Entra Policy Suite settings · Settings > Identity report
Who gets the workbook
| Key | IdentityReport.MailRecipients |
|---|---|
| Where | Settings > Identity report |
| Type | List |
| Default | (empty) |
| Feature | The identity report as gap views · Community |
What it does
The addresses the identity report workbook goes to (v1: $global:Mail_Identity_Maintenance_TO), e.g. the identity team rather than the security alert list.
When set
With 'Mail the workbook after each run' on, the workbook goes to these addresses.
When blank or default
Empty (the default): the workbook goes to the alert recipients.
Risk and how to reverse it
The workbook holds every user's details: whoever is on the list gets them. Reversible.
Requires
Admin.
Recommended
The team that maintains the identities.
Related settings
- Identity report IdentityReport.Enabled
- Snapshots to keep IdentityReport.KeepRuns
- Mail the workbook after each run IdentityReport.MailWorkbook
- Device counts: devices synced in the last N days IdentityReport.DeviceCountWindowDays
- Inactive after N days IdentityReport.InactiveDays
- Long inactive after N days IdentityReport.LongInactiveDays
- Guests inactive after N days IdentityReport.GuestInactiveDays
- New hires: grace period (days) IdentityReport.NewHireGraceDays
- Hire date attribute IdentityReport.HireDateAttribute
- AD validation: user OU pattern IdentityReport.AdOu.User
- AD validation: service account OU pattern IdentityReport.AdOu.ServiceAccount
- AD validation: shared user OU pattern IdentityReport.AdOu.SharedUser
- AD validation: shared mailbox OU pattern IdentityReport.AdOu.SharedMailbox
- Leave these users out of the report IdentityReport.ExcludeObjects
Documented for Entra Policy Suite 2.0.107. Written by the Entra Policy Suite team; Invardia publishes it. · All settings · Security review pack