turbot/microsoft365_compliance

Query: azuread_security_default_disabled

Usage

powerpipe query microsoft365_compliance.query.azuread_security_default_disabled

SQL

select
tenant_id || '/' || id as resource,
case
when not is_enabled then 'ok'
else 'alarm'
end as status,
case
when not is_enabled then tenant_id || ' has security defaults disabled.'
else tenant_id || ' has security defaults enabled.'
end as reason
, tenant_id as tenant_id
from
azuread_security_defaults_policy;

Controls

The query is being used by the following controls: