Microsoft Entra access hygiene digest
Use “Microsoft Entra access hygiene digest” in Recued. It provides a scheduled, read-only Microsoft Entra ID access governance digest.
How it works
Inspect the data fetches, transforms, gates, and output this recipe runs.
Process (28 steps)
users_raw
recued-core.microsoft-entra.user.search
Search user on microsoft entra
groups_raw
recued-core.microsoft-entra.group.search
Search group on microsoft entra
applications_raw
recued-core.microsoft-entra.application.search
Search application on microsoft entra
service_principals_raw
recued-core.microsoft-entra.service_principal.search
Search service principal on microsoft entra
audits_raw
recued-core.microsoft-entra.directory_audit.search
Search directory audit on microsoft entra
sign_ins_raw
recued-core.microsoft-entra.sign_in.search
Search sign in on microsoft entra
defaults
defaults
Apply defaults
user_count
count
Count items in users
group_count
count
Count items in groups
application_count
count
Count items in applications
service_principal_count
count
Count items in service principals
audit_count
count
Count items in audits
sign_in_count
count
Count items in sign ins
has_audits
compare
Check if audit count is greater than 0
has_sign_ins
compare
Check if sign in count is greater than 0
has_events
any
Check if any of the conditions are true
notify_enabled
compare
Check if setting notify when events equals true
should_notify
all
Check if all conditions are true
notify
core.notification.send
Send notification
skip: step.should_notify not_equal true
user_rows
slice
Take a subset of
group_rows
slice
Take a subset of
audit_rows
slice
Take a subset of
sign_in_rows
slice
Take a subset of
user_table
to_table
Format results as a data table
group_table
to_table
Format results as a data table
audit_table
to_table
Format results as a data table
sign_in_table
to_table
Format results as a data table
card
to_summary
Format results as a summary card
▼
Output
summary
card
table
user_table
table
group_table
table
audit_table
table
sign_in_table
Settings
Configurable at install. Defaults shown — change them anytime in Recued.
channels
setting
=
[object Object]
end hour
setting
=
10
weekdays
setting
=
1,2,3,4,5
row limit
setting
=
20
start hour
setting
=
8
user filter
setting
=
accountEnabled eq false
audit filter
setting
=
category eq 'UserManagement' or category eq 'GroupManagement'
group filter
setting
=
securityEnabled eq true
sign in filter
setting
=
status/errorCode ne 0
application filter
setting
=
notify when events
setting
=
true
service principal filter
setting
=
accountEnabled eq true
Uses (8 operations)
Triggers
Time watch
core.watch.time
Pack operation
Search user on microsoft entra
recued-core.microsoft-entra.user.search
Pack operation
Search group on microsoft entra
recued-core.microsoft-entra.group.search
Pack operation
Search application on microsoft entra
recued-core.microsoft-entra.application.search
Pack operation
Search service principal on microsoft entra
recued-core.microsoft-entra.service_principal.search
Pack operation
Search directory audit on microsoft entra
recued-core.microsoft-entra.directory_audit.search
Pack operation
Search sign in on microsoft entra
recued-core.microsoft-entra.sign_in.search
Notifications
Send notification
core.notification.send
Trust & control
What installing this recipe would let it do. Recued grants these permissions at install — review them there before approving.
Permissions it requires
Declared by the recipe — Recued grants these at install, where you review them before approving.What it's allowed to do
Read
Triggers
core.watch.time
read-only
Read
Notifications
core.notification.send
external change
6 more aren't listed here. You'll see them at install.