turbot/microsoft365_compliance

Query: azuread_user_sspr_enabled

Usage

powerpipe query microsoft365_compliance.query.azuread_user_sspr_enabled

SQL

select
tenant_id || '/' || id as resource,
case
when allowed_to_use_sspr then 'ok'
else 'alarm'
end as status,
case
when allowed_to_use_sspr then tenant_id || ' has self-service password reset enabled.'
else tenant_id || ' has self-service password reset disabled.'
end as reason
, tenant_id as tenant_id
from
azuread_authorization_policy;

Controls

The query is being used by the following controls: