Skip to content

Commit 6cc18ce

Browse files
Update multi-factor-authentication-enforcement.md
1 parent 0241a8f commit 6cc18ce

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

articles/defender-for-cloud/multi-factor-authentication-enforcement.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -67,14 +67,14 @@ To see which accounts don't have MFA enabled, use the following Azure Resource G
6767

6868
1. Enter the following query and select **Run query**.
6969

70-
```
71-
securityresources
72-
| where type =~ "microsoft.security/assessments/subassessments"
73-
| where id has "assessments/dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c" or id has "assessments/c0cb17b2-0607-48a7-b0e0-903ed22de39b" or id has "assessments/6240402e-f77c-46fa-9060-a7ce53997754"
74-
| parse id with start "/assessments/"assessmentId"/subassessments/" userObjectId
75-
| summarize make_list(userObjectId) by strcat(tostring(properties.displayName), " (", assessmentId, ")")
76-
| project ["Recommendation Name"] = Column1 , ["Account ObjectIDs"] = list_userObjectId
77-
```
70+
```
71+
securityresources
72+
| where type =~ "microsoft.security/assessments/subassessments"
73+
| where id has "assessments/dabc9bc4-b8a8-45bd-9a5a-43000df8aa1c" or id has "assessments/c0cb17b2-0607-48a7-b0e0-903ed22de39b" or id has "assessments/6240402e-f77c-46fa-9060-a7ce53997754"
74+
| parse id with start "/assessments/"assessmentId"/subassessments/" userObjectId
75+
| summarize make_list(userObjectId) by strcat(tostring(properties.displayName), " (", assessmentId, ")")
76+
| project ["Recommendation Name"] = Column1 , ["Account ObjectIDs"] = list_userObjectId
77+
```
7878
7979
1. The `additionalData` property reveals the list of account object IDs for accounts that don't have MFA enforced.
8080

0 commit comments

Comments
 (0)