turbot/microsoft365_compliance

Query: azuread_admin_consent_workflow_enabled

Usage

powerpipe query microsoft365_compliance.query.azuread_admin_consent_workflow_enabled

SQL

select
tenant_id || '/adminConsentRequestPolicy' as resource,
case
when is_enabled then 'ok'
else 'alarm'
end as status,
case
when is_enabled then tenant_id || ' has Admin Consent Workflow enabled.'
else tenant_id || ' has Admin Consent Workflow disabled.'
end as reason,
tenant_id as tenant_id
from
azuread_admin_consent_request_policy;

Controls

The query is being used by the following controls: