Entra Policy Suite settings · Settings > Identity report
New hires: grace period (days)
| Key | IdentityReport.NewHireGraceDays |
|---|---|
| Where | Settings > Identity report |
| Type | Number |
| Default | 7 |
| Feature | The identity report as gap views · Community |
What it does
The view "Active without MFA" leaves out users whose hire date (the hire date attribute) is more than this many days in the future - they have not started yet. A user without a valid hire date is always shown.
When set
Used from the next report run.
When blank or default
7 days (v1's value).
Risk and how to reverse it
Report only. Reversible.
Requires
Admin.
Recommended
7.
Related settings
- Identity report IdentityReport.Enabled
- Snapshots to keep IdentityReport.KeepRuns
- Mail the workbook after each run IdentityReport.MailWorkbook
- Who gets the workbook IdentityReport.MailRecipients
- Device counts: devices synced in the last N days IdentityReport.DeviceCountWindowDays
- Inactive after N days IdentityReport.InactiveDays
- Long inactive after N days IdentityReport.LongInactiveDays
- Guests inactive after N days IdentityReport.GuestInactiveDays
- Hire date attribute IdentityReport.HireDateAttribute
- AD validation: user OU pattern IdentityReport.AdOu.User
- AD validation: service account OU pattern IdentityReport.AdOu.ServiceAccount
- AD validation: shared user OU pattern IdentityReport.AdOu.SharedUser
- AD validation: shared mailbox OU pattern IdentityReport.AdOu.SharedMailbox
- Leave these users out of the report IdentityReport.ExcludeObjects
Documented for Entra Policy Suite 2.0.107. Written by the Entra Policy Suite team; Invardia publishes it. · All settings · Security review pack