Azure Active Directory

Connecting your Azure Active Directory (Azure AD) account to Resmo can be beneficial in various ways. Azure AD is Microsoft's cloud-based identity and access management service that helps organizations manage users, groups, and access to applications and resources. Resmo can collect and analyze configuration data from Azure AD, which can be useful for identifying security risks, detecting best practices, and optimizing configurations.

Using Resmo's SQL query capabilities, users can ask complex questions about their Azure AD configuration data. For example:

• Which users have access to a specific application?

• How many users are assigned to a particular group?

• What is the average number of assigned licenses per user?

• Which service principals have the highest number of app role assignments?

• How many conditional access policies are applied to specific resources?

Setting up change alerts can also be helpful for monitoring critical changes in your Azure AD configuration. For example:

• Get notified when a new user is added to your Azure AD tenant.

• Receive an alert when a user's assigned licenses change.

• Get notified when a new group is created in your Azure AD tenant.

• Receive an alert when a service principal's configuration is updated.

• Get notified when a conditional access policy is modified or added.

In conclusion, connecting your Azure AD account to Resmo can provide valuable insights into your organization's identity and access management. By leveraging Resmo's SQL query capabilities and change alerting, you can stay on top of important changes and optimize your Azure AD configuration for maximum efficiency.

Resources	Key	Supports Events
Activity Based Timeout Policy	azure_ad_activity_based_timeout_policy
Admin Consent Request Policy	azure_ad_admin_consent_request_policy
App Management Policy	azure_ad_app_management_policy
Application	azure_ad_application
Authentication Flows Policy	azure_ad_authentication_flows_policy
Authentication Strength Policy	azure_ad_authentication_strength_policy
Authentications Method Policy	azure_ad_authentications_method_policy
Authorization Policy	azure_ad_authorization_policy
Claims Mapping Policy	azure_ad_claims_mapping_policy
Conditional Access Policy	azure_ad_conditional_access_policy
Contact	azure_ad_contact
Cross Tenant Policy	azure_ad_cross_tenant_policy
Device	azure_ad_device
Domain	azure_ad_domain
Feature Rollout Policy	azure_ad_feature_rollout_policy
Home Realm Discovery Policy	azure_ad_home_realm_discovery_policy
Identity Security Defaults Enforcement Policy	azure_ad_identity_security_defaults_enforcement_policy
OAuth2 Permission Grant	azure_ad_oauth2_permission_grant
Organization	azure_ad_organization
Role	azure_ad_role
Role Management Policy	azure_ad_role_management_policy
Role Management Policy Assignment	azure_ad_role_management_policy_assignment
Service Principal	azure_ad_service_principal
Subscribed SKU	azure_ad_subscribed_sku
Tenant App Management Policy	azure_ad_tenant_app_management_policy
Token Issuance Policy	azure_ad_token_issuance_policy
Token Lifetime Policy	azure_ad_token_lifetime_policy
User	azure_ad_user	✓
User Group	azure_ad_user_group	✓