Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🧹 Improved the part related to Entra ID permissions #432

Merged
merged 1 commit into from
Oct 30, 2024

Conversation

HRouhani
Copy link
Contributor

Description

This pull request adds the capability to retrieve subscribed SKUs (license information) for Microsoft Entra ID (formerly Azure AD) in cnquery through the microsoft.tenant.subscribedSkus method. This functionality allows users to verify license details directly, which is essential for determining eligibility for features like MFA (Multi-Factor Authentication) based on license tiers (e.g., Premium P1 or P2).

Additionally, we have included two new Microsoft Graph API permissions required for these changes:

  • AuditLog.Read.All (Application) – Allows the application to read all audit log data, enhancing the system's logging and troubleshooting capabilities.
  • Directory.Read.All (Application) – Provides read access to directory data, enabling retrieval of license details and directory metadata.

These permissions ensure the necessary access for retrieving license information securely and accurately.

Related issue

#1144

Types of changes

  • [] New content
  • Revision to existing content
  • Functional documentation bug fix (i.e., broken link or some other busted behavior)
  • New functional doc capabilities (i.e., filter search results)
  • Chore (non-breaking change that does not add functionality or fix an issue)

Checklist

  • I have read the README document about contributing to this repo.
  • I have tested my changes locally, and there are no issues.
  • All commits are signed.

Copy link
Contributor

Starting creation of the PREview environment...

Copy link
Contributor

PREview environment has been created at https://mondoo-pre-docs-804490727.storage.googleapis.com/docs/index.html
Please allow a few minutes for the environment to be fully deployed.

Copy link
Contributor

@misterpantz misterpantz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you, @HRouhani!

Copy link
Contributor

@misterpantz misterpantz merged commit b546371 into main Oct 30, 2024
9 checks passed
@misterpantz misterpantz deleted the hossein/ms365-mfa branch October 30, 2024 16:48
@github-actions github-actions bot locked and limited conversation to collaborators Oct 30, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants