Skip to content

Commit 19acbe8

Browse files
WIP
1 parent e02b327 commit 19acbe8

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

articles/active-directory/identity-protection/howto-identity-protection-remediate-unblock.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -65,17 +65,19 @@ If after investigation and confirming that the user account isn't at risk of bei
6565

6666
To **Dismiss user risk**, search for and select **Azure AD Risky users** in the Azure portal or the Entra portal, select the affected user, and select **Dismiss user(s) risk**.
6767

68-
When you select **Dismiss user risk**, the user will no longer be at risk, and all the risky sign-ins of this user and the corresponding risk detections will be dismissed as well.
69-
y have a "At risk" risk state, all events are closed and the affected user is no longer at risk.
68+
When you select **Dismiss user risk**, the user will no longer be at risk, and all the risky sign-ins of this user and corresponding risk detections will be dismissed as well.
69+
70+
Because this method doesn't have an impact on the user's existing password, it doesn't bring their identity back into a safe state.
71+
72+
#### Risk state and detail based on dismissal of risk
73+
7074
- Risky user:
7175
- Risk state: "At risk" -> "Dismissed"
7276
- Risk detail (the risk remediation detail): "-" -> "Admin dismissed all risk for user"
7377
- All the risky sign-ins of this user and the corresponding risk detections:
7478
- Risk state: "At risk" -> "Dismissed"
7579
- Risk detail (the risk remediation detail): "-" -> "Admin dismissed all risk for user"
7680

77-
However, because this method doesn't have an impact on the existing password, it doesn't bring the related identity back into a safe state.
78-
7981
### Confirm a user to be compromised
8082

8183
If after investigation, an account is confirmed compromised:

0 commit comments

Comments
 (0)