Skip to content

Commit 84b69f3

Browse files
Merge pull request #4361 from LiorShapiraa/docs-editor/multitenant-identities-invento-1751186160
Create article multitenant-identities-inventory
2 parents 33d304d + 706bab5 commit 84b69f3

File tree

5 files changed

+64
-0
lines changed

5 files changed

+64
-0
lines changed

unified-secops-platform/TOC.yml

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -104,6 +104,9 @@
104104
href: mto-advanced-hunting.md
105105
- name: Multitenant devices
106106
href: mto-tenant-devices.md
107+
- name: Multitenant identities
108+
href: multitenant-identities-inventory.md
109+
displayName: MTO
107110
- name: Vulnerability management
108111
href: mto-dashboard.md
109112
- name: Manage tenants
112 KB
Loading
22.5 KB
Loading
25.7 KB
Loading
Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,61 @@
1+
---
2+
# Required metadata
3+
# For more information, see https://learn.microsoft.com/en-us/help/platform/learn-editor-add-metadata
4+
# For valid values of ms.service, ms.prod, and ms.topic, see https://learn.microsoft.com/en-us/help/platform/metadata-taxonomies
5+
6+
title: Multitenant identities
7+
description: A multi-tenant identity inventory
8+
author: LiorShapiraa
9+
ms.author: liorshapira
10+
ms.service: microsoft-defender-for-identity
11+
ms.topic: article
12+
ms.date: 06/29/2025
13+
---
14+
15+
# Identities
16+
17+
The **Identities** page in multitenant management enables you to quickly manage tenants and identities.
18+
19+
## Identity inventory
20+
21+
The Identity inventory page lists all the identities in each tenant that you have access to. The page is like the [Defender for Identity inventory](/defender-for-identity/identity-inventory) with the addition of the **Tenant name** column and filter.
22+
23+
You can navigate to the identity inventory page by selecting **Assets > Identities** in Microsoft Defender XDR's navigation menu.
24+
25+
:::image type="content" source="media/multitenant-identities-inventory/screenshot-of-inventory.png" alt-text="Screenshot of inventory." lightbox="media/multitenant-identities-inventory/screenshot-of-inventory.png":::
26+
27+
At the top of the page, the following identities counts are available for all tenants:
28+
29+
**Total**: The total number of identities.
30+
31+
**Critical:** The number of your critical assets.
32+
33+
**Disabled:** The number of all disabled identities in your organization.
34+
35+
**Services:** The number of all service accounts both on-premises and cloud.
36+
37+
You can use this information to help you prioritize identities for security posture improvements.
38+
39+
Highly privileged identities card helps you investigate in Advanced hunting all sensitive accounts in your organization, including Microsoft Entra ID security administrators and Global admin users.
40+
41+
There are several options you can choose from to customize the identities list view. On the top navigation you can:
42+
43+
- Add or remove columns.
44+
45+
- Apply filters.
46+
47+
- Search for an identity by name or full UPN, SID, and Object ID.
48+
49+
- Export the list to a CSV file.
50+
51+
- Copy list link with the included filters configured.
52+
53+
> [!NOTE]
54+
> When exporting the identities list to a CSV file, a maximum of 5,000 identities are displayed.
55+
56+
To view full identity details, select a specific identity from the list. Tenant ID and Tenant name are available in the identity side panel and page:
57+
58+
:::image type="content" source="media/multitenant-identities-inventory/screenshot-of-tenant-details-on-identity.png" alt-text="Screenshot of tenant details on identity.":::
59+
60+
61+

0 commit comments

Comments
 (0)