question

DavidMarques-7154 avatar image
0 Votes"
DavidMarques-7154 asked LimitlessTechnology-2700 answered

Workflow for high risk users on Azure AD

Hi,

I work in a small security team, and we don't have 24/7 till now, so I would like to find a way to lock users which are High Risk users.

By now we get an email alert of those.

What I would like to know is if I can create any kind of workflow that whenever a user has a High Risk, sends the email and locks the user on Active Directory, until a team member will be able to check it manually.

Is there any way to achieve it considering we don't have yet Sentinel (neither we can right now).

Thanks

windows-10-security
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hello @DavidMarques-7154

You may achieve this by Singing Risk or conditional access policies.

Please have a look on below article mentioning the same.

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-configure-risk-policies

https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-risk-based-sspr-mfa

If the reply was helpful, please don’t forget to upvote or accept as answer.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.