Azure AD

زندہشناخت اور رسائی

Azure AD کنیکٹر — صرف پڑھنے، agentless

Audits your Azure AD (Microsoft Entra ID) directory — MFA coverage and Conditional Access, legacy-auth blocking, privileged-role sprawl (Global Admins, admins without MFA, PIM), over-privileged app identities, guests and external collaboration, Identity Protection risk (at-risk / compromised users), group hygiene, and audit-log retention. Identity-infrastructure posture, read-only — distinct from the Microsoft 365 file/content scan.

Azure AD جوڑیں ← تمام کنیکٹرز میں واپس جائیں

ہم کیا اسکین کرتے ہیں

User, group, and role directory metadata — MFA-registration state, guest vs member, sign-in recency, and privileged-role assignments (never credentials)
Conditional Access, external-collaboration and authorization policies, Identity Protection risk state, app (service-principal) role holdings, and audit-log configuration

صرف پڑھنے کی نگرانی — آپ کے Azure AD ڈیٹا میں کچھ نہیں بدلتا جب تک کہ آپ خودکار بحالی کو چالو نہ کریں اور الگ سے لکھنے کی رسائی دیں۔

جڑنے سے پہلے

• A Microsoft 365 Global Administrator (or Privileged Role Administrator) who can grant admin consent for the read-only identity scopes
• An Entra app registration consent (the connector reads via Microsoft Graph); Entra ID P1/P2 unlocks the sign-in-log, PIM, and Identity Protection checks

عام پہلا اسکین: 2–5 minutes depending on directory size

درخواست کی گئی اجازتیں

User.Read.AllRead the user directory (display name, sign-in state, guest vs member, MFA registration) to audit account and MFA hygiene — never mailbox, file, or credential contents.
Group.Read.AllRead groups, their membership type, visibility, and owners to find ownerless, public, and guest-bearing groups.
Policy.Read.AllRead Conditional Access, authorization (guest-invite), and authentication policies to audit MFA enforcement and legacy-auth blocking.
IdentityRiskyUser.Read.AllRead Identity Protection risk state (at-risk / confirmed-compromised users) to surface accounts that need attention. Requires Entra ID P2.
AuditLog.Read.AllRead sign-in and audit activity metadata that backs the MFA-coverage and sign-in-log posture checks (no message or file contents).
Directory.Read.AllRead privileged directory-role assignments (Global Administrator and other admin roles) to flag over-broad standing privilege and admins without MFA.
PrivilegedAccess.Read.AzureADRead Privileged Identity Management (PIM) eligible-role schedules to check whether just-in-time activation is in use. Requires Entra ID P2.

سیکیورٹی نتائج

22 شناخت کے اصول ہر Azure AD اسکین پر چلتے ہیں۔ ہر نتیجہ سادہ لسانیات کی وضاحت، اس کے پیچھے شہادت اور بحالی کے اقدامات کے ساتھ آتا ہے۔

CRITICALOver permission
Excessive number of Global Administrators
CRITICALOver permission
Privileged admin account without MFA
CRITICALMisconfig
User with a confirmed account compromise
HIGHMisconfig
Users without multi-factor authentication registered
HIGHMisconfig
User has MFA explicitly disabled
HIGHMisconfig
Legacy (basic) authentication is still allowed
HIGHMisconfig
No Conditional Access policy requires MFA for all users
HIGHOver permission
Excessive number of Privileged Role Administrators
HIGHAI agent
Service principal holds an owner-equivalent directory role
HIGHExternal access
Guest (external) user holds a privileged role
HIGHMisconfig
User flagged at-risk by Identity Protection
MEDIUMMisconfig
No enforced Conditional Access policy exists
MEDIUMMisconfig
Privileged Identity Management is not enabled
MEDIUMExternal access
Guests are allowed to invite other guests
MEDIUMExternal access
Dynamic group silently includes guest members
MEDIUMMisconfig
Microsoft 365 group has public visibility
MEDIUMMisconfig
Audit-log retention is shorter than 30 days
MEDIUMMisconfig
Vendor AI-training data-contribution posture
LOWStale access
Guest account inactive for over 90 days
LOWMisconfig
Group has no owners
LOWMisconfig
No diagnostic settings export the logs
LOWMisconfig
Sign-in logs are unavailable

کیسے Azure AD سے جڑیں

قدم 1
8200.dev میں سائن اپ یا لاگ ان کریں
قدم 2
کنیکٹرز پر جائیں → Azure AD
قدم 3
جوڑیں پر کلک کریں اور Azure AD کی رضامندی اسکرین کے ذریعے اجازت دیں
قدم 4
8200.dev خودکار طور پر اسکین کرتا ہے — نتائج منٹوں میں نمائش میں ہوتے ہیں

اپنے پہلے ذریعے میں منٹ میں جوڑیں — مفت، صرف پڑھنے، کوئی فروخت کال نہیں۔

Azure AD جوڑیں تمام 23 کنیکٹرز دیکھیں →