Microsoft Entra ID Assets Solution: New Data Risk Graph Foundation for Purview Integration

Data Source

Microsoft Entra ID Assets connector ingests asset information from Entra ID to supplement activity data with richer context. This data enhances existing activity logs by providing detailed asset metadata for comprehensive risk analysis.

Ingestion Mechanism

Native Microsoft-managed connector utilising Entra ID APIs to populate asset information tables, providing real-time asset context for security analytics.

Detection Surface Unlocked

Data Risk Graph Foundation: Asset data enables construction of data risk graphs in Microsoft Purview, providing visual representation of data access patterns and potential exposure risks across the organisation.

Enhanced Activity Context: Supplements existing Entra ID activity logs with detailed asset information, improving accuracy of user behaviour analytics and risk scoring algorithms.

Cross-Product Integration: Enables seamless integration between Sentinel security operations and Purview data governance workflows for unified risk management.

Affected Files

Solutions/Microsoft Entra ID Assets/Data Connectors/EntraIDAssets_DataConnectorDefinition.json Logos/AADCloudSync.svg (packaging artefacts: mainTemplate.json, createUiDefinition.json, SolutionMetadata.json, etc.)