capability

Identity Response Actions

Defender for Identity and Microsoft Graph Security support identity investigation and response workflows such as viewing identity accounts and taking actions on compromised users.

capabilitiesCurrent

Relationships

Microsoft Defender for Identity
Source productproductMicrosoft Graph Security API
API accessapi

Configuration Methods

MethodSupportReference or Gap
PortalSupported Reference
PowerShellGapNo product-specific PowerShell automation surface is recorded for this capability yet.
REST APIGapNo supported REST configuration surface is recorded for this capability yet.
GraphSupported Reference
ARMGapNo ARM resource is recorded for this capability.
BicepGapNo Bicep resource is recorded for this capability.
TerraformGapIdentity response actions are operational Graph/portal actions, not Terraform desired state.
GitHub ActionsSupported Reference
Azure DevOpsSupported Reference