microsoft.graph.riskyUser

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "#/components/schemas/microsoft.graph.riskyUser",
  "title": "microsoft.graph.riskyUser",
  "allOf": [
    {
      "$ref": "#/components/schemas/microsoft.graph.entity"
    },
    {
      "title": "riskyUser",
      "required": [
        "@odata.type"
      ],
      "type": "object",
      "properties": {
        "isDeleted": {
          "type": "boolean",
          "description": "Indicates whether the user is deleted. The possible values are: true, false.",
          "nullable": true
        },
        "isProcessing": {
          "type": "boolean",
          "description": "Indicates whether the backend is processing a user's risky state.",
          "nullable": true
        },
        "riskDetail": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.riskDetail"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "Details of the detected risk."
        },
        "riskLastUpdatedDateTime": {
          "pattern": "^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$",
          "type": "string",
          "description": "The date and time that the risky user was last updated. The DateTimeOffset type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.",
          "format": "date-time",
          "nullable": true
        },
        "riskLevel": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.riskLevel"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "Level of the detected risky user. The possible values are: low, medium, high, hidden, none, unknownFutureValue."
        },
        "riskState": {
          "anyOf": [
            {
              "$ref": "#/components/schemas/microsoft.graph.riskState"
            },
            {
              "type": "object",
              "nullable": true
            }
          ],
          "description": "State of the user's risk. The possible values are: none, confirmedSafe, remediated, dismissed, atRisk, confirmedCompromised, unknownFutureValue."
        },
        "userDisplayName": {
          "type": "string",
          "description": "Risky user display name.",
          "nullable": true
        },
        "userPrincipalName": {
          "type": "string",
          "description": "Risky user principal name.",
          "nullable": true
        },
        "history": {
          "type": "array",
          "items": {
            "$ref": "#/components/schemas/microsoft.graph.riskyUserHistoryItem"
          },
          "description": "The activity related to user risk level change",
          "x-ms-navigationProperty": true
        },
        "@odata.type": {
          "type": "string"
        }
      },
      "discriminator": {
        "propertyName": "@odata.type",
        "mapping": {
          "#microsoft.graph.riskyUserHistoryItem": "#/components/schemas/microsoft.graph.riskyUserHistoryItem"
        }
      }
    }
  ]
}