turbot/azure

steampipe plugin install azuresteampipe plugin install azure
azure_ad_groupazure_ad_service_principalazure_ad_userazure_api_managementazure_app_service_environmentazure_app_service_function_appazure_app_service_planazure_app_service_web_appazure_application_security_groupazure_compute_availability_setazure_compute_diskazure_compute_disk_encryption_setazure_compute_disk_metric_read_opsazure_compute_disk_metric_read_ops_dailyazure_compute_disk_metric_read_ops_hourlyazure_compute_disk_metric_write_opsazure_compute_disk_metric_write_ops_dailyazure_compute_disk_metric_write_ops_hourlyazure_compute_imageazure_compute_resource_skuazure_compute_snapshotazure_compute_virtual_machineazure_compute_virtual_machine_metric_cpu_utilizationazure_compute_virtual_machine_metric_cpu_utilization_dailyazure_compute_virtual_machine_metric_cpu_utilization_hourlyazure_cosmosdb_accountazure_cosmosdb_mongo_databaseazure_cosmosdb_sql_databaseazure_data_factoryazure_data_factory_datasetazure_data_factory_pipelineazure_diagnostic_settingazure_express_route_circuitazure_firewallazure_key_vaultazure_key_vault_keyazure_key_vault_secretazure_kubernetes_clusterazure_locationazure_log_alertazure_log_profileazure_management_lockazure_mysql_serverazure_network_interfaceazure_network_security_groupazure_network_watcherazure_network_watcher_flow_logazure_policy_assignmentazure_policy_definitionazure_postgresql_serverazure_providerazure_public_ipazure_resource_groupazure_role_assignmentazure_role_definitionazure_route_tableazure_security_center_auto_provisioningazure_security_center_contactazure_security_center_settingazure_security_center_subscription_pricingazure_sql_databaseazure_sql_serverazure_storage_accountazure_storage_blobazure_storage_blob_serviceazure_storage_containerazure_storage_queueazure_storage_tableazure_storage_table_serviceazure_subnetazure_subscriptionazure_tenantazure_virtual_networkazure_virtual_network_gateway

Table: azure_ad_user

Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service, which helps employees sign in and access resources.

Examples

Basic active directory user info

select
display_name,
user_principal_name,
given_name,
mail,
account_enabled,
object_id
from
azure_ad_user;

List of guest users in the active directory

select
display_name,
user_principal_name,
mail,
user_type,
usage_location
from
azure_ad_user
where
user_type = 'Guest';

Password profile info of each user

select
display_name,
user_principal_name,
additional_properties -> 'passwordProfile' -> 'enforceChangePasswordPolicy' as enforce_change_password_policy,
additional_properties -> 'passwordProfile' -> 'forceChangePasswordNextLogin' as change_password_next_login
from
azure_ad_user;

.inspect azure_ad_user

Azure AD User

NameTypeDescription
account_enabledbooleanSpecifies the account status of the active directory user.
additional_propertiesjsonbA list of unmatched properties from the message are deserialized this collection.
akasjsonbArray of globally unique identifier strings (also known as) for the resource.
deletion_timestamptimestamp without time zone The time at which the directory object was deleted.
display_nametextA friendly name that identifies an active directory user.
given_nametextThe given name(first name) of the active directory user.
immutable_idtextUsed to associate an on-premises Active Directory user account with their Azure AD user object.
mailtextThe SMTP address for the user.
mail_nicknametextThe mail alias for the user.
object_idtextThe unique ID that identifies an active directory user.
object_typetextA string that identifies the object type.
sign_in_namesjsonbA list of sign-in names for a local account in an Azure Active Directory B2C tenant.
surnametextFamily name or last name of the active directory user.
titletextTitle of the resource.
usage_locationtextA two letter country code (ISO standard 3166), required for users that will be assigned licenses due to legal requirement to check for availability of services in countries.
user_principal_nametextPrincipal email of the active directory user.
user_typetextA string value that can be used to classify user types in your directory.