SecurityInsight settings · Settings > Collection scope & limits

Azure resource types to collect

Key	SI_AzureResourceTypes
Where	Settings > Collection scope & limits
Type	List
Default	Every resource type the sign-in identity can read.
Edition	Community

What it does

Restricts the Azure Resource Graph source to a hand-picked list of resource types.

When set

Only the listed types are read from Resource Graph, which lowers run time and data volume. Other types then come only from the exposure graph, so brand-new resources of those types may be missed.

When blank or default

Left blank, the default applies: Every resource type the sign-in identity can read.

Risk and how to reverse it

Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.

Requires

Nothing else.