| _BilledSize |
|
Double |
| _IsBillable |
|
String |
| AddedOnTime |
Date and time when the application was registered |
DateTime |
| AppName |
The application’s display name as exposed by the associated service principal |
String |
| AppOrigin |
Specifies whether was the app is internal to the organization or registered in an external tenant |
String |
| AppOwnerTenantId |
Specifies the ID of the tenant where the app was registered |
String |
| AppStatus |
Status of the app; can be: Enabled, DisabledByMicrosoft, DisabledByAppGovernancePolicy, DisabledByUser, Deleted (information for apps with Deleted status is only available for 30 days since the app was deleted) |
String |
| ConsentedUsersCount |
Count of users who have consented to the app; this information is only available when the app is not admin consented |
Int32 |
| IsAdminConsented |
Value is True if a user has provided admin consent to the app on behalf of all the users in the org, otherwise the value is False |
Boolean |
| LastModifiedTime |
Date and time the item or related metadata was last modified |
DateTime |
| LastUsedTime |
Date and time when the app was last used |
DateTime |
| OAuthAppId |
A unique identifier that’s assigned to an application when it’s registered to Entra with OAuth 2.0. |
String |
| Permissions |
Contains an array of permission objects; each permission object includes PermissionName, TargetAppId, TargetAppDisplayName, PermissionType, PrivilegeLevel, UsageStatus |
Object |
| PrivilegeLevel |
The privilege level of the app based on the highest classified permission granted to the app |
String |
| ReportId |
Unique identifier for the event |
String |
| ServicePrincipalId |
Unique identifier of the service principal that performed the action |
String |
| SourceSystem |
|
String |
| TenantId |
Unique identifier of the tenant into which the data connector ingests data. |
String |
| TimeGenerated |
Date and time (UTC) when the record was generated |
DateTime |
| Timestamp |
Date and time when the record was generated |
DateTime |
| Type |
The certificate’s type. It is one of the following: Machine, Server, Intermediate, Root, TrustedPublisher or Other |
String |
| VerifiedPublisher |
Specifies details about the verified publisher of the application which this service principal represents. It includes information such as: DisplayName, VerifiedPublisherId, AddedDateTime |
Object |