an administrator consented for the entire tenant, or `Principal` when an individual user consented, in which case `principal` resolves to that user. `scopes` lists the delegated permissions granted. `client` is the service principal of the application receiving access and `resource` is the service principal of the API being accessed. Use this collection to audit tenant-wide application consent — for example, finding broad admin grants or user-consented access to sensitive APIs.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"oauth2PermissionGrants":{"name":"oauth2PermissionGrants","type":"\u0019\u001bmicrosoft.oauth2PermissionGrant","title":"Delegated permission grants consented across the tenant","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"organization":{"name":"organization","type":"\u001bmicrosoft.organization","title":"Microsoft Entra Tenant","desc":"Examine configuration of the connected Microsoft Entra ID (Azure AD) tenant. Exposes the tenant's `name`, `id`, `type`, verified domains, provisioned plans, on-premises sync status, privacy profile, technical notification contacts, and security compliance notification addresses. Related resources include `settings`, `formsSettings`, `realm`, and `branding`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"organizations":{"name":"organizations","type":"\u0019\u001bmicrosoft.tenant","title":"Microsoft 365 tenant organizations","desc":"Deprecated in favor of `microsoft.tenant`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"passwordCredential":{"name":"passwordCredential","type":"\u001bmicrosoft.passwordCredential","title":"Microsoft Entra AD Application secrets","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"policies":{"name":"policies","type":"\u001bmicrosoft.policies","title":"Microsoft Entra ID Policies","desc":"Use this namespace to access tenant-wide Microsoft Entra ID policy configuration. Exposes `authorizationPolicy`, `identitySecurityDefaultsEnforcementPolicy`, `adminConsentRequestPolicy`, `permissionGrantPolicies`, `consentPolicySettings`, `authenticationMethodsPolicy`, `activityBasedTimeoutPolicies`, `externalIdentitiesPolicy`, and `crossTenantAccessPolicy`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"rolemanagement":{"name":"rolemanagement","type":"\u001bmicrosoft.rolemanagement","title":"Microsoft role management namespace","desc":"Deprecated in favor of `microsoft.roles`. This namespace previously exposed role definitions and assignments; use `microsoft.roles` for role definitions going forward.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true,"maturity":"deprecated"},"roles":{"name":"roles","type":"\u001bmicrosoft.roles","title":"List of roles","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"security":{"name":"security","type":"\u001bmicrosoft.security","title":"Microsoft Security","desc":"Use this namespace to access Microsoft 365 security resources. Exposes `secureScores` and `latestSecureScores` for tenant security posture, `riskyUsers` for Microsoft Entra ID Protection risk signals, `alerts` and `incidents` for Microsoft Defender XDR detections, `exchange` for Exchange Online security settings, and `informationProtection` for sensitivity label configuration.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"serviceprincipal":{"name":"serviceprincipal","type":"\u001bmicrosoft.serviceprincipal","title":"Microsoft Entra Service Principal","desc":"Examine a service principal (enterprise application) registered in the tenant. Exposes the `name`, `type`, `appId`, sign-in audience, homepage and reply URLs, assignment requirement, visibility to users, and whether the account is enabled. Also provides `assignments` (users and groups granted access), `appRoles`, and `permissions` (API delegated and application grants). Use `isFirstParty` to identify Microsoft-owned service principals.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"serviceprincipals":{"name":"serviceprincipals","type":"\u0019\u001bmicrosoft.serviceprincipal","title":"List of service principals","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"setting":{"name":"setting","type":"\u001bmicrosoft.setting","title":"Microsoft 365 Group Setting","desc":"Examine a single Microsoft 365 group setting applied to the tenant. Each setting is identified by a `templateId` and a `displayName`, and contains a list of `values` (as `microsoft.settingValue` entries) that control group behavior such as guest access or naming policies.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"settingValue":{"name":"settingValue","type":"\u001bmicrosoft.settingValue","title":"Microsoft 365 Group Setting Value","desc":"Examine a single name/value pair within a `microsoft.setting`. The `name` identifies the specific setting key (for example, `AllowGuestsToBeGroupOwner`) and `value` holds its current string representation.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"settings":{"name":"settings","type":"\n","title":"Tenant-wide settings","desc":"Deprecated in favor of `groupSettings`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"systemCredentialPreferences":{"name":"systemCredentialPreferences","type":"\u001bmicrosoft.systemCredentialPreferences","title":"System credential preferences for authentication methods policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"tenant":{"name":"tenant","type":"\u001bmicrosoft.tenant","title":"Microsoft Entra Tenant","desc":"Examine configuration of the connected Microsoft Entra ID (Azure AD) tenant. Exposes the tenant's `name`, `id`, `type`, verified domains, provisioned plans, on-premises sync status, privacy profile, technical notification contacts, and security compliance notification addresses. Related resources include `settings`, `formsSettings`, `realm`, and `branding`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"tenantDomainName":{"name":"tenantDomainName","type":"\u0007","title":"The connected tenant's default domain name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"tenantFormsSettings":{"name":"tenantFormsSettings","type":"\u001bmicrosoft.tenantFormsSettings","title":"Company-wide settings for Microsoft Forms","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"tenantSettings":{"name":"tenantSettings","type":"\u001bmicrosoft.tenantSettings","title":"Company-wide configuration for apps and services.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"user":{"name":"user","type":"\u001bmicrosoft.user","title":"Microsoft Entra ID user","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"users":{"name":"users","type":"\u001bmicrosoft.users","title":"List of users","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365","desc":"Use this namespace to access Microsoft 365 services and resources including users, groups, domains, applications, service principals, roles, and identity and access policies. Serves as the top-level entry point for querying tenant-wide Microsoft Entra ID and Microsoft 365 configuration.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.adminConsentRequestPolicy":{"id":"microsoft.adminConsentRequestPolicy","name":"microsoft.adminConsentRequestPolicy","fields":{"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Specifies whether the admin consent request feature is enabled or disabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notifyReviewers":{"name":"notifyReviewers","type":"\u0004","is_mandatory":true,"title":"Specifies whether reviewers will receive notifications","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"remindersEnabled":{"name":"remindersEnabled","type":"\u0004","is_mandatory":true,"title":"Specifies whether reviewers will receive reminder emails","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"requestDurationInDays":{"name":"requestDurationInDays","type":"\u0005","is_mandatory":true,"title":"Specifies the duration the request is active before it automatically expires if no decision is applied","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reviewers":{"name":"reviewers","type":"\u0019\u001bmicrosoft.graph.accessReviewReviewerScope","is_mandatory":true,"title":"The list of reviewers for the admin consent","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Specifies the version of this policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Policy for enabling or disabling the Microsoft Entra admin consent workflow","private":true,"min_provider_version":"11.1.42","defaults":"isEnabled notifyReviewers","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.application":{"id":"microsoft.application","name":"microsoft.application","fields":{"api":{"name":"api","type":"\n","is_mandatory":true,"title":"Settings for an application that implements a web API","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appId":{"name":"appId","type":"\u0007","is_mandatory":true,"title":"Application (client) ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appRoles":{"name":"appRoles","type":"\u0019\u001bmicrosoft.application.role","is_mandatory":true,"title":"Application roles","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"applicationTemplateId":{"name":"applicationTemplateId","type":"\u0007","is_mandatory":true,"title":"Application template ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"certificates":{"name":"certificates","type":"\u0019\u001bmicrosoft.keyCredential","is_mandatory":true,"title":"X.509 key credentials used for application authentication","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"certification":{"name":"certification","type":"\n","is_mandatory":true,"title":"App certification details including compliance status and certifier","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Application creation date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"defaultRedirectUri":{"name":"defaultRedirectUri","type":"\u0007","is_mandatory":true,"title":"Default redirect URI","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description of the application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"disabledByMicrosoftStatus":{"name":"disabledByMicrosoftStatus","type":"\u0007","is_mandatory":true,"title":"Microsoft disabled status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"groupMembershipClaims":{"name":"groupMembershipClaims","type":"\u0007","is_mandatory":true,"title":"Group membership claims","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"hasExpiredCredentials":{"name":"hasExpiredCredentials","type":"\u0004","title":"Whether the credentials have expired","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Object ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identifierUris":{"name":"identifierUris","type":"\u0019\u0007","is_mandatory":true,"title":"Application identifier URIs","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"info":{"name":"info","type":"\n","is_mandatory":true,"title":"Basic profile information","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isDeviceOnlyAuthSupported":{"name":"isDeviceOnlyAuthSupported","type":"\u0004","is_mandatory":true,"title":"Whether the application supports device-only authentication","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isFallbackPublicClient":{"name":"isFallbackPublicClient","type":"\u0004","is_mandatory":true,"title":"Specifies the fallback application type as public client","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Application display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"nativeAuthenticationApisEnabled":{"name":"nativeAuthenticationApisEnabled","type":"\u0007","is_mandatory":true,"title":"Whether the application supports native authentication","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notes":{"name":"notes","type":"\u0007","is_mandatory":true,"title":"Internal notes about the application (admin-only)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"optionalClaims":{"name":"optionalClaims","type":"\n","is_mandatory":true,"title":"Optional claims","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"owners":{"name":"owners","type":"\u0019\u001bmicrosoft.user","title":"Application owner","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"parentalControlSettings":{"name":"parentalControlSettings","type":"\n","is_mandatory":true,"title":"Parental control settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"permission":{"name":"permission","type":"\u001bmicrosoft.application.permission","title":"Microsoft Service Principal Permission","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"publicClient":{"name":"publicClient","type":"\n","is_mandatory":true,"title":"Public client configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"publisherDomain":{"name":"publisherDomain","type":"\u0007","is_mandatory":true,"title":"Application publisher domain","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"requestSignatureVerification":{"name":"requestSignatureVerification","type":"\n","is_mandatory":true,"title":"Signature verification","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"requiredResourceAccess":{"name":"requiredResourceAccess","type":"\u0019\n","is_mandatory":true,"title":"API permissions the application requests, grouped by resource API","desc":"The configured permissions, distinct from what has actually been consented on the service principal.","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"role":{"name":"role","type":"\u001bmicrosoft.application.role","title":"Microsoft Entra ID app roles are custom roles to assign permissions to users or apps","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"samlMetadataUrl":{"name":"samlMetadataUrl","type":"\u0007","is_mandatory":true,"title":"SAML metadata URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"secrets":{"name":"secrets","type":"\u0019\u001bmicrosoft.passwordCredential","is_mandatory":true,"title":"Client secrets","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"serviceManagementReference":{"name":"serviceManagementReference","type":"\u0007","is_mandatory":true,"title":"Service management reference","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePrincipal":{"name":"servicePrincipal","type":"\u001bmicrosoft.serviceprincipal","title":"Managed application in local directory","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePrincipalLockConfiguration":{"name":"servicePrincipalLockConfiguration","type":"\n","is_mandatory":true,"title":"Service principal configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signInAudience":{"name":"signInAudience","type":"\u0007","is_mandatory":true,"title":"Application sign-in audience","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"spa":{"name":"spa","type":"\n","is_mandatory":true,"title":"Settings for a single-page application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Custom tags for organizing the application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"tokenEncryptionKeyId":{"name":"tokenEncryptionKeyId","type":"\u0007","is_mandatory":true,"title":"Token encryption key ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"web":{"name":"web","type":"\n","is_mandatory":true,"title":"Settings for a web application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"init":{"args":[{"name":"name","type":"\u0007"},{"name":"id","type":"\u0007"}]},"title":"Microsoft Entra ID Application Registration","desc":"Examine a single application registration in Microsoft Entra ID. Exposes identity fields (`id`, `appId`, `name`, `signInAudience`), credential health via `hasExpiredCredentials`, `secrets` (password credentials), and `certificates` (key credentials). Also provides access to `appRoles`, `permissions` granted to the linked service principal, and configuration for web, SPA, and public client scenarios. Can be selected by `name` or `id` — for example `microsoft.application(name: \"MyApp\")`.","min_provider_version":"9.0.0","defaults":"id name hasExpiredCredentials","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.application.permission":{"id":"microsoft.application.permission","name":"microsoft.application.permission","fields":{"appId":{"name":"appId","type":"\u0007","is_mandatory":true,"title":"ID of the API","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appName":{"name":"appName","type":"\u0007","is_mandatory":true,"title":"Name of the API","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Permission description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Permission ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Permission name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Permission grant status (e.g., `granted` for consented permissions, `available` for app roles the application could request but has not been granted)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type eg. `application` or `delegated`","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Service Principal Permission","private":true,"min_provider_version":"11.0.30","defaults":"appName name type status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.application.role":{"id":"microsoft.application.role","name":"microsoft.application.role","fields":{"allowedMemberTypes":{"name":"allowedMemberTypes","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed member types","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the permissions granted by the role","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"App role ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"App state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Role value as it appears in the roles claim of issued tokens","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra ID app roles are custom roles to assign permissions to users or apps","private":true,"min_provider_version":"11.0.29","defaults":"name value isEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.applications":{"id":"microsoft.applications","name":"microsoft.applications","fields":{"length":{"name":"length","type":"\u0005","title":"Total number of application registrations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"list_type":"\u001bmicrosoft.application","title":"Microsoft Entra ID Application Registrations","desc":"Iterate over all application registrations in the tenant. Each entry is a `microsoft.application` exposing identity details (`id`, `appId`, `name`), credential health (`hasExpiredCredentials`, `secrets`, `certificates`), sign-in audience, and linked service principal. Use `length` to count the total number of registered applications.","min_provider_version":"11.1.19","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.authenticationMethodConfiguration":{"id":"microsoft.authenticationMethodConfiguration","name":"microsoft.authenticationMethodConfiguration","fields":{"excludeTargets":{"name":"excludeTargets","type":"\u0019\n","is_mandatory":true,"title":"Groups of users that are excluded from a policy.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The policy name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"The state of the policy. Possible values are: enabled, disabled.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Configuration for a specific authentication method","private":true,"min_provider_version":"11.1.99","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.authenticationMethodsPolicy":{"id":"microsoft.authenticationMethodsPolicy","name":"microsoft.authenticationMethodsPolicy","fields":{"authenticationMethodConfigurations":{"name":"authenticationMethodConfigurations","type":"\u0019\u001bmicrosoft.authenticationMethodConfiguration","is_mandatory":true,"title":"Configurations for specific authentication methods","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Policy description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Policy display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"The date and time the policy was last modified","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policyVersion":{"name":"policyVersion","type":"\u0007","is_mandatory":true,"title":"The version of the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"systemCredentialPreferences":{"name":"systemCredentialPreferences","type":"\u001bmicrosoft.systemCredentialPreferences","title":"System credential preferences for the authentication methods policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"The tenant-wide policy that controls which authentication methods are allowed","private":true,"min_provider_version":"11.1.99","defaults":"displayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess":{"id":"microsoft.conditionalAccess","name":"microsoft.conditionalAccess","fields":{"authenticationMethodConfiguration":{"name":"authenticationMethodConfiguration","type":"\u001bmicrosoft.conditionalAccess.authenticationMethodConfiguration","title":"Configuration for a specific authentication method","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"authenticationMethodsPolicy":{"name":"authenticationMethodsPolicy","type":"\u001bmicrosoft.conditionalAccess.authenticationMethodsPolicy","title":"Tenant-wide authentication methods policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"countryNamedLocation":{"name":"countryNamedLocation","type":"\u001bmicrosoft.conditionalAccess.countryNamedLocation","title":"Microsoft Entra Conditional Access Country Named Location","desc":"Examine a country or region-based named location used in conditional access policy conditions. Exposes the `name` and `lookupMethod` that determines how the country is resolved (by IP address or GPS coordinates).","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"ipNamedLocation":{"name":"ipNamedLocation","type":"\u001bmicrosoft.conditionalAccess.ipNamedLocation","title":"Microsoft Entra Conditional Access IP Named Location","desc":"Examine an IP address range-based named location used in conditional access policy conditions. Exposes the `name`, whether the location is marked as `trusted`, its creation and modification timestamps, and the `id` used to reference it in policy include/exclude location lists.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"namedLocations":{"name":"namedLocations","type":"\u001bmicrosoft.conditionalAccess.namedLocations","title":"Named locations container","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policies":{"name":"policies","type":"\u0019\u001bmicrosoft.conditionalAccess.policy","title":"Policies collection","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policy":{"name":"policy","type":"\u001bmicrosoft.conditionalAccess.policy","title":"Microsoft Entra Conditional Access Policy","desc":"Examine a single conditional access policy defined in the tenant. Each policy has a `displayName`, `state` (enabled, disabled, or enabledForReportingButNotEnforced), and timestamps for creation and modification. The policy's `conditions` specify which users, applications, platforms, and locations are in scope; `grantControls` define what the user must satisfy (MFA, compliant device, etc.); and `sessionControls` enforce post-authentication restrictions such as sign-in frequency and persistent browser behavior.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true}},"title":"Microsoft Entra Conditional Access","desc":"Use this namespace to access conditional access configuration for the tenant. Exposes `policies` (the list of conditional access policies), `namedLocations` (IP-based and country-based location conditions), and `authenticationMethodsPolicy` (tenant-wide allowed authentication methods).","min_provider_version":"11.0.34","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.authenticationMethodConfiguration":{"id":"microsoft.conditionalAccess.authenticationMethodConfiguration","name":"microsoft.conditionalAccess.authenticationMethodConfiguration","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The policy name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"The policy name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Configuration for a specific authentication method","private":true,"min_provider_version":"11.1.41","defaults":"id state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.authenticationMethodsPolicy":{"id":"microsoft.conditionalAccess.authenticationMethodsPolicy","name":"microsoft.conditionalAccess.authenticationMethodsPolicy","fields":{"authenticationMethodConfigurations":{"name":"authenticationMethodConfigurations","type":"\u0019\u001bmicrosoft.conditionalAccess.authenticationMethodConfiguration","is_mandatory":true,"title":"Represents the settings for each authentication method","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"A description of the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"The name of the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The identifier of the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"The date and time of the last update to the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policyVersion":{"name":"policyVersion","type":"\u0007","is_mandatory":true,"title":"The version of the policy in use","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"The tenant-wide policy that controls which authentication methods are allowed","private":true,"min_provider_version":"11.1.41","defaults":"id displayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.countryNamedLocation":{"id":"microsoft.conditionalAccess.countryNamedLocation","name":"microsoft.conditionalAccess.countryNamedLocation","fields":{"lookupMethod":{"name":"lookupMethod","type":"\u0007","is_mandatory":true,"title":"Method to determine the country location","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Named location name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Conditional Access Country Named Location","desc":"Examine a country or region-based named location used in conditional access policy conditions. Exposes the `name` and `lookupMethod` that determines how the country is resolved (by IP address or GPS coordinates).","min_provider_version":"11.0.46","defaults":"name lookupMethod","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.ipNamedLocation":{"id":"microsoft.conditionalAccess.ipNamedLocation","name":"microsoft.conditionalAccess.ipNamedLocation","fields":{"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"When the location was created","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Named location ID","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"modifiedDateTime":{"name":"modifiedDateTime","type":"\t","is_mandatory":true,"title":"When the location was last modified","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Named location name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"trusted":{"name":"trusted","type":"\u0004","is_mandatory":true,"title":"Whether the location is marked as trusted","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Conditional Access IP Named Location","desc":"Examine an IP address range-based named location used in conditional access policy conditions. Exposes the `name`, whether the location is marked as `trusted`, its creation and modification timestamps, and the `id` used to reference it in policy include/exclude location lists.","min_provider_version":"11.0.34","defaults":"id name trusted","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.namedLocations":{"id":"microsoft.conditionalAccess.namedLocations","name":"microsoft.conditionalAccess.namedLocations","fields":{"countryLocations":{"name":"countryLocations","type":"\u0019\u001bmicrosoft.conditionalAccess.countryNamedLocation","title":"Country-based named locations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ipLocations":{"name":"ipLocations","type":"\u0019\u001bmicrosoft.conditionalAccess.ipNamedLocation","title":"IP-based named locations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Conditional Access Named Locations","desc":"Use this namespace to access named location definitions used in conditional access policy conditions. Exposes `ipLocations` (IP range-based named locations as `microsoft.conditionalAccess.ipNamedLocation`) and `countryLocations` (country-based named locations as `microsoft.conditionalAccess.countryNamedLocation`).","min_provider_version":"11.0.46","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy":{"id":"microsoft.conditionalAccess.policy","name":"microsoft.conditionalAccess.policy","fields":{"conditions":{"name":"conditions","type":"\u001bmicrosoft.conditionalAccess.policy.conditions","is_mandatory":true,"title":"Policy conditions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Specifies a display name for the conditionalAccessPolicy object","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"grantControls":{"name":"grantControls","type":"\u001bmicrosoft.conditionalAccess.policy.grantControls","is_mandatory":true,"title":"Specifies the grant controls that must be fulfilled to pass the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Specifies the identifier of a conditionalAccessPolicy object","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"modifiedDateTime":{"name":"modifiedDateTime","type":"\t","is_mandatory":true,"title":"The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"sessionControls":{"name":"sessionControls","type":"\u001bmicrosoft.conditionalAccess.policy.sessionControls","is_mandatory":true,"title":"Specifies the session controls that are enforced after sign-in","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Specifies the state of the conditionalAccessPolicy object. Possible values are: enabled, disabled, enabledForReportingButNotEnforced.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"templateId":{"name":"templateId","type":"\u0007","is_mandatory":true,"title":"Template ID (if created from template)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Conditional Access Policy","desc":"Examine a single conditional access policy defined in the tenant. Each policy has a `displayName`, `state` (enabled, disabled, or enabledForReportingButNotEnforced), and timestamps for creation and modification. The policy's `conditions` specify which users, applications, platforms, and locations are in scope; `grantControls` define what the user must satisfy (MFA, compliant device, etc.); and `sessionControls` enforce post-authentication restrictions such as sign-in frequency and persistent browser behavior.","min_provider_version":"11.1.38","defaults":"id displayName state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.conditions":{"id":"microsoft.conditionalAccess.policy.conditions","name":"microsoft.conditionalAccess.policy.conditions","fields":{"applications":{"name":"applications","type":"\u001bmicrosoft.conditionalAccess.policy.conditions.applications","is_mandatory":true,"title":"Applications and user actions included in and excluded from the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"authenticationFlows":{"name":"authenticationFlows","type":"\u001bmicrosoft.conditionalAccess.policy.conditions.authenticationFlows","is_mandatory":true,"title":"Authentication flows included in the policy scope","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"clientAppTypes":{"name":"clientAppTypes","type":"\u0019\u0007","is_mandatory":true,"title":"Client application types included in the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"clientApplications":{"name":"clientApplications","type":"\u001bmicrosoft.conditionalAccess.policy.conditions.clientApplications","is_mandatory":true,"title":"Client applications (service principals and workload identities) included in and excluded from the policy","desc":"Either users or clientApplications is required.