Query: azuread_laps_enabled

select
  tenant_id || '/' || id as resource,
  case
    when (local_admin_password ->> 'isEnabled')::bool = true then 'ok'
    else 'alarm'
  end as status,
  case
    when (local_admin_password ->> 'isEnabled')::bool = true then tenant_id || ' has Local Administrator Password Solution (LAPS) enabled.'
    else tenant_id || ' has Local Administrator Password Solution (LAPS) disabled.'
  end as reason
  , tenant_id as tenant_id
from
  azuread_device_registration_policy;