Entra Policy Suite settings · Settings > Identity report
Identity report
| Key | IdentityReport.Enabled |
|---|---|
| Where | Settings > Identity report |
| Type | On / off |
| Default | Off |
| Feature | The identity report as gap views · Community |
What it does
Switches the identity report on: a daily snapshot of every user and device - MFA, sign-in, licenses, AD, devices - shown on the Identity page as gap views with filters and pivots. Read only: nothing in the tenant or AD is changed.
When enabled
Used from the next report run.
When disabled
Off (the default): the report does not run and the Identity page shows the last snapshot, if any.
Risk and how to reverse it
Read only. The engine reads users, the MFA registration report (AuditLog.Read.All), Intune devices (DeviceManagementManagedDevices.Read.All) and Exchange recipients; the hybrid worker reads AD users. Reversible.
Requires
Admin.
Recommended
On.
Related settings
- Snapshots to keep IdentityReport.KeepRuns
- Mail the workbook after each run IdentityReport.MailWorkbook
- Who gets the workbook IdentityReport.MailRecipients
- Device counts: devices synced in the last N days IdentityReport.DeviceCountWindowDays
- Inactive after N days IdentityReport.InactiveDays
- Long inactive after N days IdentityReport.LongInactiveDays
- Guests inactive after N days IdentityReport.GuestInactiveDays
- New hires: grace period (days) IdentityReport.NewHireGraceDays
- Hire date attribute IdentityReport.HireDateAttribute
- AD validation: user OU pattern IdentityReport.AdOu.User
- AD validation: service account OU pattern IdentityReport.AdOu.ServiceAccount
- AD validation: shared user OU pattern IdentityReport.AdOu.SharedUser
- AD validation: shared mailbox OU pattern IdentityReport.AdOu.SharedMailbox
- Leave these users out of the report IdentityReport.ExcludeObjects
Documented for Entra Policy Suite 2.0.107. Written by the Entra Policy Suite team; Invardia publishes it. · All settings · Security review pack