Query: azuread_user_sspr_enabled

select
  tenant_id || '/' || id as resource,
  case
    when allowed_to_use_sspr then 'ok'
    else 'alarm'
  end as status,
  case
    when allowed_to_use_sspr then tenant_id || ' has self-service password reset enabled.'
    else tenant_id || ' has self-service password reset disabled.'
  end as reason,
  tenant_id as tenant_id
from
  azuread_authorization_policy;