SecurityInsight settings · Settings > Collection scope & limits
Include inactive identities
| Key | SI_IncludeInactive_Identity |
|---|---|
| Where | Settings > Collection scope & limits > Which assets are included |
| Type | On / off |
| Default | Off: only Microsoft apps this tenant granted nothing are left out |
| Edition | Community |
What it does
Turns off the one identity filter left: Microsoft-published applications this tenant granted nothing. Every user (disabled accounts and guests too) and every service principal and managed identity the tenant owns is always published.
When enabled
On publishes the Microsoft-published applications too (hundreds in most tenants): more rows, more ingested data, and more noise in reports.
When disabled
only Microsoft apps this tenant granted nothing are left out
Risk and how to reverse it
Changes what is collected from the next run: narrowing it means some assets or data are not collected, so they look absent in profiles, CIs and reports (absence is never read as fixed). Reversible: change it back; the next run collects again.
Requires
Nothing else.
Recommended
Keep the default. Change it when: When you need a complete identity inventory, for example for an audit.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack