Entra Policy Suite settings · Settings > Identity report
Snapshots to keep
| Key | IdentityReport.KeepRuns |
|---|---|
| Where | Settings > Identity report |
| Type | Number |
| Default | 7 |
| Feature | The identity report as gap views · Community |
What it does
How many report snapshots the database keeps (the newest ones). The Identity page can show any kept snapshot and how the gap counts changed.
When set
Used from the next report run.
When blank or default
7 snapshots.
Risk and how to reverse it
More snapshots use more database space (every user and device per snapshot). Reversible: older ones go at the next run.
Requires
Admin.
Recommended
7 (a week of daily runs).
Related settings
- Identity report IdentityReport.Enabled
- Mail the workbook after each run IdentityReport.MailWorkbook
- Who gets the workbook IdentityReport.MailRecipients
- Device counts: devices synced in the last N days IdentityReport.DeviceCountWindowDays
- Inactive after N days IdentityReport.InactiveDays
- Long inactive after N days IdentityReport.LongInactiveDays
- Guests inactive after N days IdentityReport.GuestInactiveDays
- New hires: grace period (days) IdentityReport.NewHireGraceDays
- Hire date attribute IdentityReport.HireDateAttribute
- AD validation: user OU pattern IdentityReport.AdOu.User
- AD validation: service account OU pattern IdentityReport.AdOu.ServiceAccount
- AD validation: shared user OU pattern IdentityReport.AdOu.SharedUser
- AD validation: shared mailbox OU pattern IdentityReport.AdOu.SharedMailbox
- Leave these users out of the report IdentityReport.ExcludeObjects
Documented for Entra Policy Suite 2.0.107. Written by the Entra Policy Suite team; Invardia publishes it. · All settings · Security review pack