New-MgBetaRiskyServicePrincipal

Module:

Microsoft.Graph.Beta.Identity.SignIns Module

Create new navigation property to riskyServicePrincipals for identityProtection

New-MgBetaRiskyServicePrincipal
 [-ResponseHeadersVariable <string>]
 [-AccountEnabled]
 [-AdditionalProperties <hashtable>]
 [-AppId <string>]
 [-DisplayName <string>]
 [-History <IMicrosoftGraphRiskyServicePrincipalHistoryItem[]>]
 [-Id <string>]
 [-IsEnabled]
 [-IsProcessing]
 [-RiskDetail <string>]
 [-RiskLastUpdatedDateTime <datetime>]
 [-RiskLevel <string>]
 [-RiskState <string>]
 [-ServicePrincipalType <string>]
 [-Break]
 [-Headers <IDictionary>]
 [-HttpPipelineAppend <SendAsyncStep[]>]
 [-HttpPipelinePrepend <SendAsyncStep[]>]
 [-Proxy <uri>]
 [-ProxyCredential <pscredential>]
 [-ProxyUseDefaultCredentials]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

New-MgBetaRiskyServicePrincipal
 -BodyParameter <IMicrosoftGraphRiskyServicePrincipal>
 [-ResponseHeadersVariable <string>]
 [-Break]
 [-Headers <IDictionary>]
 [-HttpPipelineAppend <SendAsyncStep[]>]
 [-HttpPipelinePrepend <SendAsyncStep[]>]
 [-Proxy <uri>]
 [-ProxyCredential <pscredential>]
 [-ProxyUseDefaultCredentials]
 [-WhatIf]
 [-Confirm]
 [<CommonParameters>]

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

{{ Fill in the Description }}

{{ Fill in the Description }}

{{ Fill in the Description }}

COMPLEX PARAMETER PROPERTIES

To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.

BODYPARAMETER <IMicrosoftGraphRiskyServicePrincipal>: riskyServicePrincipal [(Any) <Object>]: This indicates any property can be added to this object. [Id <String>]: The unique identifier for an entity. Read-only. [AccountEnabled <Boolean?>]: true if the service principal account is enabled; otherwise, false. [AppId <String>]: The globally unique identifier for the associated application (its appId property), if any. [DisplayName <String>]: The display name for the service principal. [History <IMicrosoftGraphRiskyServicePrincipalHistoryItem[]>]: Represents the risk history of Microsoft Entra service principals. [AccountEnabled <Boolean?>]: true if the service principal account is enabled; otherwise, false. [AppId <String>]: The globally unique identifier for the associated application (its appId property), if any. [DisplayName <String>]: The display name for the service principal. [History <IMicrosoftGraphRiskyServicePrincipalHistoryItem[]>]: Represents the risk history of Microsoft Entra service principals. [IsEnabled <Boolean?>]: [IsProcessing <Boolean?>]: Indicates whether Microsoft Entra ID Protection is currently processing the service principal's risky state. [RiskDetail <String>]: riskDetail [RiskLastUpdatedDateTime <DateTime?>]: The date and time that the risk state was last updated. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2021 is 2021-01-01T00:00:00Z. Supports $filter (eq). [RiskLevel <String>]: riskLevel [RiskState <String>]: riskState [ServicePrincipalType <String>]: Identifies whether the service principal represents an Application, a ManagedIdentity, or a legacy application (socialIdp). This is set by Microsoft Entra ID internally and is inherited from servicePrincipal. [Id <String>]: The unique identifier for an entity. Read-only. [Activity <IMicrosoftGraphRiskServicePrincipalActivity>]: riskServicePrincipalActivity [(Any) <Object>]: This indicates any property can be added to this object. [Detail <String>]: riskDetail [RiskEventTypes <String[]>]: The type of risk event detected. The possible values are: investigationsThreatIntelligence, generic, adminConfirmedServicePrincipalCompromised, suspiciousSignins, leakedCredentials, anomalousServicePrincipalActivity, maliciousApplication, suspiciousApplication. [InitiatedBy <String>]: The identifier of the actor of the operation. [ServicePrincipalId <String>]: The identifier of the service principal. [IsEnabled <Boolean?>]: [IsProcessing <Boolean?>]: Indicates whether Microsoft Entra ID Protection is currently processing the service principal's risky state. [RiskDetail <String>]: riskDetail [RiskLastUpdatedDateTime <DateTime?>]: The date and time that the risk state was last updated. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2021 is 2021-01-01T00:00:00Z. Supports $filter (eq). [RiskLevel <String>]: riskLevel [RiskState <String>]: riskState [ServicePrincipalType <String>]: Identifies whether the service principal represents an Application, a ManagedIdentity, or a legacy application (socialIdp). This is set by Microsoft Entra ID internally and is inherited from servicePrincipal.

HISTORY <IMicrosoftGraphRiskyServicePrincipalHistoryItem[]>: Represents the risk history of Microsoft Entra service principals. [AccountEnabled <Boolean?>]: true if the service principal account is enabled; otherwise, false. [AppId <String>]: The globally unique identifier for the associated application (its appId property), if any. [DisplayName <String>]: The display name for the service principal. [History <IMicrosoftGraphRiskyServicePrincipalHistoryItem[]>]: Represents the risk history of Microsoft Entra service principals. [IsEnabled <Boolean?>]: [IsProcessing <Boolean?>]: Indicates whether Microsoft Entra ID Protection is currently processing the service principal's risky state. [RiskDetail <String>]: riskDetail [RiskLastUpdatedDateTime <DateTime?>]: The date and time that the risk state was last updated. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2021 is 2021-01-01T00:00:00Z. Supports $filter (eq). [RiskLevel <String>]: riskLevel [RiskState <String>]: riskState [ServicePrincipalType <String>]: Identifies whether the service principal represents an Application, a ManagedIdentity, or a legacy application (socialIdp). This is set by Microsoft Entra ID internally and is inherited from servicePrincipal. [Id <String>]: The unique identifier for an entity. Read-only. [Activity <IMicrosoftGraphRiskServicePrincipalActivity>]: riskServicePrincipalActivity [(Any) <Object>]: This indicates any property can be added to this object. [Detail <String>]: riskDetail [RiskEventTypes <String[]>]: The type of risk event detected. The possible values are: investigationsThreatIntelligence, generic, adminConfirmedServicePrincipalCompromised, suspiciousSignins, leakedCredentials, anomalousServicePrincipalActivity, maliciousApplication, suspiciousApplication. [InitiatedBy <String>]: The identifier of the actor of the operation. [ServicePrincipalId <String>]: The identifier of the service principal.