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Internal ID based on policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"insiderRiskLevels":{"name":"insiderRiskLevels","type":"\u0007","is_mandatory":true,"title":"Insider risk levels included in the policy. The possible values are: minor, moderate, elevated, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"locations":{"name":"locations","type":"\u001bmicrosoft.conditionalAccess.policy.conditions.locations","is_mandatory":true,"title":"Locations included in and excluded from the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"platforms":{"name":"platforms","type":"\u001bmicrosoft.conditionalAccess.policy.conditions.platforms","is_mandatory":true,"title":"Platforms included in and excluded from the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePrincipalRiskLevels":{"name":"servicePrincipalRiskLevels","type":"\u0019\u0007","is_mandatory":true,"title":"Service principal risk levels included in the policy. Possible values are: low, medium, high, none, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signInRiskLevels":{"name":"signInRiskLevels","type":"\u0019\u0007","is_mandatory":true,"title":"Sign-in risk levels included in the policy. Possible values are: low, medium, high, hidden, none, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userRiskLevels":{"name":"userRiskLevels","type":"\u0019\u0007","is_mandatory":true,"title":"User risk levels included in the policy. Possible values are: low, medium, high, hidden, none, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"users":{"name":"users","type":"\u001bmicrosoft.conditionalAccess.policy.conditions.users","is_mandatory":true,"title":"Users, groups, and roles included in and excluded from the policy. Either users or clientApplications is required.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Represents the type of conditions that govern when the policy applies","private":true,"min_provider_version":"11.1.38","defaults":"id applications platforms","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.conditions.applications":{"id":"microsoft.conditionalAccess.policy.conditions.applications","name":"microsoft.conditionalAccess.policy.conditions.applications","fields":{"excludeApplications":{"name":"excludeApplications","type":"\u0019\u0007","is_mandatory":true,"title":"Can be one of the following: appId, All, Office365, MicrosoftAdminPortals","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeApplications":{"name":"includeApplications","type":"\u0019\u0007","is_mandatory":true,"title":"Can be one of the following: appId, All, Office365, MicrosoftAdminPortals","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeUserActions":{"name":"includeUserActions","type":"\u0019\u0007","is_mandatory":true,"title":"User actions to include","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Represents the applications and user actions included in and excluded from the conditional access policy","private":true,"min_provider_version":"11.1.38","defaults":"includeApplications excludeApplications includeUserActions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.conditions.authenticationFlows":{"id":"microsoft.conditionalAccess.policy.conditions.authenticationFlows","name":"microsoft.conditionalAccess.policy.conditions.authenticationFlows","fields":{"transferMethods":{"name":"transferMethods","type":"\u0007","is_mandatory":true,"title":"Represents the transfer methods in scope for the policy. The possible values are: none, deviceCodeFlow, authenticationTransfer, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"The authentication flows in scope for a Microsoft Entra Conditional Access policy","private":true,"min_provider_version":"11.1.38","defaults":"transferMethods","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.conditions.clientApplications":{"id":"microsoft.conditionalAccess.policy.conditions.clientApplications","name":"microsoft.conditionalAccess.policy.conditions.clientApplications","fields":{"excludeServicePrincipals":{"name":"excludeServicePrincipals","type":"\u0019\u0007","is_mandatory":true,"title":"Service principal IDs excluded from the policy scope","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeServicePrincipals":{"name":"includeServicePrincipals","type":"\u0019\u0007","is_mandatory":true,"title":"Service principal IDs included in the policy scope, or ServicePrincipalsInMyTenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Represents client applications (service principals and workload identities) included in and excluded from the policy scope","private":true,"min_provider_version":"11.1.38","defaults":"excludeServicePrincipals includeServicePrincipals","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.conditions.locations":{"id":"microsoft.conditionalAccess.policy.conditions.locations","name":"microsoft.conditionalAccess.policy.conditions.locations","fields":{"excludeLocations":{"name":"excludeLocations","type":"\u0019\u0007","is_mandatory":true,"title":"Location IDs excluded from scope of policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeLocations":{"name":"includeLocations","type":"\u0019\u0007","is_mandatory":true,"title":"Location IDs in scope of policy unless explicitly excluded, All, or AllTrusted","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Locations included in and excluded from a Conditional Access policy","desc":"Examine which named locations a Microsoft Entra Conditional Access policy applies to (or excludes). Locations can be countries and regions or IP addresses.","private":true,"min_provider_version":"11.1.38","defaults":"includeLocations excludeLocations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.conditions.platforms":{"id":"microsoft.conditionalAccess.policy.conditions.platforms","name":"microsoft.conditionalAccess.policy.conditions.platforms","fields":{"excludePlatforms":{"name":"excludePlatforms","type":"\u0019\u0007","is_mandatory":true,"title":"Possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includePlatforms":{"name":"includePlatforms","type":"\u0019\u0007","is_mandatory":true,"title":"Possible values are: android, iOS, windows, windowsPhone, macOS, linux, all, unknownFutureValue","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Platforms included in and excluded from the policy scope","private":true,"min_provider_version":"11.1.38","defaults":"excludePlatforms includePlatforms","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.conditions.users":{"id":"microsoft.conditionalAccess.policy.conditions.users","name":"microsoft.conditionalAccess.policy.conditions.users","fields":{"excludeGroups":{"name":"excludeGroups","type":"\u0019\u0007","is_mandatory":true,"title":"Group IDs excluded from scope of policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"excludeRoles":{"name":"excludeRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Role IDs excluded from scope of policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"excludeUsers":{"name":"excludeUsers","type":"\u0019\u0007","is_mandatory":true,"title":"User IDs excluded from scope of policy and/or GuestsOrExternalUsers","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeGroups":{"name":"includeGroups","type":"\u0019\u0007","is_mandatory":true,"title":"Group IDs in scope of policy unless explicitly excluded","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeRoles":{"name":"includeRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Role IDs in scope of policy unless explicitly excluded","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeUsers":{"name":"includeUsers","type":"\u0019\u0007","is_mandatory":true,"title":"User IDs in scope of policy unless explicitly excluded, None, All, or GuestsOrExternalUsers","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Users, groups, and roles included in and excluded from a Microsoft Entra Conditional Access policy scope","private":true,"min_provider_version":"11.1.38","defaults":"includeUsers excludeUsers","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.grantControls":{"id":"microsoft.conditionalAccess.policy.grantControls","name":"microsoft.conditionalAccess.policy.grantControls","fields":{"authenticationStrength":{"name":"authenticationStrength","type":"\u001bmicrosoft.conditionalAccess.policy.grantControls.authenticationStrength","is_mandatory":true,"title":"The authentication strength required by the conditional access policy (Optional)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"builtInControls":{"name":"builtInControls","type":"\u0019\u0007","is_mandatory":true,"title":"List of values of built-in controls required by the policy","desc":"Possible values: block, mfa, compliantDevice, domainJoinedDevice, approvedApplication, compliantApplication, passwordChange, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"customAuthenticationFactors":{"name":"customAuthenticationFactors","type":"\u0019\u0007","is_mandatory":true,"title":"List of custom controls IDs required by the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Internal ID based on policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"operator":{"name":"operator","type":"\u0007","is_mandatory":true,"title":"Defines the relationship of the grant controls. Possible values: AND, OR.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"termsOfUse":{"name":"termsOfUse","type":"\u0019\u0007","is_mandatory":true,"title":"List of terms of use IDs required by the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Represents grant controls that must be fulfilled to pass the policy","private":true,"min_provider_version":"11.1.38","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.grantControls.authenticationStrength":{"id":"microsoft.conditionalAccess.policy.grantControls.authenticationStrength","name":"microsoft.conditionalAccess.policy.grantControls.authenticationStrength","fields":{"allowedCombinations":{"name":"allowedCombinations","type":"\u0019\u0007","is_mandatory":true,"title":"A collection of authentication method modes that are required be used to satisfy this authentication strength","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"The time when this policy was created","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"The human-readable description of this policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"The human-readable display name of this policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The system-generated identifier for this mode","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"modifiedDateTime":{"name":"modifiedDateTime","type":"\t","is_mandatory":true,"title":"The time when this policy was last modified","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policyType":{"name":"policyType","type":"\u0007","is_mandatory":true,"title":"A descriptor if this policy is built into Microsoft Entra ID or created by an admin for the tenant","desc":"The possible values are: builtIn, custom, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"requirementsSatisfied":{"name":"requirementsSatisfied","type":"\u0007","is_mandatory":true,"title":"A descriptor if this authentication strength grants the MFA claim upon successful satisfaction","desc":"The possible values are: none, mfa, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"A collection of settings that define specific combinations of authentication methods and metadata","private":true,"min_provider_version":"11.1.38","defaults":"id displayName allowedCombinations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.sessionControls":{"id":"microsoft.conditionalAccess.policy.sessionControls","name":"microsoft.conditionalAccess.policy.sessionControls","fields":{"applicationEnforcedRestrictions":{"name":"applicationEnforcedRestrictions","type":"\u001bmicrosoft.conditionalAccess.policy.sessionControls.applicationEnforcedRestrictions","is_mandatory":true,"title":"Session control to enforce application restrictions. Only Exchange Online and SharePoint Online support this session control","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"cloudAppSecurity":{"name":"cloudAppSecurity","type":"\u001bmicrosoft.conditionalAccess.policy.sessionControls.cloudAppSecurity","is_mandatory":true,"title":"Session control to apply cloud app security","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Internal ID based on policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"persistentBrowser":{"name":"persistentBrowser","type":"\n","is_mandatory":true,"title":"Session control to define whether to persist cookies or not. All apps should be selected for this session control to work correctly.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"secureSignInSession":{"name":"secureSignInSession","type":"\n","is_mandatory":true,"title":"Secure application model for continuous access evaluation","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signInFrequency":{"name":"signInFrequency","type":"\u001bmicrosoft.conditionalAccess.policy.sessionControls.signInFrequency","is_mandatory":true,"title":"Session control to enforce signin frequency","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Conditional Access Policy Session Controls","private":true,"min_provider_version":"11.1.38","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.sessionControls.applicationEnforcedRestrictions":{"id":"microsoft.conditionalAccess.policy.sessionControls.applicationEnforcedRestrictions","name":"microsoft.conditionalAccess.policy.sessionControls.applicationEnforcedRestrictions","fields":{"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Specifies whether the session control is enabled or not","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Session control to enforce application restrictions","private":true,"min_provider_version":"11.1.38","defaults":"isEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.sessionControls.cloudAppSecurity":{"id":"microsoft.conditionalAccess.policy.sessionControls.cloudAppSecurity","name":"microsoft.conditionalAccess.policy.sessionControls.cloudAppSecurity","fields":{"cloudAppSecurityType":{"name":"cloudAppSecurityType","type":"\u0007","is_mandatory":true,"title":"Specifies CloudApp security session control types","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Specifies whether the session control is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Session control used to enforce cloud app security checks","private":true,"min_provider_version":"11.1.38","defaults":"cloudAppSecurityType isEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.sessionControls.persistentBrowser":{"id":"microsoft.conditionalAccess.policy.sessionControls.persistentBrowser","name":"microsoft.conditionalAccess.policy.sessionControls.persistentBrowser","fields":{"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Specifies whether the session control is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Possible values are: always, never","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Session control to define whether to persist cookies or not","private":true,"min_provider_version":"11.1.38","defaults":"mode isEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.conditionalAccess.policy.sessionControls.signInFrequency":{"id":"microsoft.conditionalAccess.policy.sessionControls.signInFrequency","name":"microsoft.conditionalAccess.policy.sessionControls.signInFrequency","fields":{"authenticationType":{"name":"authenticationType","type":"\u0007","is_mandatory":true,"title":"The possible values are primaryAndSecondaryAuthentication, secondaryAuthentication, unknownFutureValue.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"frequencyInterval":{"name":"frequencyInterval","type":"\u0007","is_mandatory":true,"title":"The frequency interval type","desc":"The possible values are timeBased, everyTime, unknownFutureValue. Sign-in frequency of everyTime is available for risky users, risky sign-ins, and Intune device enrollment.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Specifies whether the session control is enabled.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The sign-in frequency type (days, hours)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"value":{"name":"value","type":"\u0005","is_mandatory":true,"title":"The sign-in frequency value","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Session control to enforce sign-in frequency","private":true,"min_provider_version":"11.1.38","defaults":"authenticationType isEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.crossTenantAccessPolicyDefault":{"id":"microsoft.crossTenantAccessPolicyDefault","name":"microsoft.crossTenantAccessPolicyDefault","fields":{"automaticUserConsentSettings":{"name":"automaticUserConsentSettings","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.automaticUserConsentSettings","title":"Determines the default configuration for automatic user consent settings","desc":"Controls if users consent automatically to apps on behalf of users in other tenants.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"b2bCollaborationInbound":{"name":"b2bCollaborationInbound","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting","title":"Defines your default configuration for users from other organizations accessing your resources via Microsoft Entra B2B collaboration.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"b2bCollaborationOutbound":{"name":"b2bCollaborationOutbound","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting","title":"Defines your default configuration for users in your organization going outbound to access other organizations via Microsoft Entra B2B collaboration.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"b2bDirectConnectInbound":{"name":"b2bDirectConnectInbound","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting","title":"Defines your default configuration for users from other organizations accessing your resources via Azure AD B2B direct connect.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"b2bDirectConnectOutbound":{"name":"b2bDirectConnectOutbound","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting","title":"Defines your default configuration for users in your organization going outbound to access other organizations via Azure AD B2B direct connect.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"b2bSetting":{"name":"b2bSetting","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting","title":"B2B setting for cross-tenant access policy (used for collaboration, direct connect, and tenant restrictions)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"inboundTrust":{"name":"inboundTrust","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.inboundTrust","title":"Defines if MFA, compliant devices, and hybrid Azure AD joined devices from external tenants are accepted.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"invitationRedemptionIdentityProviderConfiguration":{"name":"invitationRedemptionIdentityProviderConfiguration","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.invitationRedemptionIdentityProviderConfiguration","title":"Specifies the default configuration for invitation redemption for external users in your organization.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isServiceDefault":{"name":"isServiceDefault","type":"\u0004","is_mandatory":true,"title":"True if the default configuration is inherited from the service default. False if the default configuration has been customized.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"tenantRestrictions":{"name":"tenantRestrictions","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting","title":"Defines the default configuration for tenant restrictions settings.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Default configuration of cross-tenant access policy","private":true,"min_provider_version":"11.1.99","defaults":"isServiceDefault automaticUserConsentSettings inboundTrust","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.crossTenantAccessPolicyDefault.automaticUserConsentSettings":{"id":"microsoft.crossTenantAccessPolicyDefault.automaticUserConsentSettings","name":"microsoft.crossTenantAccessPolicyDefault.automaticUserConsentSettings","fields":{"inboundAllowed":{"name":"inboundAllowed","type":"\u0004","is_mandatory":true,"title":"Whether automatic consent for inbound collaboration is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"outboundAllowed":{"name":"outboundAllowed","type":"\u0004","is_mandatory":true,"title":"Whether automatic consent for outbound collaboration is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Automatic user consent settings for cross-tenant access policy","private":true,"min_provider_version":"11.1.99","defaults":"inboundAllowed outboundAllowed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.crossTenantAccessPolicyDefault.b2bSetting":{"id":"microsoft.crossTenantAccessPolicyDefault.b2bSetting","name":"microsoft.crossTenantAccessPolicyDefault.b2bSetting","fields":{"applications":{"name":"applications","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting.targetConfig","title":"Defines the default configuration for applications.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"target":{"name":"target","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting.target","title":"Target for B2B setting configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"targetConfig":{"name":"targetConfig","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting.targetConfig","title":"Users and groups configuration for B2B settings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"usersAndGroups":{"name":"usersAndGroups","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting.targetConfig","title":"Defines the default configuration for users and groups.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"B2B setting for cross-tenant access policy (used for collaboration, direct connect, and tenant restrictions)","private":true,"min_provider_version":"11.1.99","defaults":"usersAndGroups applications","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.crossTenantAccessPolicyDefault.b2bSetting.target":{"id":"microsoft.crossTenantAccessPolicyDefault.b2bSetting.target","name":"microsoft.crossTenantAccessPolicyDefault.b2bSetting.target","fields":{"target":{"name":"target","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the target.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"targetType":{"name":"targetType","type":"\u0007","is_mandatory":true,"title":"The type of target. Possible values are: user, application.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Target for B2B setting configuration","private":true,"min_provider_version":"11.1.99","defaults":"target targetType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.crossTenantAccessPolicyDefault.b2bSetting.targetConfig":{"id":"microsoft.crossTenantAccessPolicyDefault.b2bSetting.targetConfig","name":"microsoft.crossTenantAccessPolicyDefault.b2bSetting.targetConfig","fields":{"accessType":{"name":"accessType","type":"\u0007","is_mandatory":true,"title":"The type of access. Possible values are: blocked, allowed.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"targets":{"name":"targets","type":"\u0019\u001bmicrosoft.crossTenantAccessPolicyDefault.b2bSetting.target","is_mandatory":true,"title":"The targets of the policy configuration.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Users and groups configuration for B2B settings","private":true,"min_provider_version":"11.1.99","defaults":"accessType targets","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.crossTenantAccessPolicyDefault.inboundTrust":{"id":"microsoft.crossTenantAccessPolicyDefault.inboundTrust","name":"microsoft.crossTenantAccessPolicyDefault.inboundTrust","fields":{"isCompliantDeviceAccepted":{"name":"isCompliantDeviceAccepted","type":"\u0004","is_mandatory":true,"title":"If true, compliant devices from external tenants are accepted.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isHybridAzureADJoinedDeviceAccepted":{"name":"isHybridAzureADJoinedDeviceAccepted","type":"\u0004","is_mandatory":true,"title":"If true, hybrid Azure AD joined devices from external tenants are accepted.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isMfaAccepted":{"name":"isMfaAccepted","type":"\u0004","is_mandatory":true,"title":"If true, MFA from external tenants is accepted.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Inbound trust settings for cross-tenant access policy","private":true,"min_provider_version":"11.1.99","defaults":"isMfaAccepted isCompliantDeviceAccepted isHybridAzureADJoinedDeviceAccepted","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.crossTenantAccessPolicyDefault.invitationRedemptionIdentityProviderConfiguration":{"id":"microsoft.crossTenantAccessPolicyDefault.invitationRedemptionIdentityProviderConfiguration","name":"microsoft.crossTenantAccessPolicyDefault.invitationRedemptionIdentityProviderConfiguration","fields":{"fallbackIdentityProvider":{"name":"fallbackIdentityProvider","type":"\u0007","is_mandatory":true,"title":"Specifies an identity provider for invitations when no precedence order is provided.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"primaryIdentityProviderPrecedenceOrder":{"name":"primaryIdentityProviderPrecedenceOrder","type":"\u0019\u0007","is_mandatory":true,"title":"Specifies the precedence order for identity providers.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Invitation redemption identity provider configuration","private":true,"min_provider_version":"11.1.99","defaults":"fallbackIdentityProvider primaryIdentityProviderPrecedenceOrder","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.device":{"id":"microsoft.device","name":"microsoft.device","fields":{"accountEnabled":{"name":"accountEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the device account is enabled","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"approximateLastSignInDateTime":{"name":"approximateLastSignInDateTime","type":"\t","is_mandatory":true,"title":"Date and time the device most recently signed in","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"complianceExpirationDateTime":{"name":"complianceExpirationDateTime","type":"\t","is_mandatory":true,"title":"Date and time when the device's compliance status expires","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deletedDateTime":{"name":"deletedDateTime","type":"\t","is_mandatory":true,"title":"Soft-delete timestamp for the device","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceCategory":{"name":"deviceCategory","type":"\u0007","is_mandatory":true,"title":"User-defined property set by Intune","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceId":{"name":"deviceId","type":"\u0007","is_mandatory":true,"title":"Unique identifier set","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceOwnership":{"name":"deviceOwnership","type":"\u0007","is_mandatory":true,"title":"Ownership of the device (company or personal)","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Device display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enrollmentProfileName":{"name":"enrollmentProfileName","type":"\u0007","is_mandatory":true,"title":"Enrollment profile applied to the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enrollmentType":{"name":"enrollmentType","type":"\u0007","is_mandatory":true,"title":"Enrollment type of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Device ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isCompliant":{"name":"isCompliant","type":"\u0004","is_mandatory":true,"title":"Whether the device complies with Mobile Device Management (MDM) policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isManaged":{"name":"isManaged","type":"\u0004","is_mandatory":true,"title":"Whether the device is managed by a Mobile Device Management (MDM) app","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isRooted":{"name":"isRooted","type":"\u0004","is_mandatory":true,"title":"Whether the device is rooted or jail-broken","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"Device manufacturer or vendor name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mdmAppId":{"name":"mdmAppId","type":"\u0007","is_mandatory":true,"title":"Application identifier used to register device into MDM","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Model of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesLastSyncDateTime":{"name":"onPremisesLastSyncDateTime","type":"\t","is_mandatory":true,"title":"The last time the device was synced from on-premises","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesSyncEnabled":{"name":"onPremisesSyncEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the device is synced from an on-premises directory","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"operatingSystem":{"name":"operatingSystem","type":"\u0007","is_mandatory":true,"title":"The type of operating system on the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"operatingSystemVersion":{"name":"operatingSystemVersion","type":"\u0007","is_mandatory":true,"title":"The version of the operating system on the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"physicalIds":{"name":"physicalIds","type":"\u0019\u0007","is_mandatory":true,"title":"Physical IDs","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"profileType":{"name":"profileType","type":"\u0007","is_mandatory":true,"title":"The profile type of the device (e.g., RegisteredDevice)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"registrationDateTime":{"name":"registrationDateTime","type":"\t","is_mandatory":true,"title":"Date and time of when the device was registered","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"systemLabels":{"name":"systemLabels","type":"\u0019\u0007","is_mandatory":true,"title":"List of labels applied to the device by the system","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"trustType":{"name":"trustType","type":"\u0007","is_mandatory":true,"title":"Type of trust for the joined device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft device","private":true,"min_provider_version":"11.1.21","defaults":"id displayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement":{"id":"microsoft.devicemanagement","name":"microsoft.devicemanagement","fields":{"detectedApps":{"name":"detectedApps","type":"\u0019\u001bmicrosoft.devicemanagement.detectedapp","title":"Apps detected as installed on managed devices, aggregated across the tenant","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"detectedapp":{"name":"detectedapp","type":"\u001bmicrosoft.devicemanagement.detectedapp","title":"App detected as installed on managed devices","desc":"Examine the application inventory that Intune builds from managed-device reporting. `deviceCount` is the number of devices in the tenant on which Intune has detected this app at the given `version`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"deviceCompliancePolicies":{"name":"deviceCompliancePolicies","type":"\u0019\u001bmicrosoft.devicemanagement.devicecompliancepolicy","title":"List of device compliance policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceConfigurations":{"name":"deviceConfigurations","type":"\u0019\u001bmicrosoft.devicemanagement.deviceconfiguration","title":"List of device configurations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceEnrollmentConfiguration":{"name":"deviceEnrollmentConfiguration","type":"\u001bmicrosoft.devicemanagement.deviceEnrollmentConfiguration","title":"Microsoft Device Enrollment Configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"deviceEnrollmentConfigurations":{"name":"deviceEnrollmentConfigurations","type":"\u0019\u001bmicrosoft.devicemanagement.deviceEnrollmentConfiguration","title":"Device Enrollment Configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"devicecompliancepolicy":{"name":"devicecompliancepolicy","type":"\u001bmicrosoft.devicemanagement.devicecompliancepolicy","title":"Microsoft device compliance policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"deviceconfiguration":{"name":"deviceconfiguration","type":"\u001bmicrosoft.devicemanagement.deviceconfiguration","title":"Microsoft device configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"intent":{"name":"intent","type":"\u001bmicrosoft.devicemanagement.intent","title":"Endpoint security intent","desc":"Examine endpoint security policies created from Intune templates: antivirus, disk encryption, firewall, endpoint detection and response, account protection, and attack surface reduction. `templateId` and `templateDisplayName` identify which template the intent was created from; `settings()` returns the configured settings; `assignments()` returns the groups and devices it targets.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"intents":{"name":"intents","type":"\u0019\u001bmicrosoft.devicemanagement.intent","title":"Endpoint security intents (antivirus, disk encryption, firewall, EDR, account protection, attack surface reduction)","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"managedDevices":{"name":"managedDevices","type":"\u0019\u001bmicrosoft.devicemanagement.manageddevice","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"manageddevice":{"name":"manageddevice","type":"\u001bmicrosoft.devicemanagement.manageddevice","title":"Microsoft managed device","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"mobileApps":{"name":"mobileApps","type":"\u0019\u001bmicrosoft.devicemanagement.mobileapp","title":"Apps published to the Intune tenant","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mobileapp":{"name":"mobileapp","type":"\u001bmicrosoft.devicemanagement.mobileapp","title":"Mobile app published to the Intune tenant","desc":"Examine apps published to Intune for deployment to managed devices. Apps include store apps, line-of-business apps, web apps, and managed Google Play apps. `properties` holds subtype-specific fields keyed by `@odata.type` (for example `bundleId`, `productCode`, `appStoreUrl`, `installCommandLine`), `publishingState` indicates whether the app is ready for deployment, and `assignments()` returns the groups it targets.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"policyAssignment":{"name":"policyAssignment","type":"\u001bmicrosoft.devicemanagement.policyAssignment","title":"Assignment of an Intune device management policy","desc":"Examine which groups, devices, or licensed users an Intune policy targets, and whether each assignment is an include or an exclude. `policyAssignment` is used by compliance policies, configuration profiles, endpoint security intents, and mobile apps. `targetType` identifies the kind of target (`groupAssignmentTarget`, `exclusionGroupAssignmentTarget`, `allDevicesAssignmentTarget`, `allLicensedUsersAssignmentTarget`); `groupId` is populated only when the target is a group.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"roleAssignment":{"name":"roleAssignment","type":"\u001bmicrosoft.devicemanagement.roleAssignment","title":"Assignment of an Intune RBAC role to members","desc":"Examine which security groups receive which Intune roles, and which scope tags constrain where they can act. `members` are the groups that receive the role; `scopeMembers` are the groups whose objects the role applies to; `resourceScopes` is the set of scope-tag IDs the assignment is limited to.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"roleAssignments":{"name":"roleAssignments","type":"\u0019\u001bmicrosoft.devicemanagement.roleAssignment","title":"Intune RBAC role assignments","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleDefinition":{"name":"roleDefinition","type":"\u001bmicrosoft.devicemanagement.roleDefinition","title":"Intune RBAC role definition","desc":"Examine the Intune role-based access control catalog: built-in Microsoft roles plus any custom roles defined in the tenant. `rolePermissions` lists the Intune resource actions the role grants; `roleScopeTagIds` lists the scope tags the role is allowed to operate against.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"roleDefinitions":{"name":"roleDefinitions","type":"\u0019\u001bmicrosoft.devicemanagement.roleDefinition","title":"Intune RBAC role definitions","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleScopeTag":{"name":"roleScopeTag","type":"\u001bmicrosoft.devicemanagement.roleScopeTag","title":"Intune RBAC role scope tag","desc":"Examine the scope tags used to partition Intune resources by team or region. Tags are attached to managed devices, policies, and apps, and constrain which administrators can see and modify which objects.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"roleScopeTags":{"name":"roleScopeTags","type":"\u0019\u001bmicrosoft.devicemanagement.roleScopeTag","title":"Intune RBAC role scope tags","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"windowsAutopilotDeploymentProfile":{"name":"windowsAutopilotDeploymentProfile","type":"\u001bmicrosoft.devicemanagement.windowsAutopilotDeploymentProfile","title":"Windows Autopilot deployment profile","desc":"Examine Windows Autopilot deployment profiles that drive zero-touch provisioning. The profile sets language, locale, device-name template, and the out-of-box experience that end users see during first sign-in; `deploymentProfileType` distinguishes Azure AD joined, Hybrid Azure AD joined, and self-deploying flows.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"windowsAutopilotDeploymentProfiles":{"name":"windowsAutopilotDeploymentProfiles","type":"\u0019\u001bmicrosoft.devicemanagement.windowsAutopilotDeploymentProfile","title":"Windows Autopilot deployment profiles","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Intune Device Management","desc":"Use this namespace to access Microsoft Intune device management configuration and inventory. Exposes `managedDevices` (enrolled devices with compliance state, OS details, and encryption status), `deviceConfigurations`, `deviceCompliancePolicies`, and `deviceEnrollmentConfigurations`.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.detectedapp":{"id":"microsoft.devicemanagement.detectedapp","name":"microsoft.devicemanagement.detectedapp","fields":{"deviceCount":{"name":"deviceCount","type":"\u0005","is_mandatory":true,"title":"Number of managed devices with this app installed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"App display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Detected app ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"platform":{"name":"platform","type":"\u0007","is_mandatory":true,"title":"Platform the app was detected on (windows, iOS, android, macOS, unknown)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"publisher":{"name":"publisher","type":"\u0007","is_mandatory":true,"title":"Publisher","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"sizeInByte":{"name":"sizeInByte","type":"\u0005","is_mandatory":true,"title":"App size in bytes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"App version","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"App detected as installed on managed devices","desc":"Examine the application inventory that Intune builds from managed-device reporting. `deviceCount` is the number of devices in the tenant on which Intune has detected this app at the given `version`.","private":true,"min_provider_version":"13.0.12","defaults":"displayName version deviceCount","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.deviceEnrollmentConfiguration":{"id":"microsoft.devicemanagement.deviceEnrollmentConfiguration","name":"microsoft.devicemanagement.deviceEnrollmentConfiguration","fields":{"configurationType":{"name":"configurationType","type":"\u0007","is_mandatory":true,"title":"Kind of enrollment configuration this entry represents","desc":"One of `limit`, `platformRestrictions`, `windowsHelloForBusiness`, or `unknown`. Derived from the configuration's `@odata.type`. `limit` caps the number of devices a user can enroll. `platformRestrictions` allows or blocks enrollment per platform (Android, iOS, macOS, Windows, Windows Mobile). `windowsHelloForBusiness` controls Windows Hello PIN, gesture, and biometric requirements.","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Created date time in UTC of the device enrollment configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"The description of the device enrollment configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"The display name of the device enrollment configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Unique identifier for the account","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"Last modified date time in UTC of the device enrollment configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policyAssignments":{"name":"policyAssignments","type":"\u0019\u001bmicrosoft.devicemanagement.policyAssignment","is_mandatory":true,"title":"Assignments targeting this enrollment configuration, with each target resolved to its kind, group, and any assignment filter","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Priority is used when a user exists in multiple groups that are assigned enrollment configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settings":{"name":"settings","type":"\n","is_mandatory":true,"title":"Subtype-specific settings, keyed by setting name","desc":"`limit`-type entries populate `limit` (the device cap). `platformRestrictions`-type entries populate per-platform blocks under `iosRestriction`, `androidRestriction`, `macOSRestriction`, `windowsRestriction`, `windowsMobileRestriction`, each with `platformBlocked`, `personalDeviceEnrollmentBlocked`, `osMinimumVersion`, and `osMaximumVersion`. `windowsHelloForBusiness`-type entries populate `state`, `pinMinimumLength`, `pinMaximumLength`, `pinUppercaseCharactersUsage`, `pinLowercaseCharactersUsage`, `pinSpecialCharactersUsage`, `pinExpirationInDays`, `pinPreviousBlockCount`, `securityDeviceRequired`, `unlockWithBiometricsEnabled`, `enhancedBiometricsState`, and `remotePassportEnabled`.","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"The version of the device enrollment configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Device Enrollment Configuration","private":true,"min_provider_version":"11.1.40","defaults":"id displayName configurationType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.devicecompliancepolicy":{"id":"microsoft.devicemanagement.devicecompliancepolicy","name":"microsoft.devicemanagement.devicecompliancepolicy","fields":{"assignments":{"name":"assignments","type":"\u0019\n","is_mandatory":true,"title":"Device compliance policy assignments","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Device compliance policy creation date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Device compliance policy description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Device compliance policy display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Device compliance policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"Device compliance policy last modified date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"platformType":{"name":"platformType","type":"\u0007","is_mandatory":true,"title":"Platform this compliance policy targets","desc":"One of `iOS`, `android`, `androidWorkProfile`, `windows10`, `windows10Mobile`, `windows81`, `windowsPhone81`, `macOS`, or `unknown`. Derived from the policy's `@odata.type`.","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policyAssignments":{"name":"policyAssignments","type":"\u0019\u001bmicrosoft.devicemanagement.policyAssignment","is_mandatory":true,"title":"Assignments targeting this compliance policy, with each target resolved to its kind, group, and any assignment filter","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Raw device compliance policy properties","desc":"Deprecated in favor of `settings` and `policyAssignments`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"scheduledActionsForRule":{"name":"scheduledActionsForRule","type":"\u0019\n","is_mandatory":true,"title":"Escalation actions evaluated when the policy is out of compliance","desc":"Each entry has `ruleName` (e.g., `PasswordRequired`) and `scheduledActionConfigurations` — a list of action items with `actionType` (`notification`, `block`, `retire`, `wipe`, `removeResourceAccessProfiles`, `pushNotification`, `remoteLock`), `gracePeriodHours`, `notificationTemplateId`, and `notificationMessageCCList`.","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settings":{"name":"settings","type":"\n","is_mandatory":true,"title":"Configured compliance rules, keyed by setting name","desc":"Union of platform-specific rule fields exposed by the policy's `@odata.type`. Common keys include `passcodeRequired` / `passwordRequired`, `passcodeMinimumLength` / `passwordMinimumLength`, `passcodeRequiredType` / `passwordRequiredType`, `passcodeBlockSimple` / `passwordBlockSimple`, `passcodeExpirationDays` / `passwordExpirationDays`, `passcodeMinutesOfInactivityBeforeLock` / `passwordMinutesOfInactivityBeforeLock`, `storageRequireEncryption`, `osMinimumVersion`, `osMaximumVersion`, `securityBlockJailbrokenDevices`, `deviceThreatProtectionEnabled`, `deviceThreatProtectionRequiredSecurityLevel`, `managedEmailProfileRequired`. iOS-specific keys add `passcodeMinimumCharacterSetCount`, `passcodePreviousPasscodeBlockCount`. Android keys add `minAndroidSecurityPatchLevel`, `securityDisableUsbDebugging`, `securityPreventInstallAppsFromUnknownSources`, `securityRequireGooglePlayServices`, `securityRequireSafetyNetAttestationBasicIntegrity`, `securityRequireSafetyNetAttestationCertifiedDevice`, `securityRequireCompanyPortalAppIntegrity`, `securityRequireUpToDateSecurityProviders`, `securityRequireVerifyApps`. Windows 10 keys add `bitLockerEnabled`, `secureBootEnabled`, `codeIntegrityEnabled`, `earlyLaunchAntiMalwareDriverEnabled`, `requireHealthyDeviceReport`, `passwordRequiredToUnlockFromIdle`, `mobileOsMinimumVersion`, `mobileOsMaximumVersion`. macOS keys add `firewallEnabled`, `firewallBlockAllIncoming`, `firewallEnableStealthMode`, `systemIntegrityProtectionEnabled`.","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Device compliance policy version","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft device compliance policy","private":true,"min_provider_version":"9.0.0","defaults":"id displayName platformType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.deviceconfiguration":{"id":"microsoft.devicemanagement.deviceconfiguration","name":"microsoft.devicemanagement.deviceconfiguration","fields":{"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Device configuration creation date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Device configuration description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Device configuration display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Device configuration ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"Device configuration last modify date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"platformType":{"name":"platformType","type":"\u0007","is_mandatory":true,"title":"Platform this configuration profile targets","desc":"One of `iOS`, `android`, `androidWorkProfile`, `windows10`, `macOS`, or `unknown`. Derived from the profile's `@odata.type`.","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policyAssignments":{"name":"policyAssignments","type":"\u0019\u001bmicrosoft.devicemanagement.policyAssignment","is_mandatory":true,"title":"Assignments targeting this configuration profile, with each target resolved to its kind, group, and any assignment filter","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Raw device configuration properties","desc":"Deprecated in favor of `settings` and `policyAssignments`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"settings":{"name":"settings","type":"\n","is_mandatory":true,"title":"Configured profile settings, keyed by setting name","desc":"Union of platform-specific configuration fields exposed by the profile's `@odata.type`. General-device-configuration profiles populate password/passcode requirements (`passwordRequired` / `passcodeRequired`, `passwordMinimumLength` / `passcodeMinimumLength`, `passwordRequiredType` / `passcodeRequiredType`, `passwordBlockSimple` / `passcodeBlockSimple`, `passwordExpirationDays` / `passcodeExpirationDays`, `passwordMinutesOfInactivityBeforeScreenTimeout` / `passcodeMinutesOfInactivityBeforeScreenTimeout`, `passcodeMinutesOfInactivityBeforeLock`, `passwordSignInFailureCountBeforeFactoryReset`, `passcodeSignInFailureCountBeforeWipe`). Android Work Profile adds work-profile-scoped variants (`workProfilePasswordRequiredType`, `workProfilePasswordMinutesOfInactivityBeforeScreenTimeout`). Windows 10 General Configuration also surfaces device-restriction flags. Profile types that are not \"general device configuration\" (Wi-Fi, VPN, certificates, custom OMA-URI, etc.) leave this empty — use `policyAssignments` and `displayName` to identify them.","min_provider_version":"13.0.13","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Device configuration version","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft device configuration","private":true,"min_provider_version":"9.0.0","defaults":"id displayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.intent":{"id":"microsoft.devicemanagement.intent","name":"microsoft.devicemanagement.intent","fields":{"assignments":{"name":"assignments","type":"\u0019\u001bmicrosoft.devicemanagement.policyAssignment","title":"Assignments targeting this intent","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Intent ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isAssigned":{"name":"isAssigned","type":"\u0004","is_mandatory":true,"title":"Whether the intent has at least one assignment","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"Last modification date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"setting":{"name":"setting","type":"\u001bmicrosoft.devicemanagement.intent.setting","title":"Setting configured on an endpoint security intent","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"settings":{"name":"settings","type":"\u0019\u001bmicrosoft.devicemanagement.intent.setting","title":"Settings configured on this intent","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"templateDisplayName":{"name":"templateDisplayName","type":"\u0007","is_mandatory":true,"title":"Display name of the source template","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"templateId":{"name":"templateId","type":"\u0007","is_mandatory":true,"title":"Template ID this intent was created from","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Endpoint security intent","desc":"Examine endpoint security policies created from Intune templates: antivirus, disk encryption, firewall, endpoint detection and response, account protection, and attack surface reduction. `templateId` and `templateDisplayName` identify which template the intent was created from; `settings()` returns the configured settings; `assignments()` returns the groups and devices it targets.","private":true,"min_provider_version":"13.0.12","defaults":"id displayName templateDisplayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.intent.setting":{"id":"microsoft.devicemanagement.intent.setting","name":"microsoft.devicemanagement.intent.setting","fields":{"definitionId":{"name":"definitionId","type":"\u0007","is_mandatory":true,"title":"Setting definition ID, such as deviceConfiguration--windows10EndpointProtectionConfiguration_defenderRequireRealTimeMonitoring","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Setting ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"valueJson":{"name":"valueJson","type":"\u0007","is_mandatory":true,"title":"Configured value, serialized as JSON","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"valueType":{"name":"valueType","type":"\u0007","is_mandatory":true,"title":"Setting value type, the @odata.type of the value wrapper","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Setting configured on an endpoint security intent","private":true,"min_provider_version":"13.0.12","defaults":"definitionId valueJson","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.manageddevice":{"id":"microsoft.devicemanagement.manageddevice","name":"microsoft.devicemanagement.manageddevice","fields":{"androidSecurityPatchLevel":{"name":"androidSecurityPatchLevel","type":"\u0007","is_mandatory":true,"title":"Android security patch level","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"azureADRegistered":{"name":"azureADRegistered","type":"\u0004","is_mandatory":true,"title":"Whether the device is Entra ID (previously Azure AD) registered","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"azureActiveDirectoryDeviceId":{"name":"azureActiveDirectoryDeviceId","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the Entra ID (previously Azure AD) device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"complianceGracePeriodExpirationDateTime":{"name":"complianceGracePeriodExpirationDateTime","type":"\t","is_mandatory":true,"title":"Compliance grace period expiration date and time","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"compliancePolicyStates":{"name":"compliancePolicyStates","type":"\u0019\u001bmicrosoft.devicemanagement.manageddevice.policyState","title":"Compliance policy evaluation states, one entry per policy that has been evaluated against this device","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"complianceState":{"name":"complianceState","type":"\u0007","is_mandatory":true,"title":"Compliance state of the device (compliant, noncompliant, conflict, error, unknown, notApplicable)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"configurationStates":{"name":"configurationStates","type":"\u0019\u001bmicrosoft.devicemanagement.manageddevice.policyState","title":"Configuration profile evaluation states, one entry per profile that has been evaluated against this device","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"detectedApps":{"name":"detectedApps","type":"\u0019\u001bmicrosoft.devicemanagement.detectedapp","title":"Apps detected as installed on this device","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceCategoryDisplayName":{"name":"deviceCategoryDisplayName","type":"\u0007","is_mandatory":true,"title":"Device category display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceEnrollmentType":{"name":"deviceEnrollmentType","type":"\u0007","is_mandatory":true,"title":"Device enrollment type","desc":"For example: unknown, userEnrollment, deviceEnrollmentManager, appleBulkWithUser, appleBulkWithoutUser, windowsAzureADJoin, windowsBulkUserless, windowsAutoEnrollment, windowsBulkAzureDomainJoin, windowsCoManagement.","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceRegistrationState":{"name":"deviceRegistrationState","type":"\u0007","is_mandatory":true,"title":"Device registration state","desc":"One of: notRegistered, registered, revoked, keyConflict, approvalPending, certificateReset, notRegisteredPendingEnrollment, unknown.","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"easActivated":{"name":"easActivated","type":"\u0004","is_mandatory":true,"title":"Whether the device is Exchange ActiveSync activated","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"easDeviceId":{"name":"easDeviceId","type":"\u0007","is_mandatory":true,"title":"Exchange ActiveSync Id of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"emailAddress":{"name":"emailAddress","type":"\u0007","is_mandatory":true,"title":"Email(s) for the user associated with the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enrolledDateTime":{"name":"enrolledDateTime","type":"\t","is_mandatory":true,"title":"Date and time that the device was enrolled","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enrollmentProfileName":{"name":"enrollmentProfileName","type":"\u0007","is_mandatory":true,"title":"Name of the enrollment profile assigned to the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ethernetMacAddress":{"name":"ethernetMacAddress","type":"\u0007","is_mandatory":true,"title":"Ethernet MAC address of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"freeStorageSpaceInBytes":{"name":"freeStorageSpaceInBytes","type":"\u0005","is_mandatory":true,"title":"Available storage in bytes","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"iccid":{"name":"iccid","type":"\u0007","is_mandatory":true,"title":"Integrated Circuit Card Identifier (ICCID)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Managed device ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"imei":{"name":"imei","type":"\u0007","is_mandatory":true,"title":"International Mobile Equipment Identity (IMEI)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isEncrypted":{"name":"isEncrypted","type":"\u0004","is_mandatory":true,"title":"Device encryption status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isSupervised":{"name":"isSupervised","type":"\u0004","is_mandatory":true,"title":"Device supervised status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"jailBroken":{"name":"jailBroken","type":"\u0007","is_mandatory":true,"title":"Whether the device is jail broken or rooted","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastSyncDateTime":{"name":"lastSyncDateTime","type":"\t","is_mandatory":true,"title":"Last time the device contacted Intune","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"managementAgent":{"name":"managementAgent","type":"\u0007","is_mandatory":true,"title":"Management agent type (eas, mdm, easMdm, intuneClient, easIntuneClient, configurationManagerClient, etc.)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"managementCertificateExpirationDate":{"name":"managementCertificateExpirationDate","type":"\t","is_mandatory":true,"title":"Management certificate expiration date","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"manufacturer":{"name":"manufacturer","type":"\u0007","is_mandatory":true,"title":"Device manufacturer","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"meid":{"name":"meid","type":"\u0007","is_mandatory":true,"title":"Mobile Equipment Identifier (MEID)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"model":{"name":"model","type":"\u0007","is_mandatory":true,"title":"Device model","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notes":{"name":"notes","type":"\u0007","is_mandatory":true,"title":"Notes on the device created by IT","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"operatingSystem":{"name":"operatingSystem","type":"\u0007","is_mandatory":true,"title":"Operating system of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"Operating system version of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"partnerReportedThreatState":{"name":"partnerReportedThreatState","type":"\u0007","is_mandatory":true,"title":"Threat state reported by a Mobile Threat Defense partner","desc":"One of: unknown, activated, deactivated, secured, lowSeverity, mediumSeverity, highSeverity, unresponsive, compromised, misconfigured.","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"phoneNumber":{"name":"phoneNumber","type":"\u0007","is_mandatory":true,"title":"Phone number of the device","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policyState":{"name":"policyState","type":"\u001bmicrosoft.devicemanagement.manageddevice.policyState","title":"Evaluation state of a single Intune policy on a managed device","desc":"Examine compliance and configuration evaluation results for a managed device, one entry per policy. The `state` field gives the aggregate result (`compliant`, `nonCompliant`, `conflict`, `error`, `notApplicable`, `inGracePeriod`), and `settingStates` lists per-setting outcomes that rolled up into it. `sourceType` distinguishes compliance from configuration evaluations (`deviceCompliancePolicyState`, `deviceConfigurationState`).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"subscriberCarrier":{"name":"subscriberCarrier","type":"\u0007","is_mandatory":true,"title":"Subscriber carrier of the device","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"totalStorageSpaceInBytes":{"name":"totalStorageSpaceInBytes","type":"\u0005","is_mandatory":true,"title":"Total storage in bytes","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"udid":{"name":"udid","type":"\u0007","is_mandatory":true,"title":"Unique Device Identifier (UDID) for iOS and macOS devices","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userDisplayName":{"name":"userDisplayName","type":"\u0007","is_mandatory":true,"title":"User display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"Unique identifier for the user associated with the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userPrincipalName":{"name":"userPrincipalName","type":"\u0007","is_mandatory":true,"title":"Device user principal name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"wiFiMacAddress":{"name":"wiFiMacAddress","type":"\u0007","is_mandatory":true,"title":"Wi-Fi MAC address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"windowsProtectionState":{"name":"windowsProtectionState","type":"\n","is_mandatory":true,"title":"Protection state of the device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft managed device","private":true,"min_provider_version":"11.1.40","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.manageddevice.policyState":{"id":"microsoft.devicemanagement.manageddevice.policyState","name":"microsoft.devicemanagement.manageddevice.policyState","fields":{"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Policy or profile display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"State ID, composed of the parent device and policy IDs","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"platformType":{"name":"platformType","type":"\u0007","is_mandatory":true,"title":"Platform the policy targets (windows10AndLater, iOS, android, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settingCount":{"name":"settingCount","type":"\u0005","is_mandatory":true,"title":"Setting count","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settingStates":{"name":"settingStates","type":"\u0019\n","is_mandatory":true,"title":"Per-setting evaluation states with the setting definition ID and outcome","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"sourceType":{"name":"sourceType","type":"\u0007","is_mandatory":true,"title":"Source of the evaluation (deviceCompliancePolicyState, deviceConfigurationState)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Aggregate evaluation state (compliant, nonCompliant, conflict, error, notApplicable, inGracePeriod)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Version of the policy that produced this state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Evaluation state of a single Intune policy on a managed device","desc":"Examine compliance and configuration evaluation results for a managed device, one entry per policy. The `state` field gives the aggregate result (`compliant`, `nonCompliant`, `conflict`, `error`, `notApplicable`, `inGracePeriod`), and `settingStates` lists per-setting outcomes that rolled up into it. `sourceType` distinguishes compliance from configuration evaluations (`deviceCompliancePolicyState`, `deviceConfigurationState`).","private":true,"min_provider_version":"13.0.12","defaults":"displayName state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.mobileapp":{"id":"microsoft.devicemanagement.mobileapp","name":"microsoft.devicemanagement.mobileapp","fields":{"assignments":{"name":"assignments","type":"\u0019\u001bmicrosoft.devicemanagement.policyAssignment","title":"Assignments targeting this app","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Creation date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"App description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"App display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Mobile app ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"informationUrl":{"name":"informationUrl","type":"\u0007","is_mandatory":true,"title":"Information URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isFeatured":{"name":"isFeatured","type":"\u0004","is_mandatory":true,"title":"Whether the app is featured in the Company Portal","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"Last modification date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"privacyInformationUrl":{"name":"privacyInformationUrl","type":"\u0007","is_mandatory":true,"title":"Privacy information URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Subtype-discriminated fields keyed by @odata.type — bundleId / productCode for store apps, appStoreUrl, packageId, installCommandLine, and similar","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"publisher":{"name":"publisher","type":"\u0007","is_mandatory":true,"title":"Publisher","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"publishingState":{"name":"publishingState","type":"\u0007","is_mandatory":true,"title":"Publishing state (notPublished, processing, published)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Mobile app published to the Intune tenant","desc":"Examine apps published to Intune for deployment to managed devices. Apps include store apps, line-of-business apps, web apps, and managed Google Play apps. `properties` holds subtype-specific fields keyed by `@odata.type` (for example `bundleId`, `productCode`, `appStoreUrl`, `installCommandLine`), `publishingState` indicates whether the app is ready for deployment, and `assignments()` returns the groups it targets.","private":true,"min_provider_version":"13.0.12","defaults":"id displayName publisher","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.policyAssignment":{"id":"microsoft.devicemanagement.policyAssignment","name":"microsoft.devicemanagement.policyAssignment","fields":{"excluded":{"name":"excluded","type":"\u0004","is_mandatory":true,"title":"Whether the assignment excludes the target rather than including it","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"filterId":{"name":"filterId","type":"\u0007","is_mandatory":true,"title":"Assignment filter ID when a filter is applied, empty otherwise","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"filterType":{"name":"filterType","type":"\u0007","is_mandatory":true,"title":"Assignment filter type (none, include, exclude)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"groupId":{"name":"groupId","type":"\u0007","is_mandatory":true,"title":"Group ID when the target is a group, empty otherwise","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Assignment ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"targetType":{"name":"targetType","type":"\u0007","is_mandatory":true,"title":"Target kind (groupAssignmentTarget, exclusionGroupAssignmentTarget, allDevicesAssignmentTarget, allLicensedUsersAssignmentTarget)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Assignment of an Intune device management policy","desc":"Examine which groups, devices, or licensed users an Intune policy targets, and whether each assignment is an include or an exclude. `policyAssignment` is used by compliance policies, configuration profiles, endpoint security intents, and mobile apps. `targetType` identifies the kind of target (`groupAssignmentTarget`, `exclusionGroupAssignmentTarget`, `allDevicesAssignmentTarget`, `allLicensedUsersAssignmentTarget`); `groupId` is populated only when the target is a group.","private":true,"min_provider_version":"13.0.12","defaults":"id targetType groupId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.roleAssignment":{"id":"microsoft.devicemanagement.roleAssignment","name":"microsoft.devicemanagement.roleAssignment","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role assignment ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"members":{"name":"members","type":"\u0019\u0007","is_mandatory":true,"title":"Group IDs that receive the role","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"resourceScopes":{"name":"resourceScopes","type":"\u0019\u0007","is_mandatory":true,"title":"Scope tag IDs the assignment is limited to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleDefinitionId":{"name":"roleDefinitionId","type":"\u0007","is_mandatory":true,"title":"ID of the role definition this assignment grants","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scopeMembers":{"name":"scopeMembers","type":"\u0019\u0007","is_mandatory":true,"title":"Group IDs whose objects the role applies to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Assignment of an Intune RBAC role to members","desc":"Examine which security groups receive which Intune roles, and which scope tags constrain where they can act. `members` are the groups that receive the role; `scopeMembers` are the groups whose objects the role applies to; `resourceScopes` is the set of scope-tag IDs the assignment is limited to.","private":true,"min_provider_version":"13.0.12","defaults":"id displayName roleDefinitionId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.roleDefinition":{"id":"microsoft.devicemanagement.roleDefinition","name":"microsoft.devicemanagement.roleDefinition","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role definition ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isBuiltIn":{"name":"isBuiltIn","type":"\u0004","is_mandatory":true,"title":"Whether the role is built-in (managed by Microsoft) rather than custom","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"rolePermissions":{"name":"rolePermissions","type":"\u0019\n","is_mandatory":true,"title":"Permission grants, each entry listing allowed Intune resource actions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleScopeTagIds":{"name":"roleScopeTagIds","type":"\u0019\u0007","is_mandatory":true,"title":"Scope tag IDs this role is constrained to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Intune RBAC role definition","desc":"Examine the Intune role-based access control catalog: built-in Microsoft roles plus any custom roles defined in the tenant. `rolePermissions` lists the Intune resource actions the role grants; `roleScopeTagIds` lists the scope tags the role is allowed to operate against.","private":true,"min_provider_version":"13.0.12","defaults":"id displayName isBuiltIn","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.roleScopeTag":{"id":"microsoft.devicemanagement.roleScopeTag","name":"microsoft.devicemanagement.roleScopeTag","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Scope tag ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isBuiltIn":{"name":"isBuiltIn","type":"\u0004","is_mandatory":true,"title":"Whether the scope tag is built-in (the \"Default\" tag with ID \"0\")","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Intune RBAC role scope tag","desc":"Examine the scope tags used to partition Intune resources by team or region. Tags are attached to managed devices, policies, and apps, and constrain which administrators can see and modify which objects.","private":true,"min_provider_version":"13.0.12","defaults":"id displayName isBuiltIn","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devicemanagement.windowsAutopilotDeploymentProfile":{"id":"microsoft.devicemanagement.windowsAutopilotDeploymentProfile","name":"microsoft.devicemanagement.windowsAutopilotDeploymentProfile","fields":{"assignedDeviceCount":{"name":"assignedDeviceCount","type":"\u0005","is_mandatory":true,"title":"Number of devices currently assigned to this profile","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Creation date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deploymentProfileType":{"name":"deploymentProfileType","type":"\u0007","is_mandatory":true,"title":"Deployment profile kind (azureADJoinedDeploymentProfile, activeDirectoryWindowsAutopilotDeploymentProfile, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deviceNameTemplate":{"name":"deviceNameTemplate","type":"\u0007","is_mandatory":true,"title":"Device name template, with substitutable tokens such as %SERIAL%","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enableWhiteGlove":{"name":"enableWhiteGlove","type":"\u0004","is_mandatory":true,"title":"Whether the white-glove (pre-provisioning) flow is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"extractHardwareHash":{"name":"extractHardwareHash","type":"\u0004","is_mandatory":true,"title":"Whether hardware hashes are collected during provisioning","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Deployment profile ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"language":{"name":"language","type":"\u0007","is_mandatory":true,"title":"Language tag applied during provisioning","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"Last modification date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"locale":{"name":"locale","type":"\u0007","is_mandatory":true,"title":"Locale tag applied during provisioning","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"outOfBoxExperienceSettings":{"name":"outOfBoxExperienceSettings","type":"\n","is_mandatory":true,"title":"Out-of-box experience settings such as user-type, hide-EULA, hide-privacy-settings, and skip-keyboard-selection","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Windows Autopilot deployment profile","desc":"Examine Windows Autopilot deployment profiles that drive zero-touch provisioning. The profile sets language, locale, device-name template, and the out-of-box experience that end users see during first sign-in; `deploymentProfileType` distinguishes Azure AD joined, Hybrid Azure AD joined, and self-deploying flows.","private":true,"min_provider_version":"13.0.12","defaults":"id displayName deploymentProfileType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.devices":{"id":"microsoft.devices","name":"microsoft.devices","fields":{"filter":{"name":"filter","type":"\u0007","is_mandatory":true,"title":"Filter devices by property values","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.device","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"search":{"name":"search","type":"\u0007","is_mandatory":true,"title":"Search devices by search phrases","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"init":{"args":[{"name":"filter","type":"\u0007","optional":true},{"name":"search","type":"\u0007","optional":true}]},"list_type":"\u001bmicrosoft.device","title":"Microsoft Entra ID Devices","desc":"Iterate over devices registered in Microsoft Entra ID. Supports optional `filter` (OData property filter) and `search` (keyword search) parameters. Each entry is a `microsoft.device` exposing compliance state, management status, operating system details, enrollment type, trust type, and on-premises sync information.","min_provider_version":"11.1.21","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.domain":{"id":"microsoft.domain","name":"microsoft.domain","fields":{"authenticationType":{"name":"authenticationType","type":"\u0007","is_mandatory":true,"title":"Domain authentication type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"availabilityStatus":{"name":"availabilityStatus","type":"\u0007","is_mandatory":true,"title":"Domain availability status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Domain ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isAdminManaged":{"name":"isAdminManaged","type":"\u0004","is_mandatory":true,"title":"Whether the domain is admin managed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isDefault":{"name":"isDefault","type":"\u0004","is_mandatory":true,"title":"Whether the domain is the default domain","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isInitial":{"name":"isInitial","type":"\u0004","is_mandatory":true,"title":"Whether the domain is the initial domain","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isRoot":{"name":"isRoot","type":"\u0004","is_mandatory":true,"title":"Whether the domain is a root domain","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isVerified":{"name":"isVerified","type":"\u0004","is_mandatory":true,"title":"Whether the domain is verified","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"passwordNotificationWindowInDays":{"name":"passwordNotificationWindowInDays","type":"\u0005","is_mandatory":true,"title":"Domain password notification window (days)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"passwordValidityPeriodInDays":{"name":"passwordValidityPeriodInDays","type":"\u0005","is_mandatory":true,"title":"Domain password validity period (days)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"serviceConfigurationRecords":{"name":"serviceConfigurationRecords","type":"\u0019\u001bmicrosoft.domaindnsrecord","title":"List of service configuration records","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"supportedServices":{"name":"supportedServices","type":"\u0019\u0007","is_mandatory":true,"title":"List of supported services","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft domain","private":true,"min_provider_version":"9.0.0","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.domaindnsrecord":{"id":"microsoft.domaindnsrecord","name":"microsoft.domaindnsrecord","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Domain record ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isOptional":{"name":"isOptional","type":"\u0004","is_mandatory":true,"title":"Whether the domain record is optional","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"label":{"name":"label","type":"\u0007","is_mandatory":true,"title":"Domain record label","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Raw domain record properties","desc":"Deprecated in favor of the typed fields on this resource (`recordType`, `supportedService`, `ttl`, `label`).","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"recordType":{"name":"recordType","type":"\u0007","is_mandatory":true,"title":"Domain record type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"supportedService":{"name":"supportedService","type":"\u0007","is_mandatory":true,"title":"Domain record supported service","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"Domain record TTL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft domain DNS record","private":true,"min_provider_version":"9.0.0","defaults":"id label","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.externalIdentitiesPolicy":{"id":"microsoft.externalIdentitiesPolicy","name":"microsoft.externalIdentitiesPolicy","fields":{"allowExternalIdentitiesToLeave":{"name":"allowExternalIdentitiesToLeave","type":"\u0004","is_mandatory":true,"title":"Defines whether external users can leave the guest tenant","desc":"If set to false, self-service controls are disabled, and the admin must manually remove the external user.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Policy description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Policy display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Tenant-wide policy that controls whether external users can leave a tenant via self-service controls","private":true,"min_provider_version":"11.1.99","defaults":"displayName allowExternalIdentitiesToLeave","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.graph":{"id":"microsoft.graph","fields":{"accessReviewReviewerScope":{"name":"accessReviewReviewerScope","type":"\u001bmicrosoft.graph.accessReviewReviewerScope","title":"List of reviewers for the admin consent","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true}},"is_extension":true},"microsoft.graph.accessReviewReviewerScope":{"id":"microsoft.graph.accessReviewReviewerScope","name":"microsoft.graph.accessReviewReviewerScope","fields":{"query":{"name":"query","type":"\u0007","is_mandatory":true,"title":"The query specifying who will be the reviewer","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"queryRoot":{"name":"queryRoot","type":"\u0007","is_mandatory":true,"title":"In the scenario where reviewers need to be specified dynamically, this property is used to indicate the relative source of the query","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"queryType":{"name":"queryType","type":"\u0007","is_mandatory":true,"title":"The type of query","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"List of reviewers for the admin consent","private":true,"min_provider_version":"11.1.42","defaults":"query queryType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.group":{"id":"microsoft.group","name":"microsoft.group","fields":{"classification":{"name":"classification","type":"\u0007","is_mandatory":true,"title":"Classification assigned to the group (e.g., low, medium, high)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Group creation time","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"deletedDateTime":{"name":"deletedDateTime","type":"\t","is_mandatory":true,"title":"Soft-delete timestamp for the group","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Group description","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Group display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"expirationDateTime":{"name":"expirationDateTime","type":"\t","is_mandatory":true,"title":"Expiration time for the group","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"groupTypes":{"name":"groupTypes","type":"\u0019\u0007","is_mandatory":true,"title":"Group types indicating the membership and classification of the group","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Group ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isAssignableToRole":{"name":"isAssignableToRole","type":"\u0004","is_mandatory":true,"title":"Whether the group can be assigned to an Entra role","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mail":{"name":"mail","type":"\u0007","is_mandatory":true,"title":"Group email","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mailEnabled":{"name":"mailEnabled","type":"\u0004","is_mandatory":true,"title":"Whether group email is enabled status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mailNickname":{"name":"mailNickname","type":"\u0007","is_mandatory":true,"title":"Group email nickname","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"members":{"name":"members","type":"\u0019\u001bmicrosoft.user","title":"List of group members","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"membershipRule":{"name":"membershipRule","type":"\u0007","is_mandatory":true,"title":"Membership rule used for dynamic group membership","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"membershipRuleProcessingState":{"name":"membershipRuleProcessingState","type":"\u0007","is_mandatory":true,"title":"State of the processing for the dynamic membership rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesLastSyncDateTime":{"name":"onPremisesLastSyncDateTime","type":"\t","is_mandatory":true,"title":"Last time the group was synced from on-premises","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesSyncEnabled":{"name":"onPremisesSyncEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the group is synced from an on-premises directory","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"owner":{"name":"owner","type":"\u001bmicrosoft.group.owner","title":"Group owner (can be a user or service principal)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"owners":{"name":"owners","type":"\u0019\u001bmicrosoft.group.owner","title":"List of group owners","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"preferredDataLocation":{"name":"preferredDataLocation","type":"\u0007","is_mandatory":true,"title":"The preferred data location for the group (e.g., a geo region)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"preferredLanguage":{"name":"preferredLanguage","type":"\u0007","is_mandatory":true,"title":"The group's preferred language (ISO 639-1 code)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"proxyAddresses":{"name":"proxyAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Email addresses including aliases for the group","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"renewedDateTime":{"name":"renewedDateTime","type":"\t","is_mandatory":true,"title":"Last time the group was renewed","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"securityEnabled":{"name":"securityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether group security is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"theme":{"name":"theme","type":"\u0007","is_mandatory":true,"title":"The color theme for the group (blue, green, orange, pink, purple, red, teal)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"visibility":{"name":"visibility","type":"\u0007","is_mandatory":true,"title":"Group visibility state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft group","private":true,"min_provider_version":"9.0.0","defaults":"id displayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.group.owner":{"id":"microsoft.group.owner","name":"microsoft.group.owner","fields":{"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"The owner's display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the owner","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ownerType":{"name":"ownerType","type":"\u0007","is_mandatory":true,"title":"The type of owner: \"user\" or \"servicePrincipal\"","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePrincipal":{"name":"servicePrincipal","type":"\u001bmicrosoft.serviceprincipal","title":"The owner as a service principal (if ownerType is \"servicePrincipal\")","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"user":{"name":"user","type":"\u001bmicrosoft.user","title":"The owner as a user (if ownerType is \"user\")","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Group owner (can be a user or service principal)","private":true,"min_provider_version":"11.1.68","defaults":"id displayName ownerType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.groupLifecyclePolicy":{"id":"microsoft.groupLifecyclePolicy","name":"microsoft.groupLifecyclePolicy","fields":{"alternateNotificationEmails":{"name":"alternateNotificationEmails","type":"\u0007","is_mandatory":true,"title":"List of email addresses to send notifications for groups without owners","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"groupLifetimeInDays":{"name":"groupLifetimeInDays","type":"\u0005","is_mandatory":true,"title":"Number of days before a group expires and is automatically deleted","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"managedGroupTypes":{"name":"managedGroupTypes","type":"\u0007","is_mandatory":true,"title":"The group type for which the policies will apply","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft group lifecycle policy","private":true,"min_provider_version":"11.1.42","defaults":"groupLifetimeInDays managedGroupTypes alternateNotificationEmails","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.groups":{"id":"microsoft.groups","name":"microsoft.groups","fields":{"length":{"name":"length","type":"\u0005","title":"Total number of Microsoft groups","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.group","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"list_type":"\u001bmicrosoft.group","title":"Microsoft Entra ID Groups","desc":"Iterate over all Microsoft Entra ID (formerly Azure AD) groups in the tenant. Each entry is a `microsoft.group` exposing `displayName`, `securityEnabled`, `mailEnabled`, `groupTypes`, membership rules, expiration settings, and on-premises sync status. Use `length` to count the total number of groups.","min_provider_version":"11.1.19","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess":{"id":"microsoft.identityAndAccess","name":"microsoft.identityAndAccess","fields":{"accessReviewDefinition":{"name":"accessReviewDefinition","type":"\u001bmicrosoft.identityAndAccess.accessReviewDefinition","title":"Defines a recurring access review schedule and its properties in Microsoft Entra ID.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"accessReviews":{"name":"accessReviews","type":"\u001bmicrosoft.identityAndAccess.accessReviews","title":"Microsoft Entra ID Access Review Definitions","desc":"Iterate over recurring access review schedules defined in the tenant. Supports an optional `filter` parameter using OData syntax to narrow results — for example, filtering by scope to find reviews targeting group membership. Each entry exposes the review's `displayName`, `status`, `scope`, `reviewers`, and `settings` describing the recurrence and decision-handling configuration.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"filter":{"name":"filter","type":"\u0007","is_mandatory":true,"title":"Policy filter expression","desc":"Deprecated in favor of `microsoft.identityAndAccess.privilegedIdentityManagement.policies`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"identityAndSignIn":{"name":"identityAndSignIn","type":"\u001bmicrosoft.identityAndAccess.identityAndSignIn","title":"Identity and sign-in policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.identityAndAccess.policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"organization":{"name":"organization","type":"\u001bmicrosoft.tenant","title":"Tenant organization information","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policy":{"name":"policy","type":"\u001bmicrosoft.identityAndAccess.policy","title":"PIM role management policy for Microsoft Entra ID roles","desc":"Deprecated in favor of `microsoft.identityAndAccess.privilegedIdentityManagement.policy`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true,"maturity":"deprecated"},"privilegedIdentityManagement":{"name":"privilegedIdentityManagement","type":"\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement","title":"Privileged Identity Management resources","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleEligibilityScheduleInstance":{"name":"roleEligibilityScheduleInstance","type":"\u001bmicrosoft.identityAndAccess.roleEligibilityScheduleInstance","title":"Represents an instance of a role eligibility in PIM","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"roleEligibilityScheduleInstances":{"name":"roleEligibilityScheduleInstances","type":"\u0019\u001bmicrosoft.identityAndAccess.roleEligibilityScheduleInstance","title":"Get the instances of role eligibilities","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"init":{"args":[{"name":"filter","type":"\u0007","optional":true}]},"list_type":"\u001bmicrosoft.identityAndAccess.policy","title":"Microsoft Entra identity and access management","desc":"Container for identity and sign-in policies, PIM role eligibilities and policies, and tenant organization information.","min_provider_version":"11.1.40","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.accessReviewDefinition":{"id":"microsoft.identityAndAccess.accessReviewDefinition","name":"microsoft.identityAndAccess.accessReviewDefinition","fields":{"accessReviewScheduleSettings":{"name":"accessReviewScheduleSettings","type":"\u001bmicrosoft.identityAndAccess.accessReviewDefinition.accessReviewScheduleSettings","title":"Configures the recurrence, notifications, and decision-handling for an access review series.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"The display name for the access review","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the access review","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reviewers":{"name":"reviewers","type":"\n","is_mandatory":true,"title":"This collection of access review scopes is used to define who are the reviewers","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scope":{"name":"scope","type":"\u001bmicrosoft.identityAndAccess.accessReviewDefinition.scope","is_mandatory":true,"title":"Defines the entities whose access is reviewed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settings":{"name":"settings","type":"\u001bmicrosoft.identityAndAccess.accessReviewDefinition.accessReviewScheduleSettings","is_mandatory":true,"title":"The settings for an access review series, see type definition below","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"The status of the access review","desc":"Possible values are: Initializing, NotStarted, Starting, InProgress, Completing, Completed, AutoReviewing, and AutoReviewed.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Defines a recurring access review schedule and its properties in Microsoft Entra ID.","private":true,"min_provider_version":"11.1.46","defaults":"id displayName status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.accessReviewDefinition.accessReviewScheduleSettings":{"id":"microsoft.identityAndAccess.accessReviewDefinition.accessReviewScheduleSettings","name":"microsoft.identityAndAccess.accessReviewDefinition.accessReviewScheduleSettings","fields":{"autoApplyDecisionsEnabled":{"name":"autoApplyDecisionsEnabled","type":"\u0004","is_mandatory":true,"title":"True if decisions are automatically applied","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"decisionHistoriesForReviewersEnabled":{"name":"decisionHistoriesForReviewersEnabled","type":"\u0004","is_mandatory":true,"title":"True if decisions on previous access review stages are available for reviewers on an accessReviewInstance with multiple subsequent stages","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"defaultDecision":{"name":"defaultDecision","type":"\u0007","is_mandatory":true,"title":"Decision chosen if defaultDecisionEnabled is enabled. Can be one of Approve, Deny, or Recommendation","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"defaultDecisionEnabled":{"name":"defaultDecisionEnabled","type":"\u0004","is_mandatory":true,"title":"True if the default decision is enabled or disabled when reviewers do not respond","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"instanceDurationInDays":{"name":"instanceDurationInDays","type":"\u0005","is_mandatory":true,"title":"Duration of an access review instance in days","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"justificationRequiredOnApproval":{"name":"justificationRequiredOnApproval","type":"\u0004","is_mandatory":true,"title":"True if reviewers are required to provide justification with their decision","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mailNotificationsEnabled":{"name":"mailNotificationsEnabled","type":"\u0004","is_mandatory":true,"title":"True if emails are enabled or disabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"recommendationsEnabled":{"name":"recommendationsEnabled","type":"\u0004","is_mandatory":true,"title":"True if decision recommendations are enabled or disabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"recurrence":{"name":"recurrence","type":"\n","is_mandatory":true,"title":"Detailed settings for recurrence using the standard Outlook recurrence object","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reminderNotificationsEnabled":{"name":"reminderNotificationsEnabled","type":"\u0004","is_mandatory":true,"title":"True if reminders are enabled or disabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Configures the recurrence, notifications, and decision-handling for an access review series.","private":true,"min_provider_version":"11.1.46","defaults":"mailNotificationsEnabled reminderNotificationsEnabled defaultDecision defaultDecisionEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.accessReviewDefinition.scope":{"id":"microsoft.identityAndAccess.accessReviewDefinition.scope","name":"microsoft.identityAndAccess.accessReviewDefinition.scope","fields":{"query":{"name":"query","type":"\u0007","is_mandatory":true,"title":"Query string defining which entities are in scope for the review","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"queryRoot":{"name":"queryRoot","type":"\u0007","is_mandatory":true,"title":"Optional query root path","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"queryType":{"name":"queryType","type":"\u0007","is_mandatory":true,"title":"Type of query being used (e.g., \"MicrosoftGraph\")","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Defines the scope of entities whose access is being reviewed","private":true,"min_provider_version":"11.1.89","defaults":"query queryType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.accessReviews":{"id":"microsoft.identityAndAccess.accessReviews","name":"microsoft.identityAndAccess.accessReviews","fields":{"filter":{"name":"filter","type":"\u0007","is_mandatory":true,"title":"Filter access review definitions, e.g., \"contains(scope/microsoft.graph.accessReviewQueryScope/query, './members')\"","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.identityAndAccess.accessReviewDefinition","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"init":{"args":[{"name":"filter","type":"\u0007","optional":true}]},"list_type":"\u001bmicrosoft.identityAndAccess.accessReviewDefinition","title":"Microsoft Entra ID Access Review Definitions","desc":"Iterate over recurring access review schedules defined in the tenant. Supports an optional `filter` parameter using OData syntax to narrow results — for example, filtering by scope to find reviews targeting group membership. Each entry exposes the review's `displayName`, `status`, `scope`, `reviewers`, and `settings` describing the recurrence and decision-handling configuration.","min_provider_version":"11.1.46","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.identityAndSignIn":{"id":"microsoft.identityAndAccess.identityAndSignIn","name":"microsoft.identityAndAccess.identityAndSignIn","fields":{"policies":{"name":"policies","type":"\u001bmicrosoft.identityAndAccess.identityAndSignIn.policies","title":"Identity and sign-in policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Identity and Sign-In Policies","desc":"Use this namespace to access identity and sign-in policy configuration. Currently exposes `policies`, which provides access to specific policy objects such as the identity security defaults enforcement policy.","min_provider_version":"11.1.42","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.identityAndSignIn.policies":{"id":"microsoft.identityAndAccess.identityAndSignIn.policies","name":"microsoft.identityAndAccess.identityAndSignIn.policies","fields":{"identitySecurityDefaultsEnforcementPolicy":{"name":"identitySecurityDefaultsEnforcementPolicy","type":"\u001bmicrosoft.identityAndAccess.identityAndSignIn.policies.identitySecurityDefaultsEnforcementPolicy","title":"Identity security defaults enforcement policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Identity and Sign-In Policy Collection","desc":"Use this namespace to access individual sign-in policy objects. Currently exposes `identitySecurityDefaultsEnforcementPolicy`, which controls whether Microsoft Entra ID security defaults are enabled for the tenant.","min_provider_version":"11.1.42","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.identityAndSignIn.policies.identitySecurityDefaultsEnforcementPolicy":{"id":"microsoft.identityAndAccess.identityAndSignIn.policies.identitySecurityDefaultsEnforcementPolicy","name":"microsoft.identityAndAccess.identityAndSignIn.policies.identitySecurityDefaultsEnforcementPolicy","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"The description for the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"The display name for the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"If set to true, Azure Entra ID security defaults is enabled for the tenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Identity security defaults enforcement policy","private":true,"min_provider_version":"11.1.42","defaults":"id displayName isEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.policy":{"id":"microsoft.identityAndAccess.policy","name":"microsoft.identityAndAccess.policy","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Policy description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Policy display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isOrganizationDefault":{"name":"isOrganizationDefault","type":"\u0004","is_mandatory":true,"title":"True if this policy is the default organization policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedBy":{"name":"lastModifiedBy","type":"\n","is_mandatory":true,"title":"The identity of the user who last modified the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"The time when this policy was last modified","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"rule":{"name":"rule","type":"\u001bmicrosoft.identityAndAccess.policy.rule","title":"Rule defined for a PIM role management policy","desc":"Deprecated in favor of `microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true,"maturity":"deprecated"},"ruleTarget":{"name":"ruleTarget","type":"\u001bmicrosoft.identityAndAccess.policy.ruleTarget","title":"Scope targeted by a PIM role management policy rule","desc":"Deprecated in favor of `microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule.target`.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true,"maturity":"deprecated"},"rules":{"name":"rules","type":"\u0019\u001bmicrosoft.identityAndAccess.policy.rule","title":"The collection of rules that are part of the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scopeId":{"name":"scopeId","type":"\u0007","is_mandatory":true,"title":"The identifier of the scope where the policy is defined","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scopeType":{"name":"scopeType","type":"\u0007","is_mandatory":true,"title":"The type of the scope where the policy is defined","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"PIM role management policy for Microsoft Entra ID roles","desc":"Deprecated in favor of `microsoft.identityAndAccess.privilegedIdentityManagement.policy`.","private":true,"min_provider_version":"11.1.40","defaults":"id displayName scopeType","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"microsoft.identityAndAccess.policy.rule":{"id":"microsoft.identityAndAccess.policy.rule","name":"microsoft.identityAndAccess.policy.rule","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"target":{"name":"target","type":"\u001bmicrosoft.identityAndAccess.policy.ruleTarget","is_mandatory":true,"title":"Defines details of scope that's targeted by role management policy rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Rule defined for a PIM role management policy","desc":"Deprecated in favor of `microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule`.","private":true,"min_provider_version":"11.1.40","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"microsoft.identityAndAccess.policy.ruleTarget":{"id":"microsoft.identityAndAccess.policy.ruleTarget","name":"microsoft.identityAndAccess.policy.ruleTarget","fields":{"caller":{"name":"caller","type":"\u0007","is_mandatory":true,"title":"The type of caller that's the target of the policy rule. Allowed values are: None, Admin, EndUser","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enforcedSettings":{"name":"enforcedSettings","type":"\u0019\u0007","is_mandatory":true,"title":"The list of role settings that are enforced and cannot be overridden by child scopes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"inheritableSettings":{"name":"inheritableSettings","type":"\u0019\u0007","is_mandatory":true,"title":"The list of role settings that are inherited from the parent scope","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"level":{"name":"level","type":"\u0007","is_mandatory":true,"title":"The assignment type that's the target of policy rule. Allowed values are: Eligibility, Assignment","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"operations":{"name":"operations","type":"\u0019\u0007","is_mandatory":true,"title":"The list of role management operations that are the target of the policy rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Scope targeted by a PIM role management policy rule","desc":"Deprecated in favor of `microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule.target`.","private":true,"min_provider_version":"11.1.43","defaults":"caller level","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"microsoft.identityAndAccess.privilegedIdentityManagement":{"id":"microsoft.identityAndAccess.privilegedIdentityManagement","name":"microsoft.identityAndAccess.privilegedIdentityManagement","fields":{"policies":{"name":"policies","type":"\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement.policies","title":"PIM role management policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"policy":{"name":"policy","type":"\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement.policy","title":"A PIM role management policy for Microsoft Entra ID roles","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true}},"title":"Microsoft Entra Privileged Identity Management","desc":"Use this namespace to access PIM role management policies for Microsoft Entra ID roles.","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.privilegedIdentityManagement.policies":{"id":"microsoft.identityAndAccess.privilegedIdentityManagement.policies","name":"microsoft.identityAndAccess.privilegedIdentityManagement.policies","fields":{"filter":{"name":"filter","type":"\u0007","is_mandatory":true,"title":"Filter by scopeId and scopeType","desc":"e.g., \"scopeId eq '/' and scopeType eq 'Directory'\"","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement.policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"init":{"args":[{"name":"filter","type":"\u0007","optional":true}]},"list_type":"\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement.policy","title":"PIM role management policies","desc":"Iterate over PIM role management policies defined in the tenant. Supports an optional `filter` parameter (for example, scoped to `scopeId eq '/' and scopeType eq 'Directory'`) to narrow results.","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.privilegedIdentityManagement.policy":{"id":"microsoft.identityAndAccess.privilegedIdentityManagement.policy","name":"microsoft.identityAndAccess.privilegedIdentityManagement.policy","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Policy description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Policy display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isOrganizationDefault":{"name":"isOrganizationDefault","type":"\u0004","is_mandatory":true,"title":"True if this policy is the default organization policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedBy":{"name":"lastModifiedBy","type":"\n","is_mandatory":true,"title":"The identity of the user who last modified the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedDateTime":{"name":"lastModifiedDateTime","type":"\t","is_mandatory":true,"title":"The time when this policy was last modified","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"rule":{"name":"rule","type":"\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement.policy.rule","title":"A rule defined for a PIM role management policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"rules":{"name":"rules","type":"\u0019\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement.policy.rule","title":"The collection of rules that are part of the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scopeId":{"name":"scopeId","type":"\u0007","is_mandatory":true,"title":"The identifier of the scope where the policy is defined","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scopeType":{"name":"scopeType","type":"\u0007","is_mandatory":true,"title":"The type of the scope where the policy is defined","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"A PIM role management policy for Microsoft Entra ID roles","private":true,"min_provider_version":"13.0.12","defaults":"id displayName scopeType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule":{"id":"microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule","name":"microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"target":{"name":"target","type":"\u001bmicrosoft.identityAndAccess.privilegedIdentityManagement.policy.rule.target","is_mandatory":true,"title":"Defines details of scope that's targeted by role management policy rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"A rule defined for a PIM role management policy","private":true,"min_provider_version":"13.0.12","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule.target":{"id":"microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule.target","name":"microsoft.identityAndAccess.privilegedIdentityManagement.policy.rule.target","fields":{"caller":{"name":"caller","type":"\u0007","is_mandatory":true,"title":"The type of caller that's the target of the policy rule. Allowed values are: None, Admin, EndUser","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enforcedSettings":{"name":"enforcedSettings","type":"\u0019\u0007","is_mandatory":true,"title":"The list of role settings that are enforced and cannot be overridden by child scopes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"inheritableSettings":{"name":"inheritableSettings","type":"\u0019\u0007","is_mandatory":true,"title":"The list of role settings that can be inherited by child scopes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"level":{"name":"level","type":"\u0007","is_mandatory":true,"title":"The role assignment type that's the target of policy rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"operations":{"name":"operations","type":"\u0019\u0007","is_mandatory":true,"title":"The role management operations that are the target of the policy rule","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Defines details of the scope that's targeted by role management policy rule","private":true,"min_provider_version":"13.0.12","defaults":"caller level","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.identityAndAccess.roleEligibilityScheduleInstance":{"id":"microsoft.identityAndAccess.roleEligibilityScheduleInstance","name":"microsoft.identityAndAccess.roleEligibilityScheduleInstance","fields":{"appScopeId":{"name":"appScopeId","type":"\u0007","is_mandatory":true,"title":"The identifier of the app-specific scope of the role eligibility","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"directoryScopeId":{"name":"directoryScopeId","type":"\u0007","is_mandatory":true,"title":"The identifier of the directory object representing the scope of the role eligibility","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"endDateTime":{"name":"endDateTime","type":"\t","is_mandatory":true,"title":"The end time of the role eligibility","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique identifier of the role eligibility schedule instance","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"memberType":{"name":"memberType","type":"\u0007","is_mandatory":true,"title":"The type of member, either 'Direct' or 'Inherited'.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"principalId":{"name":"principalId","type":"\u0007","is_mandatory":true,"title":"The identifier of the principal (user, group, or service principal) that has the role eligibility","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleDefinitionId":{"name":"roleDefinitionId","type":"\u0007","is_mandatory":true,"title":"The identifier of the role definition that the eligibility is for","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleEligibilityScheduleId":{"name":"roleEligibilityScheduleId","type":"\u0007","is_mandatory":true,"title":"The identifier of the role eligibility schedule from which this instance is created","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"startDateTime":{"name":"startDateTime","type":"\t","is_mandatory":true,"title":"The start time of the role eligibility","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Represents an instance of a role eligibility in PIM","private":true,"min_provider_version":"11.1.41","defaults":"memberType principalId roleDefinitionId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.keyCredential":{"id":"microsoft.keyCredential","name":"microsoft.keyCredential","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description of the certificate's purpose","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"expired":{"name":"expired","type":"\u0004","is_mandatory":true,"title":"Whether the secret has expired","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"expires":{"name":"expires","type":"\t","is_mandatory":true,"title":"Certificate expiration date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"keyId":{"name":"keyId","type":"\u0007","is_mandatory":true,"title":"Certificate ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"startDateTime":{"name":"startDateTime","type":"\t","is_mandatory":true,"title":"Certificate validity start date","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"thumbprint":{"name":"thumbprint","type":"\u0007","is_mandatory":true,"title":"Certificate thumbprint","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Certificate type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"usage":{"name":"usage","type":"\u0007","is_mandatory":true,"title":"Certificate usage","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra AD Application certificate","private":true,"min_provider_version":"11.0.28","defaults":"thumbprint description expires keyId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.oauth2PermissionGrant":{"id":"microsoft.oauth2PermissionGrant","name":"microsoft.oauth2PermissionGrant","fields":{"client":{"name":"client","type":"\u001bmicrosoft.serviceprincipal","title":"Client application this grant authorizes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"title":"Object ID of the client service principal granted access","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"clientName":{"name":"clientName","type":"\u0007","is_mandatory":true,"title":"Display name of the client application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"consentType":{"name":"consentType","type":"\u0007","is_mandatory":true,"title":"Whether consent covers all users (`AllPrincipals`) or a single user (`Principal`)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"OAuth2 permission grant ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"principal":{"name":"principal","type":"\u001bmicrosoft.user","title":"User who granted consent, set when consentType is `Principal`","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"principalId":{"name":"principalId","type":"\u0007","is_mandatory":true,"title":"Object ID of the user who granted consent, set when consentType is `Principal`","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"resource":{"name":"resource","type":"\u001bmicrosoft.serviceprincipal","title":"API the client application is granted access to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"resourceId":{"name":"resourceId","type":"\u0007","is_mandatory":true,"title":"Object ID of the resource (API) service principal access is granted for","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"resourceName":{"name":"resourceName","type":"\u0007","is_mandatory":true,"title":"Display name of the resource (API) the access is granted for","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"Delegated permission scopes granted to the client application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra ID OAuth2 Permission Grant","desc":"Examine a delegated permission grant — a record that a client application has been authorized to call an API on behalf of signed-in users. The `consentType` is `AllPrincipals` when an administrator consented for the entire tenant, or `Principal` when an individual user consented, in which case `principal` resolves to that user. `scopes` lists the delegated permissions granted. `client` is the service principal of the application receiving access and `resource` is the service principal of the API being accessed. Use this collection to audit tenant-wide application consent — for example, finding broad admin grants or user-consented access to sensitive APIs.","min_provider_version":"13.0.12","defaults":"clientName resourceName consentType scopes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.organization":{"id":"microsoft.tenant","name":"microsoft.tenant","fields":{"assignedPlans":{"name":"assignedPlans","type":"\u0019\n","is_mandatory":true,"title":"Service plans associated with the tenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"branding":{"name":"branding","type":"\u0019\u001bmicrosoft.tenant.brandingInfo","title":"Tenant branding information for all verified domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"brandingInfo":{"name":"brandingInfo","type":"\u001bmicrosoft.tenant.brandingInfo","title":"Tenant branding information","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"countryLetterCode":{"name":"countryLetterCode","type":"\u0007","is_mandatory":true,"title":"Country or region abbreviation for the tenant (ISO 3166-2)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Tenant creation date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Tenant creation date and time","desc":"Deprecated in favor of `createdAt`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"formsSettings":{"name":"formsSettings","type":"\u001bmicrosoft.tenantFormsSettings","title":"Company-wide settings for Microsoft Forms","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Organization ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Tenant display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesSyncEnabled":{"name":"onPremisesSyncEnabled","type":"\u0004","is_mandatory":true,"title":"Whether password hash sync is enabled for hybrid deployments","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"preferredLanguage":{"name":"preferredLanguage","type":"\u0007","is_mandatory":true,"title":"Preferred language","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"privacyProfile":{"name":"privacyProfile","type":"\n","is_mandatory":true,"title":"Privacy profile data with contact email and statement URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"provisionedPlans":{"name":"provisionedPlans","type":"\u0019\n","is_mandatory":true,"title":"Provisioned plan","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"realm":{"name":"realm","type":"\u0019\u001bmicrosoft.tenant.realmInfo","title":"Tenant realm information for all verified domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"realmInfo":{"name":"realmInfo","type":"\u001bmicrosoft.tenant.realmInfo","title":"Tenant realm information","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"securityComplianceNotificationMails":{"name":"securityComplianceNotificationMails","type":"\u0019\u0007","is_mandatory":true,"title":"List of security compliance notification email addresses","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"securityComplianceNotificationPhones":{"name":"securityComplianceNotificationPhones","type":"\u0019\u0007","is_mandatory":true,"title":"List of security compliance notification phone numbers","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settings":{"name":"settings","type":"\u001bmicrosoft.tenantSettings","title":"Company-wide settings for apps and services.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"subscriptions":{"name":"subscriptions","type":"\u0019\n","title":"Commercial subscription","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"technicalNotificationMails":{"name":"technicalNotificationMails","type":"\u0019\u0007","is_mandatory":true,"title":"List of technical notification mails","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Tenant type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"verifiedDomains":{"name":"verifiedDomains","type":"\u0019\n","is_mandatory":true,"title":"Organization verified domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Tenant","desc":"Examine configuration of the connected Microsoft Entra ID (Azure AD) tenant. Exposes the tenant's `name`, `id`, `type`, verified domains, provisioned plans, on-premises sync status, privacy profile, technical notification contacts, and security compliance notification addresses. Related resources include `settings`, `formsSettings`, `realm`, and `branding`.","min_provider_version":"11.0.29","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.passwordCredential":{"id":"microsoft.passwordCredential","name":"microsoft.passwordCredential","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Free-form description of the client secret's purpose","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"expired":{"name":"expired","type":"\u0004","is_mandatory":true,"title":"Whether the secret has expired","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"expires":{"name":"expires","type":"\t","is_mandatory":true,"title":"Secret expiration date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"hint":{"name":"hint","type":"\u0007","is_mandatory":true,"title":"Secret hint","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"keyId":{"name":"keyId","type":"\u0007","is_mandatory":true,"title":"Secret ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"startDateTime":{"name":"startDateTime","type":"\t","is_mandatory":true,"title":"Secret validity start date","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra AD Application secrets","private":true,"min_provider_version":"11.0.28","defaults":"description expires keyId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.policies":{"id":"microsoft.policies","name":"microsoft.policies","fields":{"activityBasedTimeoutPolicies":{"name":"activityBasedTimeoutPolicies","type":"\u0019\u001bmicrosoft.policies.activityBasedTimeoutPolicy","title":"Activity-based timeout policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"activityBasedTimeoutPolicy":{"name":"activityBasedTimeoutPolicy","type":"\u001bmicrosoft.policies.activityBasedTimeoutPolicy","title":"Microsoft Entra Activity-Based Timeout Policy","desc":"Examine an activity-based timeout policy that automatically signs out users after a period of inactivity in web sessions. Exposes the `displayName`, `definition` (JSON-encoded policy rules), and `isOrganizationDefault` to identify which policy is active as the tenant-wide default.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"adminConsentRequestPolicy":{"name":"adminConsentRequestPolicy","type":"\u001bmicrosoft.adminConsentRequestPolicy","title":"Admin consent request policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"authenticationMethodsPolicy":{"name":"authenticationMethodsPolicy","type":"\u001bmicrosoft.authenticationMethodsPolicy","title":"Authentication methods policy","min_provider_version":"11.1.39","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"authorizationPolicy":{"name":"authorizationPolicy","type":"\n","title":"Authorization policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"consentPolicySettings":{"name":"consentPolicySettings","type":"\n","title":"Consent policy settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"crossTenantAccessPolicy":{"name":"crossTenantAccessPolicy","type":"\u001bmicrosoft.crossTenantAccessPolicyDefault","title":"Default configuration of cross-tenant access policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"externalIdentitiesPolicy":{"name":"externalIdentitiesPolicy","type":"\u001bmicrosoft.externalIdentitiesPolicy","title":"Tenant-wide policy that controls whether external users can leave a tenant","min_provider_version":"11.1.43","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identitySecurityDefaultsEnforcementPolicy":{"name":"identitySecurityDefaultsEnforcementPolicy","type":"\n","title":"Identity security default enforcement policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"permissionGrantPolicies":{"name":"permissionGrantPolicies","type":"\u0019\n","title":"Permission grant policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra ID Policies","desc":"Use this namespace to access tenant-wide Microsoft Entra ID policy configuration. Exposes `authorizationPolicy`, `identitySecurityDefaultsEnforcementPolicy`, `adminConsentRequestPolicy`, `permissionGrantPolicies`, `consentPolicySettings`, `authenticationMethodsPolicy`, `activityBasedTimeoutPolicies`, `externalIdentitiesPolicy`, and `crossTenantAccessPolicy`.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.policies.activityBasedTimeoutPolicy":{"id":"microsoft.policies.activityBasedTimeoutPolicy","name":"microsoft.policies.activityBasedTimeoutPolicy","fields":{"definition":{"name":"definition","type":"\u0019\u0007","is_mandatory":true,"title":"Policy definition","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Policy display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isOrganizationDefault":{"name":"isOrganizationDefault","type":"\u0004","is_mandatory":true,"title":"If set to true, activates this policy","desc":"There can be many policies for the same policy type, but only one can be activated as the organization default.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Activity-Based Timeout Policy","desc":"Examine an activity-based timeout policy that automatically signs out users after a period of inactivity in web sessions. Exposes the `displayName`, `definition` (JSON-encoded policy rules), and `isOrganizationDefault` to identify which policy is active as the tenant-wide default.","min_provider_version":"11.1.42","defaults":"displayName isOrganizationDefault","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.rolemanagement":{"id":"microsoft.rolemanagement","name":"microsoft.rolemanagement","fields":{"roleDefinitions":{"name":"roleDefinitions","type":"\u001bmicrosoft.roles","title":"Role definitions","desc":"Deprecated in favor of `microsoft.roles`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"roleassignment":{"name":"roleassignment","type":"\u001bmicrosoft.rolemanagement.roleassignment","title":"Microsoft role assignment","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"roledefinition":{"name":"roledefinition","type":"\u001bmicrosoft.rolemanagement.roledefinition","title":"Microsoft role definition","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true}},"title":"Microsoft role management namespace","desc":"Deprecated in favor of `microsoft.roles`. This namespace previously exposed role definitions and assignments; use `microsoft.roles` for role definitions going forward.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"microsoft.rolemanagement.roleassignment":{"id":"microsoft.rolemanagement.roleassignment","name":"microsoft.rolemanagement.roleassignment","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role assignment ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"principal":{"name":"principal","type":"\n","is_mandatory":true,"title":"Service principal","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"principalId":{"name":"principalId","type":"\u0007","is_mandatory":true,"title":"Service principal ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"roleDefinitionId":{"name":"roleDefinitionId","type":"\u0007","is_mandatory":true,"title":"Role definition ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft role assignment","private":true,"min_provider_version":"9.0.0","defaults":"id principalId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.rolemanagement.roledefinition":{"id":"microsoft.rolemanagement.roledefinition","name":"microsoft.rolemanagement.roledefinition","fields":{"assignments":{"name":"assignments","type":"\u0019\u001bmicrosoft.rolemanagement.roleassignment","title":"List of role definition assignments","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Role definition description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Role definition display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Role definition ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isBuiltIn":{"name":"isBuiltIn","type":"\u0004","is_mandatory":true,"title":"Whether the role is built in","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the role is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"rolePermissions":{"name":"rolePermissions","type":"\u0019\n","is_mandatory":true,"title":"Role definition permissions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"templateId":{"name":"templateId","type":"\u0007","is_mandatory":true,"title":"Role definition template ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Role definition version","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft role definition","private":true,"min_provider_version":"9.0.0","defaults":"id displayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.roles":{"id":"microsoft.roles","name":"microsoft.roles","fields":{"filter":{"name":"filter","type":"\u0007","is_mandatory":true,"title":"Filter roles by property values","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.rolemanagement.roledefinition","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"search":{"name":"search","type":"\u0007","is_mandatory":true,"title":"Search roles by search phrases","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"init":{"args":[{"name":"filter","type":"\u0007","optional":true},{"name":"search","type":"\u0007","optional":true}]},"list_type":"\u001bmicrosoft.rolemanagement.roledefinition","title":"Microsoft Entra ID Role Definitions","desc":"Iterate over role definitions available in the tenant. Supports optional `filter` and `search` parameters to narrow results. Each entry is a `microsoft.rolemanagement.roledefinition` exposing the role's `displayName`, `description`, `isBuiltIn`, `isEnabled`, `rolePermissions`, and current `assignments`.","min_provider_version":"11.1.15","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security":{"id":"microsoft.security","name":"microsoft.security","fields":{"alert":{"name":"alert","type":"\u001bmicrosoft.security.alert","title":"Microsoft Defender XDR Alert","desc":"Examine a security alert raised by Microsoft Defender XDR. An alert represents a single detection — a suspicious or malicious activity — and exposes its `severity`, `status`, `category`, `serviceSource` and `detectionSource` (which Defender workload reported it), the analyst `classification` and `determination` assigned during review, the `mitreTechniques` it maps to, `recommendedActions`, and the activity timeline (`createdDateTime`, `firstActivityDateTime`, `lastActivityDateTime`, `resolvedDateTime`). Related alerts are correlated into an incident — use `incident` to navigate to it.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"alerts":{"name":"alerts","type":"\u0019\u001bmicrosoft.security.alert","title":"Microsoft Defender XDR alerts","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"exchange":{"name":"exchange","type":"\u001bmicrosoft.security.exchange","title":"Exchange security settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"incident":{"name":"incident","type":"\u001bmicrosoft.security.incident","title":"Microsoft Defender XDR Incident","desc":"Examine a security incident in Microsoft Defender XDR. An incident is a collection of correlated alerts that together describe an attack story. It exposes the aggregate `severity` and `status`, the analyst `classification` and `determination`, the owner it is `assignedTo`, the `summary`, applied `customTags`, and the full set of correlated `alerts`. When `redirectIncidentId` is set the incident has been merged into another incident. Use `alerts` to drill into the individual detections.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"incidents":{"name":"incidents","type":"\u0019\u001bmicrosoft.security.incident","title":"Microsoft Defender XDR incidents","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"informationProtection":{"name":"informationProtection","type":"\u001bmicrosoft.security.informationProtection","title":"Information protection settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"latestSecureScores":{"name":"latestSecureScores","type":"\u001bmicrosoft.security.securityscore","title":"Latest security score","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"riskyUser":{"name":"riskyUser","type":"\u001bmicrosoft.security.riskyUser","title":"Microsoft Entra ID Risky User","desc":"Examine a Microsoft Entra ID Protection risky user entry. Exposes the `principalName`, `riskLevel` (low, medium, high, hidden, none), `riskState` (none, confirmedSafe, remediated, dismissed, atRisk, confirmedCompromised), `riskDetail`, `lastUpdatedAt`, and whether the account `isDeleted` or `isProcessing`. Use `user` to navigate to the full `microsoft.user` record.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"riskyUsers":{"name":"riskyUsers","type":"\u0019\u001bmicrosoft.security.riskyUser","title":"List Microsoft Entra users who are at risk","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"secureScores":{"name":"secureScores","type":"\u0019\u001bmicrosoft.security.securityscore","title":"List of security scores","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"securityscore":{"name":"securityscore","type":"\u001bmicrosoft.security.securityscore","title":"Microsoft Secure Score","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true}},"title":"Microsoft Security","desc":"Use this namespace to access Microsoft 365 security resources. Exposes `secureScores` and `latestSecureScores` for tenant security posture, `riskyUsers` for Microsoft Entra ID Protection risk signals, `alerts` and `incidents` for Microsoft Defender XDR detections, `exchange` for Exchange Online security settings, and `informationProtection` for sensitivity label configuration.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.alert":{"id":"microsoft.security.alert","name":"microsoft.security.alert","fields":{"alertWebUrl":{"name":"alertWebUrl","type":"\u0007","is_mandatory":true,"title":"Deep link to the alert in the Microsoft Defender portal","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"assignedTo":{"name":"assignedTo","type":"\u0007","is_mandatory":true,"title":"Owner the alert is assigned to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"categories":{"name":"categories","type":"\u0019\u0007","is_mandatory":true,"title":"All categories the alert is associated with","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"category":{"name":"category","type":"\u0007","is_mandatory":true,"title":"Primary category of the alert","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"classification":{"name":"classification","type":"\u0007","is_mandatory":true,"title":"Analyst classification (unknown, falsePositive, truePositive, informationalExpectedActivity)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"comments":{"name":"comments","type":"\u0019\n","is_mandatory":true,"title":"Analyst comments recorded on the alert","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"When the alert was created","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Alert description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"detectionSource":{"name":"detectionSource","type":"\u0007","is_mandatory":true,"title":"Detection technology or sensor that surfaced the alert","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"determination":{"name":"determination","type":"\u0007","is_mandatory":true,"title":"Analyst determination","desc":"One of: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedAccount, phishing, maliciousUserActivity, notMalicious, notEnoughDataToValidate, confirmedActivity, lineOfBusinessApplication.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"firstActivityDateTime":{"name":"firstActivityDateTime","type":"\t","is_mandatory":true,"title":"When the earliest activity associated with the alert occurred","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Alert ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"incident":{"name":"incident","type":"\u001bmicrosoft.security.incident","title":"Incident this alert is correlated into","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"incidentId":{"name":"incidentId","type":"\u0007","is_mandatory":true,"title":"ID of the incident this alert is correlated into","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastActivityDateTime":{"name":"lastActivityDateTime","type":"\t","is_mandatory":true,"title":"When the most recent activity associated with the alert occurred","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastUpdateDateTime":{"name":"lastUpdateDateTime","type":"\t","is_mandatory":true,"title":"When the alert was last updated","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mitreTechniques":{"name":"mitreTechniques","type":"\u0019\u0007","is_mandatory":true,"title":"MITRE ATT\u0026CK techniques the alert maps to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"providerAlertId":{"name":"providerAlertId","type":"\u0007","is_mandatory":true,"title":"Alert ID assigned by the detecting Defender service","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"recommendedActions":{"name":"recommendedActions","type":"\u0007","is_mandatory":true,"title":"Recommended remediation actions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"resolvedDateTime":{"name":"resolvedDateTime","type":"\t","is_mandatory":true,"title":"When the alert was resolved","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"serviceSource":{"name":"serviceSource","type":"\u0007","is_mandatory":true,"title":"Defender service that generated the alert","desc":"One of: microsoftDefenderForEndpoint, microsoftDefenderForIdentity, microsoftDefenderForCloudApps, microsoftDefenderForOffice365, microsoft365Defender, aadIdentityProtection, microsoftAppGovernance, dataLossPrevention.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"severity":{"name":"severity","type":"\u0007","is_mandatory":true,"title":"Severity (unknown, informational, low, medium, high)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status (new, inProgress, resolved)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"systemTags":{"name":"systemTags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied by the system","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"tenantId":{"name":"tenantId","type":"\u0007","is_mandatory":true,"title":"ID of the tenant the alert belongs to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"title":{"name":"title","type":"\u0007","is_mandatory":true,"title":"Alert title","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Defender XDR Alert","desc":"Examine a security alert raised by Microsoft Defender XDR. An alert represents a single detection — a suspicious or malicious activity — and exposes its `severity`, `status`, `category`, `serviceSource` and `detectionSource` (which Defender workload reported it), the analyst `classification` and `determination` assigned during review, the `mitreTechniques` it maps to, `recommendedActions`, and the activity timeline (`createdDateTime`, `firstActivityDateTime`, `lastActivityDateTime`, `resolvedDateTime`). Related alerts are correlated into an incident — use `incident` to navigate to it.","min_provider_version":"13.0.12","defaults":"title severity status category","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.exchange":{"id":"microsoft.security.exchange","name":"microsoft.security.exchange","fields":{"antispam":{"name":"antispam","type":"\u001bmicrosoft.security.exchange.antispam","title":"Exchange antispam settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Security Exchange Settings","desc":"Use this namespace to access Exchange Online security configuration. Currently exposes `antispam`, which provides access to hosted connection filter policy settings.","min_provider_version":"11.1.43","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.exchange.antispam":{"id":"microsoft.security.exchange.antispam","name":"microsoft.security.exchange.antispam","fields":{"hostedConnectionFilterPolicy":{"name":"hostedConnectionFilterPolicy","type":"\u001bmicrosoft.security.exchange.antispam.hostedConnectionFilterPolicy","title":"Hosted connection filter policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Security Exchange Antispam Settings","desc":"Use this namespace to access Exchange Online antispam configuration. Exposes `hostedConnectionFilterPolicy`, which controls IP allow and block lists and safe-list behavior for inbound connections.","min_provider_version":"11.1.43","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.exchange.antispam.hostedConnectionFilterPolicy":{"id":"microsoft.security.exchange.antispam.hostedConnectionFilterPolicy","name":"microsoft.security.exchange.antispam.hostedConnectionFilterPolicy","fields":{"adminDisplayName":{"name":"adminDisplayName","type":"\u0007","is_mandatory":true,"title":"Admin display name for the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enableSafeList":{"name":"enableSafeList","type":"\u0004","is_mandatory":true,"title":"Whether to use the safe list","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identity":{"name":"identity","type":"\u0007","is_mandatory":true,"title":"Policy identity","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ipAllowList":{"name":"ipAllowList","type":"\u0019\u0007","is_mandatory":true,"title":"IP addresses that are always allowed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ipBlockList":{"name":"ipBlockList","type":"\u0019\u0007","is_mandatory":true,"title":"IP addresses that are always blocked","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Exchange Antispam Hosted Connection Filter Policy","desc":"Examine the hosted connection filter policy that controls which external IP addresses are always allowed or always blocked for inbound email. Exposes `ipAllowList`, `ipBlockList`, `enableSafeList` (whether Microsoft's curated safe sender list is consulted), and the policy `identity`.","min_provider_version":"11.1.43","defaults":"identity enableSafeList","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.incident":{"id":"microsoft.security.incident","name":"microsoft.security.incident","fields":{"alerts":{"name":"alerts","type":"\u0019\u001bmicrosoft.security.alert","title":"Alerts correlated into this incident","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"assignedTo":{"name":"assignedTo","type":"\u0007","is_mandatory":true,"title":"Owner the incident is assigned to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"classification":{"name":"classification","type":"\u0007","is_mandatory":true,"title":"Analyst classification (unknown, falsePositive, truePositive, informationalExpectedActivity)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"comments":{"name":"comments","type":"\u0019\n","is_mandatory":true,"title":"Analyst comments recorded on the incident","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"When the incident was created","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"customTags":{"name":"customTags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied by analysts","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Incident description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"determination":{"name":"determination","type":"\u0007","is_mandatory":true,"title":"Analyst determination","desc":"One of: unknown, apt, malware, securityPersonnel, securityTesting, unwantedSoftware, other, multiStagedAttack, compromisedAccount, phishing, maliciousUserActivity, notMalicious, notEnoughDataToValidate, confirmedActivity, lineOfBusinessApplication.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Incident display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Incident ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"incidentWebUrl":{"name":"incidentWebUrl","type":"\u0007","is_mandatory":true,"title":"Deep link to the incident in the Microsoft Defender portal","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastModifiedBy":{"name":"lastModifiedBy","type":"\u0007","is_mandatory":true,"title":"Identity that last modified the incident","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastUpdateDateTime":{"name":"lastUpdateDateTime","type":"\t","is_mandatory":true,"title":"When the incident was last updated","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"redirectIncidentId":{"name":"redirectIncidentId","type":"\u0007","is_mandatory":true,"title":"ID of the incident this incident was merged into","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"severity":{"name":"severity","type":"\u0007","is_mandatory":true,"title":"Severity (unknown, informational, low, medium, high)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status (active, resolved, inProgress, redirected, awaitingAction)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"summary":{"name":"summary","type":"\u0007","is_mandatory":true,"title":"Incident summary","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"systemTags":{"name":"systemTags","type":"\u0019\u0007","is_mandatory":true,"title":"Tags applied by the system","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"tenantId":{"name":"tenantId","type":"\u0007","is_mandatory":true,"title":"ID of the tenant the incident belongs to","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Defender XDR Incident","desc":"Examine a security incident in Microsoft Defender XDR. An incident is a collection of correlated alerts that together describe an attack story. It exposes the aggregate `severity` and `status`, the analyst `classification` and `determination`, the owner it is `assignedTo`, the `summary`, applied `customTags`, and the full set of correlated `alerts`. When `redirectIncidentId` is set the incident has been merged into another incident. Use `alerts` to drill into the individual detections.","min_provider_version":"13.0.12","defaults":"displayName severity status","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.informationProtection":{"id":"microsoft.security.informationProtection","name":"microsoft.security.informationProtection","fields":{"sensitivityLabel":{"name":"sensitivityLabel","type":"\u001bmicrosoft.security.informationProtection.sensitivityLabel","title":"Microsoft Purview Sensitivity Label","desc":"Examine a sensitivity label defined in Microsoft Purview Information Protection. Exposes the `name`, `description`, `color`, supported `contentFormats` (file, email, teamwork, etc.), protection state (`hasProtection`), applicability (`isAppliable`, `isActive`), and `sensitivity` level (lower number means less sensitive). Hierarchical labels reference a `parent` label.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"sensitivityLabels":{"name":"sensitivityLabels","type":"\u0019\u001bmicrosoft.security.informationProtection.sensitivityLabel","title":"List of sensitivity labels","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Purview Information Protection","desc":"Use this namespace to access Microsoft Purview Information Protection configuration. Exposes `sensitivityLabels`, the list of sensitivity labels defined in the tenant for classifying and protecting content.","min_provider_version":"11.1.99","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.informationProtection.sensitivityLabel":{"id":"microsoft.security.informationProtection.sensitivityLabel","name":"microsoft.security.informationProtection.sensitivityLabel","fields":{"color":{"name":"color","type":"\u0007","is_mandatory":true,"title":"UI display color (e.g., \"#EAA300\")","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"contentFormats":{"name":"contentFormats","type":"\u0019\u0007","is_mandatory":true,"title":"Supported content formats (e.g., file, email, teamwork)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the label","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"hasProtection":{"name":"hasProtection","type":"\u0004","is_mandatory":true,"title":"Whether the label has protection enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Unique identifier for the sensitivity label","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isActive":{"name":"isActive","type":"\u0004","is_mandatory":true,"title":"Whether the label is active","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isAppliable":{"name":"isAppliable","type":"\u0004","is_mandatory":true,"title":"Whether the label can be applied to content","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the label","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"parent":{"name":"parent","type":"\u001bmicrosoft.security.informationProtection.sensitivityLabel","is_mandatory":true,"title":"Parent label in the hierarchy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"sensitivity":{"name":"sensitivity","type":"\u0005","is_mandatory":true,"title":"Sensitivity level (lower number = less sensitive)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"toolTip":{"name":"toolTip","type":"\u0007","is_mandatory":true,"title":"Tooltip displayed in UI","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Purview Sensitivity Label","desc":"Examine a sensitivity label defined in Microsoft Purview Information Protection. Exposes the `name`, `description`, `color`, supported `contentFormats` (file, email, teamwork, etc.), protection state (`hasProtection`), applicability (`isAppliable`, `isActive`), and `sensitivity` level (lower number means less sensitive). Hierarchical labels reference a `parent` label.","min_provider_version":"11.1.99","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.riskyUser":{"id":"microsoft.security.riskyUser","name":"microsoft.security.riskyUser","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Risky user ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isDeleted":{"name":"isDeleted","type":"\u0004","is_mandatory":true,"title":"Whether the user account has been deleted","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isProcessing":{"name":"isProcessing","type":"\u0004","is_mandatory":true,"title":"Whether the backend is processing the user's risky state","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastUpdatedAt":{"name":"lastUpdatedAt","type":"\t","is_mandatory":true,"title":"Risk last updated","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"User name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"principalName":{"name":"principalName","type":"\u0007","is_mandatory":true,"title":"User principal","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"riskDetail":{"name":"riskDetail","type":"\u0007","is_mandatory":true,"title":"Risk detail","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"riskLevel":{"name":"riskLevel","type":"\u0007","is_mandatory":true,"title":"Risk level (low, medium, high, hidden, none, unknownFutureValue)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"riskState":{"name":"riskState","type":"\u0007","is_mandatory":true,"title":"Risk state (none, confirmedSafe, remediated, dismissed, atRisk, confirmedCompromised, unknownFutureValue)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"user":{"name":"user","type":"\u001bmicrosoft.user","title":"Entra User","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra ID Risky User","desc":"Examine a Microsoft Entra ID Protection risky user entry. Exposes the `principalName`, `riskLevel` (low, medium, high, hidden, none), `riskState` (none, confirmedSafe, remediated, dismissed, atRisk, confirmedCompromised), `riskDetail`, `lastUpdatedAt`, and whether the account `isDeleted` or `isProcessing`. Use `user` to navigate to the full `microsoft.user` record.","min_provider_version":"11.0.29","defaults":"principalName riskLevel riskState lastUpdatedAt","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.security.securityscore":{"id":"microsoft.security.securityscore","name":"microsoft.security.securityscore","fields":{"activeUserCount":{"name":"activeUserCount","type":"\u0005","is_mandatory":true,"title":"Secure Score active user count","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"averageComparativeScores":{"name":"averageComparativeScores","type":"\u0019\n","is_mandatory":true,"title":"Secure Score average comparative score","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"azureTenantId":{"name":"azureTenantId","type":"\u0007","is_mandatory":true,"title":"Secure Score tenant ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"controlScores":{"name":"controlScores","type":"\u0019\n","is_mandatory":true,"title":"Secure Score control scores","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Secure Score creation time","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"currentScore":{"name":"currentScore","type":"\u0006","is_mandatory":true,"title":"Secure Score current score","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enabledServices":{"name":"enabledServices","type":"\u0019\u0007","is_mandatory":true,"title":"Secure Score enabled services","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Secure Score ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"licensedUserCount":{"name":"licensedUserCount","type":"\u0005","is_mandatory":true,"title":"Secure Score licensed user count","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"maxScore":{"name":"maxScore","type":"\u0006","is_mandatory":true,"title":"Secure Score max score","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"vendorInformation":{"name":"vendorInformation","type":"\n","is_mandatory":true,"title":"Secure Score vendor information","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Secure Score","private":true,"min_provider_version":"9.0.0","defaults":"id azureTenantId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.serviceprincipal":{"id":"microsoft.serviceprincipal","name":"microsoft.serviceprincipal","fields":{"accountEnabled":{"name":"accountEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the service principal account is enabled","desc":"Deprecated in favor of `enabled`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"alternativeNames":{"name":"alternativeNames","type":"\u0019\u0007","is_mandatory":true,"title":"Alternative names for the service principal","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appDescription":{"name":"appDescription","type":"\u0007","is_mandatory":true,"title":"Description provided by the associated application","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appId":{"name":"appId","type":"\u0007","is_mandatory":true,"title":"Application ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appOwnerOrganizationId":{"name":"appOwnerOrganizationId","type":"\u0007","is_mandatory":true,"title":"Application owner ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appRoleAssignmentRequired":{"name":"appRoleAssignmentRequired","type":"\u0004","is_mandatory":true,"title":"App role assignment required","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appRoles":{"name":"appRoles","type":"\u0019\u001bmicrosoft.application.role","is_mandatory":true,"title":"Application roles","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"applicationTemplateId":{"name":"applicationTemplateId","type":"\u0007","is_mandatory":true,"title":"Application template ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"assignment":{"name":"assignment","type":"\u001bmicrosoft.serviceprincipal.assignment","title":"Microsoft Service Principal Assignment","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"assignmentRequired":{"name":"assignmentRequired","type":"\u0004","is_mandatory":true,"title":"Whether users or other apps must be assigned to this service principal before using it","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"assignments":{"name":"assignments","type":"\u0019\u001bmicrosoft.serviceprincipal.assignment","is_mandatory":true,"title":"List of users and groups assigned to this service principal","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Application description","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"disabledByMicrosoftStatus":{"name":"disabledByMicrosoftStatus","type":"\u0007","is_mandatory":true,"title":"Whether Microsoft has disabled the service principal","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether users can sign into the service principal (application)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"homepageUrl":{"name":"homepageUrl","type":"\u0007","is_mandatory":true,"title":"Service principal homepage URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Service principal Object ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isFirstParty":{"name":"isFirstParty","type":"\u0004","title":"Whether it is a first-party Microsoft application","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"keyCredentials":{"name":"keyCredentials","type":"\u0019\u001bmicrosoft.keyCredential","is_mandatory":true,"title":"X.509 key credentials registered on the service principal for authentication","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"loginUrl":{"name":"loginUrl","type":"\u0007","is_mandatory":true,"title":"Login URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"logoutUrl":{"name":"logoutUrl","type":"\u0007","is_mandatory":true,"title":"Logout URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Service principal name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notes":{"name":"notes","type":"\u0007","is_mandatory":true,"title":"Service principal notes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notificationEmailAddresses":{"name":"notificationEmailAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Notification email addresses","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"oauth2PermissionScopes":{"name":"oauth2PermissionScopes","type":"\u0019\n","is_mandatory":true,"title":"Delegated permission scopes that this service principal exposes to client applications","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"passwordCredentials":{"name":"passwordCredentials","type":"\u0019\u001bmicrosoft.passwordCredential","is_mandatory":true,"title":"Client secrets registered on the service principal for authentication","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"permissions":{"name":"permissions","type":"\u0019\u001bmicrosoft.application.permission","title":"API permissions and scopes assigned to this service principal","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"preferredSingleSignOnMode":{"name":"preferredSingleSignOnMode","type":"\u0007","is_mandatory":true,"title":"Preferred single sign-on mode","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"replyUrls":{"name":"replyUrls","type":"\u0019\u0007","is_mandatory":true,"title":"Service principal reply URLs","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePrincipalNames":{"name":"servicePrincipalNames","type":"\u0019\u0007","is_mandatory":true,"title":"Service principal names","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signInAudience":{"name":"signInAudience","type":"\u0007","is_mandatory":true,"title":"Sign in audience","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"tags":{"name":"tags","type":"\u0019\u0007","is_mandatory":true,"title":"Service principal tags","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"termsOfServiceUrl":{"name":"termsOfServiceUrl","type":"\u0007","is_mandatory":true,"title":"Service principal terms of service URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Service principal type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"verifiedPublisher":{"name":"verifiedPublisher","type":"\n","is_mandatory":true,"title":"Application publisher","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"visibleToUsers":{"name":"visibleToUsers","type":"\u0004","is_mandatory":true,"title":"Whether the service principal is visible to users","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Service Principal","desc":"Examine a service principal (enterprise application) registered in the tenant. Exposes the `name`, `type`, `appId`, sign-in audience, homepage and reply URLs, assignment requirement, visibility to users, and whether the account is enabled. Also provides `assignments` (users and groups granted access), `appRoles`, and `permissions` (API delegated and application grants). Use `isFirstParty` to identify Microsoft-owned service principals.","min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.serviceprincipal.assignment":{"id":"microsoft.serviceprincipal.assignment","name":"microsoft.serviceprincipal.assignment","fields":{"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Service Principal Assignment name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Service Principal Assignment ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Service Principal Assignment type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Service Principal Assignment","private":true,"min_provider_version":"9.0.9","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.setting":{"id":"microsoft.setting","name":"microsoft.setting","fields":{"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name of the setting","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"templateId":{"name":"templateId","type":"\u0007","is_mandatory":true,"title":"Template ID of the setting","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"values":{"name":"values","type":"\u0019\u001bmicrosoft.settingValue","is_mandatory":true,"title":"Setting values","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Group Setting","desc":"Examine a single Microsoft 365 group setting applied to the tenant. Each setting is identified by a `templateId` and a `displayName`, and contains a list of `values` (as `microsoft.settingValue` entries) that control group behavior such as guest access or naming policies.","min_provider_version":"11.1.68","defaults":"displayName values","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.settingValue":{"id":"microsoft.settingValue","name":"microsoft.settingValue","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the setting value","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"Value of the setting","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Group Setting Value","desc":"Examine a single name/value pair within a `microsoft.setting`. The `name` identifies the specific setting key (for example, `AllowGuestsToBeGroupOwner`) and `value` holds its current string representation.","min_provider_version":"11.1.68","defaults":"name value","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.systemCredentialPreferences":{"id":"microsoft.systemCredentialPreferences","name":"microsoft.systemCredentialPreferences","fields":{"excludeTargets":{"name":"excludeTargets","type":"\u0019\n","is_mandatory":true,"title":"Groups of users that are excluded from the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"includeTargets":{"name":"includeTargets","type":"\u0019\n","is_mandatory":true,"title":"Groups of users that are included in the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"The state of the system credential preferences. Possible values are: enabled, disabled, default.