azuread_account_provisioning_activity_report_reviewedazuread_admin_consent_workflow_enabledazuread_admin_user_mfa_enabledazuread_administrative_account_on_premises_sync_disabledazuread_all_user_mfa_enabledazuread_audit_log_search_enabledazuread_authentication_method_microsoft_authenticator_mfa_fatigue_protectionazuread_authentication_method_restrict_insecure_methodsazuread_authorization_policy_accessing_company_data_not_allowedazuread_conditional_access_block_device_code_flowazuread_conditional_access_block_signin_risk_medium_highazuread_conditional_access_require_managed_device_for_authenticationazuread_conditional_access_require_managed_device_register_security_infoazuread_conditional_access_signin_frequency_intune_every_timeazuread_dynamic_group_for_guest_userazuread_global_admin_range_restrictedazuread_group_not_publicazuread_guest_user_access_reviews_configuredazuread_guest_user_infoazuread_legacy_authentication_disabledazuread_microsoft_azure_management_limited_to_administrative_rolesazuread_password_protection_enabledazuread_privileged_roles_access_reviews_configuredazuread_risky_sign_ins_reportazuread_security_default_disabledazuread_signin_frequency_policyazuread_signin_risk_policyazuread_third_party_application_not_allowedazuread_user_password_not_set_to_expireazuread_user_risk_policyazuread_user_sspr_enabledmicrosoft365_calendar_sharing_disabledmicrosoft365_sharepoint_external_content_sharing_restrictedmicrosoft365_sharepoint_external_sharing_managed_by_domain_whitelist_or_blacklistmicrosoft365_sharepoint_resharing_by_external_users_disabledmicrosoft_user_mfa_capable
Query: microsoft_user_mfa_capable
Usage
powerpipe query microsoft365_compliance.query.microsoft_user_mfa_capableSteampipe Tables
SQL
select id as resource, case when is_mfa_capable then 'ok' else 'alarm' end as status, case when is_mfa_capable then title || ' is MFA capable.' else title || ' is not MFA capable.' end as reason , tenant_id as tenant_idfrom microsoft365_user;
Controls
The query is being used by the following controls: