Azure AD Data Usage in Associated Apps

Understand how Azure AD data is used in associated apps after you grant access permissions.

Associated App

Description

Email Account Inventory

Email Account Inventory uses Azure AD data to managed Email Sensor on protected email accounts.

Mobile Security

Mobile Security uses Azure AD data to enable end users to authenticate with Azure AD during mobile device enrollment.

Phishing Simulation Assessment

Phishing Simulation Assessment uses Azure AD data to add recipients to phishing simulations and identify employees who require additional security awareness education.

Risk Insights

Risk Insights uses Azure AD data for the following purposes:

  • Gain deeper insight regarding the apps and devices your users access, and the behaviors that contribute to users' risk analysis.

  • Perform policy enforcement actions in Azure AD, such as disabling user accounts and forcing password reset.

Search

Observed Attack Techniques

Workbench

Observed Attack Techniques, Search, and Workbench use Azure AD data to perform policy enforcement actions, such as disabling user accounts and forcing password reset, through the Response Management app.

User Accounts

User Accounts uses Azure AD data to create user accounts using the distribution list email addresses and member names.

Zero Trust Secure Access

Zero Trust Secure Access uses Azure AD data for the following purposes:

  • Synchronize users/groups to provide granular access control over specified users/groups.

  • Perform policy enforcement actions in Azure AD, such as disabling user accounts and forcing password reset.

    Note:

    If you use Private Access and Internet Access only, the least permission required is Read directory data. If you use the full Zero Trust Secure Access features, grant the Read directory data and perform account management actions permission.

  • Access the Microsoft Perview Information Protection-encrypted content and published sensitivity labels for data loss prevention in Internet Access.