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"System credential preferences for authentication methods policy","private":true,"min_provider_version":"11.1.99","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.tenant":{"id":"microsoft.tenant","name":"microsoft.tenant","fields":{"assignedPlans":{"name":"assignedPlans","type":"\u0019\n","is_mandatory":true,"title":"Service plans associated with the tenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"branding":{"name":"branding","type":"\u0019\u001bmicrosoft.tenant.brandingInfo","title":"Tenant branding information for all verified domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"brandingInfo":{"name":"brandingInfo","type":"\u001bmicrosoft.tenant.brandingInfo","title":"Tenant branding information","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"countryLetterCode":{"name":"countryLetterCode","type":"\u0007","is_mandatory":true,"title":"Country or region abbreviation for the tenant (ISO 3166-2)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Tenant creation date","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"Tenant creation date and time","desc":"Deprecated in favor of `createdAt`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"formsSettings":{"name":"formsSettings","type":"\u001bmicrosoft.tenantFormsSettings","title":"Company-wide settings for Microsoft Forms","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Organization ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Tenant display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesSyncEnabled":{"name":"onPremisesSyncEnabled","type":"\u0004","is_mandatory":true,"title":"Whether password hash sync is enabled for hybrid deployments","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"preferredLanguage":{"name":"preferredLanguage","type":"\u0007","is_mandatory":true,"title":"Preferred language","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"privacyProfile":{"name":"privacyProfile","type":"\n","is_mandatory":true,"title":"Privacy profile data with contact email and statement URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"provisionedPlans":{"name":"provisionedPlans","type":"\u0019\n","is_mandatory":true,"title":"Provisioned plan","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"realm":{"name":"realm","type":"\u0019\u001bmicrosoft.tenant.realmInfo","title":"Tenant realm information for all verified domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"realmInfo":{"name":"realmInfo","type":"\u001bmicrosoft.tenant.realmInfo","title":"Tenant realm information","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"securityComplianceNotificationMails":{"name":"securityComplianceNotificationMails","type":"\u0019\u0007","is_mandatory":true,"title":"List of security compliance notification email addresses","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"securityComplianceNotificationPhones":{"name":"securityComplianceNotificationPhones","type":"\u0019\u0007","is_mandatory":true,"title":"List of security compliance notification phone numbers","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settings":{"name":"settings","type":"\u001bmicrosoft.tenantSettings","title":"Company-wide settings for apps and services.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"subscriptions":{"name":"subscriptions","type":"\u0019\n","title":"Commercial subscription","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"technicalNotificationMails":{"name":"technicalNotificationMails","type":"\u0019\u0007","is_mandatory":true,"title":"List of technical notification mails","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Tenant type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"verifiedDomains":{"name":"verifiedDomains","type":"\u0019\n","is_mandatory":true,"title":"Organization verified domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra Tenant","desc":"Examine configuration of the connected Microsoft Entra ID (Azure AD) tenant. Exposes the tenant's `name`, `id`, `type`, verified domains, provisioned plans, on-premises sync status, privacy profile, technical notification contacts, and security compliance notification addresses. Related resources include `settings`, `formsSettings`, `realm`, and `branding`.","min_provider_version":"11.0.29","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.tenant.brandingInfo":{"id":"microsoft.tenant.brandingInfo","name":"microsoft.tenant.brandingInfo","fields":{"backgroundColor":{"name":"backgroundColor","type":"\u0007","is_mandatory":true,"title":"Tenant branding background color","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"bannerLogo":{"name":"bannerLogo","type":"\u0007","is_mandatory":true,"title":"Tenant branding logo URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"domainName":{"name":"domainName","type":"\u0007","is_mandatory":true,"title":"Domain name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"keepMeSignedInDisabled":{"name":"keepMeSignedInDisabled","type":"\u0004","is_mandatory":true,"title":"if \"Keep me signed in\" is disabled for the tenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"useTransparentLightbox":{"name":"useTransparentLightbox","type":"\u0004","is_mandatory":true,"title":"Transparent light box","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Tenant branding information","private":true,"min_provider_version":"11.1.76","defaults":"keepMeSignedInDisabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.tenant.realmInfo":{"id":"microsoft.tenant.realmInfo","name":"microsoft.tenant.realmInfo","fields":{"domainName":{"name":"domainName","type":"\u0007","is_mandatory":true,"title":"Domain name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"federationBrandName":{"name":"federationBrandName","type":"\u0007","is_mandatory":true,"title":"Tenant federation brand name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"login":{"name":"login","type":"\u0007","is_mandatory":true,"title":"Login endpoint","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"nameSpaceType":{"name":"nameSpaceType","type":"\u0007","is_mandatory":true,"title":"Namespace Type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Tenant realm information","private":true,"min_provider_version":"11.1.76","defaults":"login nameSpaceType","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.tenantFormsSettings":{"id":"microsoft.tenantFormsSettings","name":"microsoft.tenantFormsSettings","fields":{"isBingImageSearchEnabled":{"name":"isBingImageSearchEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether users can add images from Bing to forms","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isExternalSendFormEnabled":{"name":"isExternalSendFormEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether users can send a link to a form to an external user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isExternalShareCollaborationEnabled":{"name":"isExternalShareCollaborationEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether users can collaborate on a form layout and structure with an external user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isExternalShareResultEnabled":{"name":"isExternalShareResultEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether users can share form results with external users","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isExternalShareTemplateEnabled":{"name":"isExternalShareTemplateEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether users can share form templates with external users","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isInOrgFormsPhishingScanEnabled":{"name":"isInOrgFormsPhishingScanEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether phishing protection is run on forms created by users","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isRecordIdentityByDefaultEnabled":{"name":"isRecordIdentityByDefaultEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether the names of users who fill out forms are recorded","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Company-wide settings for Microsoft Forms","private":true,"min_provider_version":"11.1.43","defaults":"isExternalSendFormEnabled isBingImageSearchEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.tenantSettings":{"id":"microsoft.tenantSettings","name":"microsoft.tenantSettings","fields":{"isAppAndServicesTrialEnabled":{"name":"isAppAndServicesTrialEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether users can start trial subscriptions for apps and services in your organization.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isOfficeStoreEnabled":{"name":"isOfficeStoreEnabled","type":"\u0004","is_mandatory":true,"title":"Controls whether users can access the Microsoft Store","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Company-wide configuration for apps and services.","private":true,"min_provider_version":"11.1.43","defaults":"isAppAndServicesTrialEnabled isOfficeStoreEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user":{"id":"microsoft.user","name":"microsoft.user","fields":{"accountEnabled":{"name":"accountEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the user account is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"assignedLicense":{"name":"assignedLicense","type":"\u001bmicrosoft.user.assignedLicense","title":"A single license assigned to a user","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"assignedLicenses":{"name":"assignedLicenses","type":"\u0019\u001bmicrosoft.user.assignedLicense","is_mandatory":true,"title":"The licenses that are assigned to the user, including inherited (group-based) licenses","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"auditlog":{"name":"auditlog","type":"\u001bmicrosoft.user.auditlog","title":"The user's audit log","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"authMethods":{"name":"authMethods","type":"\u001bmicrosoft.user.authenticationMethods","title":"User's configured authentication methods (passwords, MFA, security keys, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"authenticationMethods":{"name":"authenticationMethods","type":"\u001bmicrosoft.user.authenticationMethods","title":"Microsoft Entra authentication methods","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"authenticationRequirements":{"name":"authenticationRequirements","type":"\u001bmicrosoft.user.authenticationRequirements","title":"Authentication requirements information","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"city":{"name":"city","type":"\u0007","is_mandatory":true,"title":"User city","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"companyName":{"name":"companyName","type":"\u0007","is_mandatory":true,"title":"User company name","desc":"Deprecated in favor of `job.companyName`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"contact":{"name":"contact","type":"\n","title":"User's business phones, mobile phone, and other contact details","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"country":{"name":"country","type":"\u0007","is_mandatory":true,"title":"User country","desc":"Deprecated in favor of `contact.country`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"User create time","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"creationType":{"name":"creationType","type":"\u0007","is_mandatory":true,"title":"The user's creation type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"department":{"name":"department","type":"\u0007","is_mandatory":true,"title":"User department","desc":"Deprecated in favor of `job.department`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"User display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"employeeHireDate":{"name":"employeeHireDate","type":"\t","is_mandatory":true,"title":"The date and time when the user was hired","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"employeeId":{"name":"employeeId","type":"\u0007","is_mandatory":true,"title":"User employee ID","desc":"Deprecated in favor of `job.employeeId`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"employeeType":{"name":"employeeType","type":"\u0007","is_mandatory":true,"title":"The employee type (e.g., Employee, Contractor, etc.)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"externalUserState":{"name":"externalUserState","type":"\u0007","is_mandatory":true,"title":"The state of an external user's invitation (PendingAcceptance, Accepted, etc.)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"givenName":{"name":"givenName","type":"\u0007","is_mandatory":true,"title":"User given name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"User Object ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identities":{"name":"identities","type":"\u0019\u001bmicrosoft.user.identity","is_mandatory":true,"title":"The user's identities","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identity":{"name":"identity","type":"\u001bmicrosoft.user.identity","title":"Microsoft user identity","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"job":{"name":"job","type":"\n","title":"User's job title, department, company name, and office location","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"jobTitle":{"name":"jobTitle","type":"\u0007","is_mandatory":true,"title":"User job title","desc":"Deprecated in favor of `job.title`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"lastPasswordChangeDateTime":{"name":"lastPasswordChangeDateTime","type":"\t","is_mandatory":true,"title":"The date and time when the user last changed or was assigned a password","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"licenseDetail":{"name":"licenseDetail","type":"\u001bmicrosoft.user.licenseDetail","title":"Details of a single license assigned to a user","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"licenseDetails":{"name":"licenseDetails","type":"\u0019\u001bmicrosoft.user.licenseDetail","title":"A collection of this user's license details","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mail":{"name":"mail","type":"\u0007","is_mandatory":true,"title":"User email address","desc":"Deprecated in favor of `contact.email`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"mfaEnabled":{"name":"mfaEnabled","type":"\u0004","title":"Whether MFA is enabled for the user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mobilePhone":{"name":"mobilePhone","type":"\u0007","is_mandatory":true,"title":"User mobile phone number","desc":"Deprecated in favor of `contact.mobilePhone`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"officeLocation":{"name":"officeLocation","type":"\u0007","is_mandatory":true,"title":"User office location","desc":"Deprecated in favor of `job.officeLocation`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"onPremisesDomainName":{"name":"onPremisesDomainName","type":"\u0007","is_mandatory":true,"title":"The on-premises domain name of the user","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesLastSyncDateTime":{"name":"onPremisesLastSyncDateTime","type":"\t","is_mandatory":true,"title":"The last time the user was synced from on-premises","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesSamAccountName":{"name":"onPremisesSamAccountName","type":"\u0007","is_mandatory":true,"title":"The on-premises SAM account name of the user","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"onPremisesSyncEnabled":{"name":"onPremisesSyncEnabled","type":"\u0004","is_mandatory":true,"title":"Whether directory sync is enabled for the user","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"otherMails":{"name":"otherMails","type":"\u0019\u0007","is_mandatory":true,"title":"Additional email addresses for the user","desc":"Deprecated in favor of `contact.otherMails`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"passwordPolicies":{"name":"passwordPolicies","type":"\u0007","is_mandatory":true,"title":"Password policies applied to the user (e.g., DisablePasswordExpiration, DisableStrongPassword)","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"postalCode":{"name":"postalCode","type":"\u0007","is_mandatory":true,"title":"User postal code","desc":"Deprecated in favor of `contact.postalCode`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"preferredLanguage":{"name":"preferredLanguage","type":"\u0007","is_mandatory":true,"title":"The user's preferred language (ISO 639-1 code)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"settings":{"name":"settings","type":"\n","title":"User's mailbox and contribution settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signInActivity":{"name":"signInActivity","type":"\n","title":"The user's last interactive and non-interactive sign-in timestamps and request IDs","min_provider_version":"13.0.12","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signin":{"name":"signin","type":"\u001bmicrosoft.user.signin","title":"Microsoft user sign-in","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"User state or province","desc":"Deprecated in favor of `contact.state`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"streetAddress":{"name":"streetAddress","type":"\u0007","is_mandatory":true,"title":"User street address","desc":"Deprecated in favor of `contact.streetAddress`.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","maturity":"deprecated"},"surname":{"name":"surname","type":"\u0007","is_mandatory":true,"title":"User surname","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"usageLocation":{"name":"usageLocation","type":"\u0007","is_mandatory":true,"title":"The two-letter country code for the user's usage location (required for license assignment)","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userPrincipalName":{"name":"userPrincipalName","type":"\u0007","is_mandatory":true,"title":"User service principal name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userType":{"name":"userType","type":"\u0007","is_mandatory":true,"title":"User type","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra ID user","private":true,"min_provider_version":"9.0.0","defaults":"id displayName userPrincipalName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.assignedLicense":{"id":"microsoft.user.assignedLicense","name":"microsoft.user.assignedLicense","fields":{"disabledPlans":{"name":"disabledPlans","type":"\u0019\u0007","is_mandatory":true,"title":"A collection of the unique identifiers for plans that have been disabled.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"skuId":{"name":"skuId","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the SKU.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"A single license assigned to a user","private":true,"min_provider_version":"11.1.39","defaults":"skuId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.auditlog":{"id":"microsoft.user.auditlog","name":"microsoft.user.auditlog","fields":{"lastInteractiveSignIn":{"name":"lastInteractiveSignIn","type":"\u001bmicrosoft.user.signin","title":"The user's last interactive sign-in","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastNonInteractiveSignIn":{"name":"lastNonInteractiveSignIn","type":"\u001bmicrosoft.user.signin","title":"The user's last non-interactive sign-in (from the last 24 hours only)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signins":{"name":"signins","type":"\u0019\u001bmicrosoft.user.signin","title":"The user's interactive sign-in entries (a maximum of 50 entries from the last 24 hours only)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"The user's ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft user audit log","private":true,"min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.authenticationMethods":{"id":"microsoft.user.authenticationMethods","name":"microsoft.user.authenticationMethods","fields":{"count":{"name":"count","type":"\u0005","is_mandatory":true,"title":"Count of authentication methods","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"emailMethods":{"name":"emailMethods","type":"\u0019\n","is_mandatory":true,"title":"Email authentication method for self-service password reset (SSPR)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"fido2Methods":{"name":"fido2Methods","type":"\u0019\n","is_mandatory":true,"title":"FIDO2 security key registered to a user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoftAuthenticator":{"name":"microsoftAuthenticator","type":"\u0019\n","is_mandatory":true,"title":"Microsoft Authenticator app registered to a user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"passwordMethods":{"name":"passwordMethods","type":"\u0019\n","is_mandatory":true,"title":"User password authentication method","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"phoneMethods":{"name":"phoneMethods","type":"\u0019\n","is_mandatory":true,"title":"Phone number and type registered to a user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"registrationDetails":{"name":"registrationDetails","type":"\u001bmicrosoft.user.authenticationMethods.userRegistrationDetails","title":"Retrieves the registration and capability status for a user's authentication methods","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"softwareMethods":{"name":"softwareMethods","type":"\u0019\n","is_mandatory":true,"title":"Software OATH token registered to a user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"temporaryAccessPassMethods":{"name":"temporaryAccessPassMethods","type":"\u0019\n","is_mandatory":true,"title":"Temporary Access Pass registered to a user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userRegistrationDetails":{"name":"userRegistrationDetails","type":"\u001bmicrosoft.user.authenticationMethods.userRegistrationDetails","title":"Represents the state of a user's authentication methods, including which methods are registered and capable","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"windowsHelloMethods":{"name":"windowsHelloMethods","type":"\u0019\n","is_mandatory":true,"title":"Windows Hello for Business authentication method registered to a user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft Entra authentication methods","private":true,"min_provider_version":"11.0.29","defaults":"count","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.authenticationMethods.userRegistrationDetails":{"id":"microsoft.user.authenticationMethods.userRegistrationDetails","name":"microsoft.user.authenticationMethods.userRegistrationDetails","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"User's object identifier in Microsoft Entra ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isAdmin":{"name":"isAdmin","type":"\u0004","is_mandatory":true,"title":"True if the user has an administrator role in the tenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isMfaCapable":{"name":"isMfaCapable","type":"\u0004","is_mandatory":true,"title":"True if the user has registered a strong auth method that is enabled by the multifactor authentication policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isMfaRegistered":{"name":"isMfaRegistered","type":"\u0004","is_mandatory":true,"title":"True if the user has registered at least one strong authentication method, regardless of whether it is enabled by policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isPasswordlessCapable":{"name":"isPasswordlessCapable","type":"\u0004","is_mandatory":true,"title":"True if the user has registered a strong authentication method that doesn't require a password and is enabled by policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isSsprCapable":{"name":"isSsprCapable","type":"\u0004","is_mandatory":true,"title":"True if the user is capable of self-service password reset by having registered the required number of methods and being included in the policy","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isSsprEnabled":{"name":"isSsprEnabled","type":"\u0004","is_mandatory":true,"title":"True if the user is allowed to perform self-service password reset by policy, even if they have not yet registered the required number of methods","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isSsprRegistered":{"name":"isSsprRegistered","type":"\u0004","is_mandatory":true,"title":"True if the user has registered the required number of authentication methods for self-service password reset","desc":"Reported regardless of whether they are enabled by policy.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"isSystemPreferredAuthenticationMethodEnabled":{"name":"isSystemPreferredAuthenticationMethodEnabled","type":"\u0004","is_mandatory":true,"title":"True if system-preferred authentication is enabled","desc":"Allows the system to dynamically determine the most secure authentication method for the user.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"lastUpdatedDateTime":{"name":"lastUpdatedDateTime","type":"\t","is_mandatory":true,"title":"The date and time when the user's registration details were last updated","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"methodsRegistered":{"name":"methodsRegistered","type":"\u0019\u0007","is_mandatory":true,"title":"Collection of authentication methods registered by the user, such as \"mobilePhone\", \"email\", and \"fido2SecurityKey\"","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"systemPreferredAuthenticationMethods":{"name":"systemPreferredAuthenticationMethods","type":"\u0019\u0007","is_mandatory":true,"title":"Collection of authentication methods that the system determined to be the most secure for the user to perform multifactor authentication","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userDisplayName":{"name":"userDisplayName","type":"\u0007","is_mandatory":true,"title":"The user's display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userPreferredMethodForSecondaryAuthentication":{"name":"userPreferredMethodForSecondaryAuthentication","type":"\u0007","is_mandatory":true,"title":"The method the user selected as their default for second-factor authentication. This is used when system-preferred authentication is disabled.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userPrincipalName":{"name":"userPrincipalName","type":"\u0007","is_mandatory":true,"title":"The user's principal name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userType":{"name":"userType","type":"\u0007","is_mandatory":true,"title":"The user's type, which can be \"member\", \"guest\", or \"unknownFutureValue\"","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Represents the state of a user's authentication methods, including which methods are registered and capable","private":true,"min_provider_version":"11.1.40","defaults":"id userDisplayName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.authenticationRequirements":{"id":"microsoft.user.authenticationRequirements","name":"microsoft.user.authenticationRequirements","fields":{"perUserMfaState":{"name":"perUserMfaState","type":"\u0007","is_mandatory":true,"title":"user's MFA state","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft user authentication method states","private":true,"min_provider_version":"11.1.39","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.identity":{"id":"microsoft.user.identity","name":"microsoft.user.identity","fields":{"issuer":{"name":"issuer","type":"\u0007","is_mandatory":true,"title":"The identity issuer","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"issuerAssignedId":{"name":"issuerAssignedId","type":"\u0007","is_mandatory":true,"title":"The identity as assigned by the issuer","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"signInType":{"name":"signInType","type":"\u0007","is_mandatory":true,"title":"The sign-in type for the identity (e.g., 'federated' or 'userPrincipalName')","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft user identity","private":true,"min_provider_version":"11.1.0","defaults":"issuerAssignedId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.licenseDetail":{"id":"microsoft.user.licenseDetail","name":"microsoft.user.licenseDetail","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the license detail object","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePlanInfo":{"name":"servicePlanInfo","type":"\u001bmicrosoft.user.licenseDetail.servicePlanInfo","title":"Contains information about a service plan associated with a subscribed SKU","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"servicePlans":{"name":"servicePlans","type":"\u0019\u001bmicrosoft.user.licenseDetail.servicePlanInfo","is_mandatory":true,"title":"A collection of the service plans that are provided with the SKU.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"skuId":{"name":"skuId","type":"\u0007","is_mandatory":true,"title":"The unique identifier for the SKU.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"skuPartNumber":{"name":"skuPartNumber","type":"\u0007","is_mandatory":true,"title":"The unique, friendly name for the product.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Details of a single license assigned to a user","private":true,"min_provider_version":"11.1.41","defaults":"skuId skuPartNumber","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.licenseDetail.servicePlanInfo":{"id":"microsoft.user.licenseDetail.servicePlanInfo","name":"microsoft.user.licenseDetail.servicePlanInfo","fields":{"appliesTo":{"name":"appliesTo","type":"\u0007","is_mandatory":true,"title":"The object the service plan can be assigned to. The possible values are: User or Company","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"provisioningStatus":{"name":"provisioningStatus","type":"\u0007","is_mandatory":true,"title":"The provisioning status of the service plan","desc":"The possible values are: Success, Disabled, Error, PendingInput, PendingActivation, PendingProvisioning.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePlanId":{"name":"servicePlanId","type":"\u0007","is_mandatory":true,"title":"The unique identifier of the service plan","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"servicePlanName":{"name":"servicePlanName","type":"\u0007","is_mandatory":true,"title":"The name of the service plan.","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Contains information about a service plan associated with a subscribed SKU","private":true,"min_provider_version":"11.1.41","defaults":"appliesTo provisioningStatus servicePlanName","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.user.signin":{"id":"microsoft.user.signin","name":"microsoft.user.signin","fields":{"appDisplayName":{"name":"appDisplayName","type":"\u0007","is_mandatory":true,"title":"The display name of the client app used to perform the sign-in","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"appId":{"name":"appId","type":"\u0007","is_mandatory":true,"title":"The application identifier","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"clientAppUsed":{"name":"clientAppUsed","type":"\u0007","is_mandatory":true,"title":"The client app used to perform the sign-in","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"conditionalAccessStatus":{"name":"conditionalAccessStatus","type":"\u0007","is_mandatory":true,"title":"The conditional access status (success, failure, notApplied, unknownFutureValue)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"correlationId":{"name":"correlationId","type":"\u0007","is_mandatory":true,"title":"The correlation identifier for the sign-in","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"createdDateTime":{"name":"createdDateTime","type":"\t","is_mandatory":true,"title":"The date and time the sign-in entry was created","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"The sign-in entry's identifier","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"interactive":{"name":"interactive","type":"\u0004","is_mandatory":true,"title":"Whether the sign-in was interactive","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ipAddress":{"name":"ipAddress","type":"\u0007","is_mandatory":true,"title":"The IP address of the client","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"resourceDisplayName":{"name":"resourceDisplayName","type":"\u0007","is_mandatory":true,"title":"The resource's display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"resourceId":{"name":"resourceId","type":"\u0007","is_mandatory":true,"title":"The resource identifier","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"riskDetail":{"name":"riskDetail","type":"\u0007","is_mandatory":true,"title":"The risk detail (none, adminGeneratedTemporaryPassword, userPerformedSecuredPasswordChange, etc.)