Skip to content

Users not scanned from Entra ID

Identify users from Entra ID that have not yet been scanned by the OctoSAM Inventory scanner. This may help to identify missing configuration to invoke the scanner on all systems.

Fields

Name Type Visible Description
ID numeric false Internal ID for the EntraIdMissingUser entity (Primary Key)
Cloud Provider Account ID numeric false Internal ID that references the CloudProviderAccount entity (Foreign Key)
Cloud Provider Account string true
Entra Id Tenant Id guid false
About Me string false A free-form text entry field for the user to describe themselves
Account Enabled bool true True if the account is enabled
Birthday date false Birthday
Business Phones string false The telephone numbers of the user
City string false The city where the user is located
Company Name string false The name of the company the user is associated with
Country string false The country or region where the user is located
Created Date Time date false Date/Time the user was created in Entra ID
Creation Type string false Indicates the method through which the user account was created
Deleted Date Time date false Date/Time the user was deleted in Entra ID
Department string false The name of the department in which the user works
Display Name string true The name displayed in the address book for the user
Employee Hire Date date false Date/Time when the user was hired or will start work in a future hire
Employee Leave Date Time date false Date/Time when the user left or will leave the organization
Employee ID string false The employee identifier assigned to the user by the organization
Employee Type string false Captures enterprise worker type
External User State string false For an external user invited to the tenant using the invitation API, this property represents the invited user's invitation status
External User State Change Date Time date false Date/Time for the latest change to the ExternalUserState property
Fax Number string false The fax number of the user
Given Name string false The given name (first name) of the user
Hire Date date false The hire date of the user
Entra Id Id string false The Entra ID unique identifier for the user
Job Title string false The user's job title
Last Password Change Date Time date false Date/Time this Microsoft Entra user last changed their password or when their password was created
Mail string false The SMTP mail address for the user
Mail Nickname string false Mail alias for the user
Mobile Phone string false The primary cellular telephone number for the user
My Site string false The URL for the user's site
Office Location string false The office location in the user's place of business
On Premises Distinguished Name string true Contains the on-premises Active Directory distinguished name or DN. The property is only populated for customers who are synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.
On Premises Domain Name string false Contains the on-premises domainFQDN, also called dnsDomainName synchronized from the on-premises directory
On Premises Extension Attribute1 string false For synchronized users this is Extension Attribute 1 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute2 string false For synchronized users this is Extension Attribute 2 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute3 string false For synchronized users this is Extension Attribute 3 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute4 string false For synchronized users this is ExtensionAttribute 4 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute5 string false For synchronized users this is ExtensionAttribute 5 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute6 string false For synchronized users this is ExtensionAttribute 6 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute7 string false For synchronized users this is ExtensionAttribute 7 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute8 string false For synchronized users this is ExtensionAttribute 8 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute9 string false For synchronized users this is ExtensionAttribute 9 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute10 string false For synchronized users this is ExtensionAttribute 10 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute11 string false For synchronized users this is ExtensionAttribute 11 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute12 string false For synchronized users this is ExtensionAttribute 12 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute13 string false For synchronized users this is ExtensionAttribute 13 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute14 string false For synchronized users this is ExtensionAttribute 14 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Extension Attribute15 string false For synchronized users this is ExtensionAttribute 15 from the on-premises Active Directory, for non-synchronized users this can be set from Entra ID admin tools.
On Premises Immutable Id string false This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user object. This property must be specified when creating a new user account in the Graph if you're using a federated domain for the user's userPrincipalName (UPN) property.
On Premises Sync Enabled bool true True if this user object is currently being synced from an on-premises Active Directory (AD); otherwise the user isn't being synced and can be managed in Microsoft Entra ID.
On Premises Last Sync Date Time date false Indicates the last time at which the object was synced with the on-premises directory
On Premises Sam Account Name string false Contains the on-premises samAccountName synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.
On Premises Security Identifier string false Contains the on-premises security identifier (SID) for the user that was synchronized from on-premises to the cloud
On Premises User Principal Name string false Contains the on-premises userPrincipalName synchronized from the on-premises directory. The property is only populated for customers who are synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.
Password Policies string false Specifies password policies for the user. This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: DisablePasswordExpiration, DisableStrongPassword.
Postal Code string false The postal code for the user's postal address. The postal code is specific to the user's country/region.
Preferred Data Location string false The preferred data location for the user.
Refresh Tokens Valid From Date Time date false Any refresh tokens or sessions tokens (session cookies) issued before this time are invalid, and applications get an error when using an invalid refresh or sessions token to acquire a delegated access token (to access APIs such as Microsoft Graph). If this happens, the application needs to acquire a new refresh token by requesting the authorized endpoint.
Security Identifier string false Security identifier (SID) of the user, used in Windows scenarios.
Last Sign In Date Time date false Date/Time this user last signed in to Entra ID. Not available for some Entra ID license types.
Last Sign In Request Id string false Request Id of the user's last sign in to Entra ID
Last Non Interactive Sign In Date Time date false Date/Time of last non-interactive sign in to Entra ID. Not available for some Entra ID license types.
Last Non Interactive Sign In Request Id string false Request Id of the user's last non-interactive sign in to Entra ID
Sign In Sessions Valid From Date Time date false Any refresh tokens or sessions tokens (session cookies) issued before this time are invalid, and applications get an error when using an invalid refresh or sessions token to acquire a delegated access token (to access APIs such as Microsoft Graph). If this happens, the application needs to acquire a new refresh token by requesting the authorized endpoint.
State string false The state or province in the user's address
Street Address string false The street address of the user's place of business
Surname string false The user's surname (family name or last name)
Usage Location string false A two-letter country code (ISO standard 3166). Required for users that are assigned licenses due to legal requirements to check for availability of services in countries. Examples include: US, JP, and GB.
User Principal Name string false The user principal name (UPN) of the user. The UPN is an Internet-style sign-in name for the user based on the Internet standard RFC 822. By convention, this should map to the user's email name. The general format is alias@domain, where the domain must be present in the tenant's collection of verified domains. This property is required when a user is created. The verified domains for the tenant can be accessed from the verifiedDomains property of organization.
User Type string false A string value that can be used to classify user types in your directory, such as Member and Guest.
No Scan bool true If true, this user should be excluded from scanning.
Checked date true Date/Time this entity was last checked against Entra ID
Current Date Time date false Date and time the query was run. For reference if you use and save query results.

Main entities referenced from this query

Query information

Property Value Description
Query Guid e8284436-7031-4ef8-aefd-f519475b8d42 The internal id of the query. Must be unique
SupportsDesktop true If true, the query can be started from the OctoSAM Windows GUI
SupportsWeb true If true, the query can be started from the OctoSAM Web UI