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"riskState":{"name":"riskState","type":"\u0007","is_mandatory":true,"title":"The risk state (none, confirmedSafe, remediated, dismissed, atRisk, confirmedCompromised, unknownFutureValue)","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userAgent":{"name":"userAgent","type":"\u0007","is_mandatory":true,"title":"The user agent used for the sign-in","min_provider_version":"11.1.102","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userDisplayName":{"name":"userDisplayName","type":"\u0007","is_mandatory":true,"title":"The display name of the user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"The ID of the user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft user sign-in","private":true,"min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"microsoft.users":{"id":"microsoft.users","name":"microsoft.users","fields":{"filter":{"name":"filter","type":"\u0007","is_mandatory":true,"title":"Filter users by property values","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"list":{"name":"list","type":"\u0019\u001bmicrosoft.user","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"search":{"name":"search","type":"\u0007","is_mandatory":true,"title":"Search users by search phrases","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"init":{"args":[{"name":"filter","type":"\u0007","optional":true},{"name":"search","type":"\u0007","optional":true}]},"list_type":"\u001bmicrosoft.user","title":"Microsoft Entra ID Users","desc":"Iterate over Microsoft Entra ID (formerly Azure AD) users in the tenant. Supports optional `filter` (OData property filter) and `search` (keyword search) parameters to narrow results. Each entry is a `microsoft.user` exposing account status, contact details, job information, MFA state, assigned licenses, sign-in history, and authentication method registration.","min_provider_version":"11.1.15","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365":{"id":"ms365","fields":{"exchangeonline":{"name":"exchangeonline","type":"\u001bms365.exchangeonline","title":"Microsoft 365 Exchange Online","desc":"Use this namespace to access Exchange Online configuration and security settings. Exposes mail filtering policies (`malwareFilterPolicy`, `hostedContentFilterPolicy`, `antiPhishPolicy`, `hostedOutboundSpamFilterPolicy`), transport rules, safe links and attachment policies, DKIM signing configuration, authentication policies, OWA mailbox policies, mailbox audit settings, quarantine policies, retention policies, journal rules, report submission policies, Teams protection policies, and organization-wide configuration.","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"exchangeonlineMailboxAuditBypassAssociation":{"name":"exchangeonlineMailboxAuditBypassAssociation","type":"\u001bms365.exchangeonlineMailboxAuditBypassAssociation","title":"Mailbox Audit Bypass Association configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"sharepointonline":{"name":"sharepointonline","type":"\u001bms365.sharepointonline","title":"Microsoft 365 SharePoint Online","desc":"Use this namespace to access SharePoint Online tenant configuration and site inventory. Exposes `spoTenant` (tenant-wide settings), `spoTenantSyncClientRestriction` (sync client access controls), `spoSites` (list of site collections with their URL and custom script permissions), and `defaultLinkPermission` (the default sharing link permission level for the tenant).","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"teams":{"name":"teams","type":"\u001bms365.teams","title":"Microsoft 365 Teams","desc":"Use this namespace to access Microsoft Teams configuration for the tenant. Exposes `csTeamsClientConfiguration` (client feature controls), `csTenantFederationConfiguration` (external access and federation settings), `csTeamsMeetingPolicy` (meeting lobby, recording, and participant controls), and `csTeamsMessagingPolicy` (messaging and security reporting controls).","provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true}},"is_extension":true},"ms365.exchangeonline":{"id":"ms365.exchangeonline","name":"ms365.exchangeonline","fields":{"adminAuditLogConfig":{"name":"adminAuditLogConfig","type":"\n","title":"Admin audit log configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"antiPhishPolicy":{"name":"antiPhishPolicy","type":"\u0019\n","title":"List of anti-phishing policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"atpPolicyForO365":{"name":"atpPolicyForO365","type":"\u0019\n","title":"List of APT policies for Office 365","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"authenticationPolicy":{"name":"authenticationPolicy","type":"\u0019\n","title":"List of authentication policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"dkimSigningConfig":{"name":"dkimSigningConfig","type":"\u0019\n","title":"List of dkim signing configurations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"exoMailbox":{"name":"exoMailbox","type":"\u001bms365.exchangeonline.exoMailbox","title":"Microsoft 365 Exchange Online Mailbox","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"externalInOutlook":{"name":"externalInOutlook","type":"\u0019\u001bms365.exchangeonline.externalSender","title":"List of external sender configurations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"externalSender":{"name":"externalSender","type":"\u001bms365.exchangeonline.externalSender","title":"Microsoft 365 Exchange Online External Sender","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"hostedContentFilterPolicy":{"name":"hostedContentFilterPolicy","type":"\u0019\n","title":"List of hosted spam filter policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"hostedOutboundSpamFilterPolicy":{"name":"hostedOutboundSpamFilterPolicy","type":"\u0019\n","title":"List of hosted outbound spam filter policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"journalRule":{"name":"journalRule","type":"\u001bms365.exchangeonline.journalRule","title":"Journal Rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"journalRules":{"name":"journalRules","type":"\u0019\u001bms365.exchangeonline.journalRule","title":"List of journal rules","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mailbox":{"name":"mailbox","type":"\u0019\n","title":"List of mailboxes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mailboxAuditBypassAssociation":{"name":"mailboxAuditBypassAssociation","type":"\u0019\u001bms365.exchangeonlineMailboxAuditBypassAssociation","title":"List of mailbox audit bypass associations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mailboxPlan":{"name":"mailboxPlan","type":"\u001bms365.exchangeonline.mailboxPlan","title":"Mailbox Plan","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"mailboxPlans":{"name":"mailboxPlans","type":"\u0019\u001bms365.exchangeonline.mailboxPlan","title":"List of mailbox plans","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"mailboxesWithAudit":{"name":"mailboxesWithAudit","type":"\u0019\u001bms365.exchangeonline.mailbox","title":"List of mailboxes with audit settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"malwareFilterPolicy":{"name":"malwareFilterPolicy","type":"\u0019\n","title":"List of malware filter policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"organizationConfig":{"name":"organizationConfig","type":"\n","title":"Organization configurations","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"owaMailboxPolicy":{"name":"owaMailboxPolicy","type":"\u0019\n","title":"List of OWA mailbox policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"phishFilterPolicy":{"name":"phishFilterPolicy","type":"\u0019\n","title":"List of phishing filter policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"quarantinePolicy":{"name":"quarantinePolicy","type":"\u0019\n","title":"List of quarantine policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"remoteDomain":{"name":"remoteDomain","type":"\u0019\n","title":"List of remote domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportSubmissionPolicies":{"name":"reportSubmissionPolicies","type":"\u0019\u001bms365.exchangeonline.reportSubmissionPolicy","title":"List of report submission policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportSubmissionPolicy":{"name":"reportSubmissionPolicy","type":"\u001bms365.exchangeonline.reportSubmissionPolicy","title":"Report Submission Policy configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"retentionPolicies":{"name":"retentionPolicies","type":"\u0019\u001bms365.exchangeonline.retentionPolicy","title":"List of retention policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"retentionPolicy":{"name":"retentionPolicy","type":"\u001bms365.exchangeonline.retentionPolicy","title":"Retention Policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"roleAssignmentPolicy":{"name":"roleAssignmentPolicy","type":"\u0019\n","title":"List of role assignment policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"safeAttachmentPolicy":{"name":"safeAttachmentPolicy","type":"\u0019\n","title":"List of safe attachment policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"safeLinksPolicy":{"name":"safeLinksPolicy","type":"\u0019\n","title":"List of safe links policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"securityAndCompliance":{"name":"securityAndCompliance","type":"\u001bms365.exchangeonline.securityAndCompliance","title":"Security and Compliance policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"sharedMailboxes":{"name":"sharedMailboxes","type":"\u0019\u001bms365.exchangeonline.exoMailbox","title":"List of shared mailboxes","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"sharingPolicy":{"name":"sharingPolicy","type":"\u0019\n","title":"List of sharing policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"teamsProtectionPolicies":{"name":"teamsProtectionPolicies","type":"\u0019\u001bms365.exchangeonline.teamsProtectionPolicy","title":"List of Teams protection policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"teamsProtectionPolicy":{"name":"teamsProtectionPolicy","type":"\u001bms365.exchangeonline.teamsProtectionPolicy","title":"Teams Protection Policy configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"transportConfig":{"name":"transportConfig","type":"\n","title":"Transport configuration settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"transportRule":{"name":"transportRule","type":"\u0019\n","title":"Transport rules","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Exchange Online","desc":"Use this namespace to access Exchange Online configuration and security settings. Exposes mail filtering policies (`malwareFilterPolicy`, `hostedContentFilterPolicy`, `antiPhishPolicy`, `hostedOutboundSpamFilterPolicy`), transport rules, safe links and attachment policies, DKIM signing configuration, authentication policies, OWA mailbox policies, mailbox audit settings, quarantine policies, retention policies, journal rules, report submission policies, Teams protection policies, and organization-wide configuration.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.exoMailbox":{"id":"ms365.exchangeonline.exoMailbox","name":"ms365.exchangeonline.exoMailbox","fields":{"externalDirectoryObjectId":{"name":"externalDirectoryObjectId","type":"\u0007","is_mandatory":true,"title":"The identity of the external object linked to this mailbox","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identity":{"name":"identity","type":"\u0007","is_mandatory":true,"title":"The identity of the mailbox","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"user":{"name":"user","type":"\u001bmicrosoft.user","title":"The user linked to this mailbox","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Exchange Online Mailbox","private":true,"min_provider_version":"9.2.14","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.externalSender":{"id":"ms365.exchangeonline.externalSender","name":"ms365.exchangeonline.externalSender","fields":{"allowList":{"name":"allowList","type":"\u0019\u0007","is_mandatory":true,"title":"The list of specified senders that do not receive the external icon in the area of subject line","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the feature is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identity":{"name":"identity","type":"\u0007","is_mandatory":true,"title":"The identity of the external sender","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Exchange Online External Sender","private":true,"min_provider_version":"9.2.9","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.journalRule":{"id":"ms365.exchangeonline.journalRule","name":"ms365.exchangeonline.journalRule","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"journalEmailAddress":{"name":"journalEmailAddress","type":"\u0007","is_mandatory":true,"title":"Journal recipient email address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Rule scope","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Journal Rule","private":true,"min_provider_version":"11.1.73","defaults":"name enabled journalEmailAddress scope","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.mailbox":{"id":"ms365.exchangeonline.mailbox","name":"ms365.exchangeonline.mailbox","fields":{"auditAdmin":{"name":"auditAdmin","type":"\u0019\u0007","is_mandatory":true,"title":"Admin audit actions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"auditDelegate":{"name":"auditDelegate","type":"\u0019\u0007","is_mandatory":true,"title":"Delegate audit actions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"auditEnabled":{"name":"auditEnabled","type":"\u0004","is_mandatory":true,"title":"Whether audit logging is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"auditLogAgeLimit":{"name":"auditLogAgeLimit","type":"\u0007","is_mandatory":true,"title":"Audit log age limit","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"auditOwner":{"name":"auditOwner","type":"\u0019\u0007","is_mandatory":true,"title":"Owner audit actions","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identity":{"name":"identity","type":"\u0007","is_mandatory":true,"title":"Mailbox identity","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"primarySmtpAddress":{"name":"primarySmtpAddress","type":"\u0007","is_mandatory":true,"title":"Primary SMTP address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"recipientTypeDetails":{"name":"recipientTypeDetails","type":"\u0007","is_mandatory":true,"title":"Recipient type details","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Exchange Online Mailbox with Audit Settings","private":true,"min_provider_version":"11.1.41","defaults":"identity displayName auditEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.mailboxPlan":{"id":"ms365.exchangeonline.mailboxPlan","name":"ms365.exchangeonline.mailboxPlan","fields":{"alias":{"name":"alias","type":"\u0007","is_mandatory":true,"title":"Plan alias","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"maxReceiveSize":{"name":"maxReceiveSize","type":"\u0007","is_mandatory":true,"title":"Maximum receive size","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"maxSendSize":{"name":"maxSendSize","type":"\u0007","is_mandatory":true,"title":"Maximum send size","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Plan name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"prohibitSendQuota":{"name":"prohibitSendQuota","type":"\u0007","is_mandatory":true,"title":"Prohibit send quota","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Mailbox Plan","private":true,"min_provider_version":"11.1.73","defaults":"name alias prohibitSendQuota maxSendSize maxReceiveSize","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.reportSubmissionPolicy":{"id":"ms365.exchangeonline.reportSubmissionPolicy","name":"ms365.exchangeonline.reportSubmissionPolicy","fields":{"disableQuarantineReportingOption":{"name":"disableQuarantineReportingOption","type":"\u0004","is_mandatory":true,"title":"Disable the quarantine reporting option","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enableCustomNotificationSender":{"name":"enableCustomNotificationSender","type":"\u0004","is_mandatory":true,"title":"Whether to use a custom notification sender","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enableOrganizationBranding":{"name":"enableOrganizationBranding","type":"\u0004","is_mandatory":true,"title":"Whether to use organization branding in notifications","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enableReportToMicrosoft":{"name":"enableReportToMicrosoft","type":"\u0004","is_mandatory":true,"title":"Whether to send reports to Microsoft","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"enableThirdPartyAddress":{"name":"enableThirdPartyAddress","type":"\u0004","is_mandatory":true,"title":"Whether to enable third-party reporting address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"junkReviewResultMessage":{"name":"junkReviewResultMessage","type":"\u0007","is_mandatory":true,"title":"Custom message shown for junk review result","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notJunkReviewResultMessage":{"name":"notJunkReviewResultMessage","type":"\u0007","is_mandatory":true,"title":"Custom message shown for not junk review result","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notificationFooterMessage":{"name":"notificationFooterMessage","type":"\u0007","is_mandatory":true,"title":"Footer message for notifications","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"notificationSenderAddresses":{"name":"notificationSenderAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Sender addresses for notifications","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"phishingReviewResultMessage":{"name":"phishingReviewResultMessage","type":"\u0007","is_mandatory":true,"title":"Custom message shown for phishing review result","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"postSubmitMessageEnabled":{"name":"postSubmitMessageEnabled","type":"\u0004","is_mandatory":true,"title":"Whether to show a message after submission","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"preSubmitMessageEnabled":{"name":"preSubmitMessageEnabled","type":"\u0004","is_mandatory":true,"title":"Whether to show a message before submission","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportChatMessageEnabled":{"name":"reportChatMessageEnabled","type":"\u0004","is_mandatory":true,"title":"Whether chat message reporting is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportChatMessageToCustomizedAddressEnabled":{"name":"reportChatMessageToCustomizedAddressEnabled","type":"\u0004","is_mandatory":true,"title":"Whether to report chat messages to a customized address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportJunkAddresses":{"name":"reportJunkAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Addresses to report junk","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportJunkToCustomizedAddress":{"name":"reportJunkToCustomizedAddress","type":"\u0004","is_mandatory":true,"title":"Whether to report junk to a customized address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportNotJunkAddresses":{"name":"reportNotJunkAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Addresses to report not junk","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportNotJunkToCustomizedAddress":{"name":"reportNotJunkToCustomizedAddress","type":"\u0004","is_mandatory":true,"title":"Whether to report not junk to a customized address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportPhishAddresses":{"name":"reportPhishAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Addresses to report phish","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"reportPhishToCustomizedAddress":{"name":"reportPhishToCustomizedAddress","type":"\u0004","is_mandatory":true,"title":"Whether to report phish to a customized address","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Report Submission Policy configuration","private":true,"min_provider_version":"11.0.10","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.retentionPolicy":{"id":"ms365.exchangeonline.retentionPolicy","name":"ms365.exchangeonline.retentionPolicy","fields":{"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy name","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"retentionId":{"name":"retentionId","type":"\u0007","is_mandatory":true,"title":"Retention ID","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"retentionPolicyTagLinks":{"name":"retentionPolicyTagLinks","type":"\u0019\u0007","is_mandatory":true,"title":"Retention policy tag links","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Retention Policy","private":true,"min_provider_version":"11.1.73","defaults":"name retentionPolicyTagLinks retentionId","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.securityAndCompliance":{"id":"ms365.exchangeonline.securityAndCompliance","name":"ms365.exchangeonline.securityAndCompliance","fields":{"dlpCompliancePolicies":{"name":"dlpCompliancePolicies","type":"\u0019\n","title":"List of Data Loss Prevention (DLP) compliance policies","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Exchange Online Security and Compliance","private":true,"min_provider_version":"11.1.41","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonline.teamsProtectionPolicy":{"id":"ms365.exchangeonline.teamsProtectionPolicy","name":"ms365.exchangeonline.teamsProtectionPolicy","fields":{"isValid":{"name":"isValid","type":"\u0004","is_mandatory":true,"title":"Whether the policy configuration is considered valid","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"zapEnabled":{"name":"zapEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Zero-hour Auto Purge (ZAP) is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Teams Protection Policy configuration","private":true,"min_provider_version":"11.0.8","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.exchangeonlineMailboxAuditBypassAssociation":{"id":"ms365.exchangeonlineMailboxAuditBypassAssociation","name":"ms365.exchangeonlineMailboxAuditBypassAssociation","fields":{"auditBypassEnabled":{"name":"auditBypassEnabled","type":"\u0004","is_mandatory":true,"title":"Whether mailbox audit logging is bypassed for this account","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The name of the user or computer account","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Mailbox Audit Bypass Association configuration","private":true,"min_provider_version":"11.1.43","defaults":"name auditBypassEnabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.sharepointonline":{"id":"ms365.sharepointonline","name":"ms365.sharepointonline","fields":{"defaultLinkPermission":{"name":"defaultLinkPermission","type":"\u0007","title":"The default link permission for the tenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"site":{"name":"site","type":"\u001bms365.sharepointonline.site","title":"Microsoft 365 SharePoint Site","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"spoSites":{"name":"spoSites","type":"\u0019\u001bms365.sharepointonline.site","title":"SharePoint Online tenant sites","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"spoTenant":{"name":"spoTenant","type":"\n","title":"SharePoint Online tenant","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"spoTenantSyncClientRestriction":{"name":"spoTenantSyncClientRestriction","type":"\n","title":"SharePoint Online tenant sync client restriction","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 SharePoint Online","desc":"Use this namespace to access SharePoint Online tenant configuration and site inventory. Exposes `spoTenant` (tenant-wide settings), `spoTenantSyncClientRestriction` (sync client access controls), `spoSites` (list of site collections with their URL and custom script permissions), and `defaultLinkPermission` (the default sharing link permission level for the tenant).","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.sharepointonline.site":{"id":"ms365.sharepointonline.site","name":"ms365.sharepointonline.site","fields":{"denyAddAndCustomizePages":{"name":"denyAddAndCustomizePages","type":"\u0004","is_mandatory":true,"title":"Whether custom script execution on a particular site allowed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"url":{"name":"url","type":"\u0007","is_mandatory":true,"title":"The site URL","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 SharePoint Site","private":true,"min_provider_version":"9.2.10","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.teams":{"id":"ms365.teams","name":"ms365.teams","fields":{"csTeamsClientConfiguration":{"name":"csTeamsClientConfiguration","type":"\n","title":"Teams client configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"csTeamsMeetingPolicy":{"name":"csTeamsMeetingPolicy","type":"\u001bms365.teams.teamsMeetingPolicyConfig","title":"Teams meeting policy configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"csTeamsMessagingPolicy":{"name":"csTeamsMessagingPolicy","type":"\u001bms365.teams.teamsMessagingPolicyConfig","title":"Teams message policy configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"csTenantFederationConfiguration":{"name":"csTenantFederationConfiguration","type":"\u001bms365.teams.tenantFederationConfig","title":"Teams tenant federated configuration","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"teamsMeetingPolicyConfig":{"name":"teamsMeetingPolicyConfig","type":"\u001bms365.teams.teamsMeetingPolicyConfig","title":"Microsoft 365 Teams meeting policy configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"teamsMessagingPolicyConfig":{"name":"teamsMessagingPolicyConfig","type":"\u001bms365.teams.teamsMessagingPolicyConfig","title":"Teams meeting policy configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true},"tenantFederationConfig":{"name":"tenantFederationConfig","type":"\u001bms365.teams.tenantFederationConfig","title":"Microsoft 365 Teams tenant federation configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/ms365","is_implicit_resource":true}},"title":"Microsoft 365 Teams","desc":"Use this namespace to access Microsoft Teams configuration for the tenant. Exposes `csTeamsClientConfiguration` (client feature controls), `csTenantFederationConfiguration` (external access and federation settings), `csTeamsMeetingPolicy` (meeting lobby, recording, and participant controls), and `csTeamsMessagingPolicy` (messaging and security reporting controls).","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.teams.teamsMeetingPolicyConfig":{"id":"ms365.teams.teamsMeetingPolicyConfig","name":"ms365.teams.teamsMeetingPolicyConfig","fields":{"allowAnonymousUsersToJoinMeeting":{"name":"allowAnonymousUsersToJoinMeeting","type":"\u0004","is_mandatory":true,"title":"Whether anonymous users are allowed to join","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowAnonymousUsersToStartMeeting":{"name":"allowAnonymousUsersToStartMeeting","type":"\u0004","is_mandatory":true,"title":"Whether anonymous users are allowed to start the meeting","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowCloudRecordingForCalls":{"name":"allowCloudRecordingForCalls","type":"\u0004","is_mandatory":true,"title":"Whether cloud recording is allowed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowExternalNonTrustedMeetingChat":{"name":"allowExternalNonTrustedMeetingChat","type":"\u0004","is_mandatory":true,"title":"Whether external meeting chat is allowed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowExternalParticipantGiveRequestControl":{"name":"allowExternalParticipantGiveRequestControl","type":"\u0004","is_mandatory":true,"title":"Whether external participants can give or request control of the meeting","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowPSTNUsersToBypassLobby":{"name":"allowPSTNUsersToBypassLobby","type":"\u0004","is_mandatory":true,"title":"Whether public switched telephone network (PSTN) users can bypass the lobby","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowSecurityEndUserReporting":{"name":"allowSecurityEndUserReporting","type":"\u0004","is_mandatory":true,"title":"Whether users can report security concerns","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"autoAdmittedUsers":{"name":"autoAdmittedUsers","type":"\u0007","is_mandatory":true,"title":"Who can bypass the lobby","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"designatedPresenterRoleMode":{"name":"designatedPresenterRoleMode","type":"\u0007","is_mandatory":true,"title":"Designated presenter role mode","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"meetingChatEnabledType":{"name":"meetingChatEnabledType","type":"\u0007","is_mandatory":true,"title":"Whether meeting chat is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Teams meeting policy configuration","private":true,"min_provider_version":"9.2.9","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.teams.teamsMessagingPolicyConfig":{"id":"ms365.teams.teamsMessagingPolicyConfig","name":"ms365.teams.teamsMessagingPolicyConfig","fields":{"allowSecurityEndUserReporting":{"name":"allowSecurityEndUserReporting","type":"\u0004","is_mandatory":true,"title":"Whether users can report security concerns","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Teams meeting policy configuration","private":true,"min_provider_version":"11.0.10","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"ms365.teams.tenantFederationConfig":{"id":"ms365.teams.tenantFederationConfig","name":"ms365.teams.tenantFederationConfig","fields":{"allowFederatedUsers":{"name":"allowFederatedUsers","type":"\u0004","is_mandatory":true,"title":"Whether federated users are allowed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowPublicUsers":{"name":"allowPublicUsers","type":"\u0004","is_mandatory":true,"title":"Whether public users are allowed","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowTeamsConsumer":{"name":"allowTeamsConsumer","type":"\u0004","is_mandatory":true,"title":"Whether to allow external Teams consumers","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowTeamsConsumerInbound":{"name":"allowTeamsConsumerInbound","type":"\u0004","is_mandatory":true,"title":"Whether to allow inbound communication with external Teams consumers","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"allowedDomains":{"name":"allowedDomains","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"blockedDomains":{"name":"blockedDomains","type":"\u0019\u0007","is_mandatory":true,"title":"Blocked domains","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"externalAccessWithTrialTenants":{"name":"externalAccessWithTrialTenants","type":"\u0007","is_mandatory":true,"title":"Whether external access with trial tenants is allowed (Allowed or Blocked)","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"identity":{"name":"identity","type":"\u0007","is_mandatory":true,"title":"ID of the collection of tenant federation configuration settings","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"restrictTeamsConsumerToExternalUserProfiles":{"name":"restrictTeamsConsumerToExternalUserProfiles","type":"\u0004","is_mandatory":true,"title":"Whether to restrict Teams consumer to external user profiles","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"sharedSipAddressSpace":{"name":"sharedSipAddressSpace","type":"\u0004","is_mandatory":true,"title":"Whether shared SIP address space is enabled","provider":"go.mondoo.com/cnquery/v9/providers/ms365"},"treatDiscoveredPartnersAsUnverified":{"name":"treatDiscoveredPartnersAsUnverified","type":"\u0004","is_mandatory":true,"title":"Whether to treat discovered partners as unverified","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}},"title":"Microsoft 365 Teams tenant federation configuration","private":true,"min_provider_version":"9.2.9","provider":"go.mondoo.com/cnquery/v9/providers/ms365"}}}