SCInsiderRiskEntityList¶

Parameters¶

Parameter	Attribute	DataType	Description	Allowed Values
Name	Key	String	The name of the group or setting.
ListType	Required	String	The setting type.
Description	Write	String	Description for the group or setting.
DisplayName	Write	String	The display name of the group or setting.
Domains	Write	MSFT_SCInsiderRiskEntityListDomain[]	List of domains
FilePaths	Write	String[]	List of file paths.
FileTypes	Write	String[]	List of file types.
Keywords	Write	String[]	List of keywords.
SensitiveInformationTypes	Write	String[]	List of sensitive information types.
Sites	Write	MSFT_SCInsiderRiskEntityListSite[]	List of sites.
TrainableClassifiers	Write	String[]	List of trainable classifiers.
ExceptionKeyworkGroups	Write	String[]	List of keywords for exception.
ExcludedClassifierGroups	Write	String[]	List of excluded trainable classifiers.
ExcludedDomainGroups	Write	String[]	List of excluded domains.
ExcludedFilePathGroups	Write	String[]	List of excluded file paths.
ExcludedFileTypeGroups	Write	String[]	List of excluded file types.
ExcludedKeyworkGroups	Write	String[]	List of excluded keywords.
ExcludedSensitiveInformationTypeGroups	Write	String[]	List of excluded sensitive information types.
ExcludedSiteGroups	Write	String[]	List of excluded sites.
Ensure	Write	String	Specify if this entity should exist or not.	`Present`, `Absent`
Credential	Write	PSCredential	Credentials of the workload's Admin
ApplicationId	Write	String	Id of the Azure Active Directory application to authenticate with.
TenantId	Write	String	Id of the Azure Active Directory tenant used for authentication.
CertificateThumbprint	Write	String	Thumbprint of the Azure Active Directory application's authentication certificate to use for authentication.
CertificatePassword	Write	PSCredential	Username can be made up to anything but password will be used for CertificatePassword
CertificatePath	Write	String	Path to certificate used in service principal usually a PFX file.
ManagedIdentity	Write	Boolean	Managed ID being used for authentication.
AccessTokens	Write	String[]	Access token used for authentication.

Embedded Instances¶

MSFT_SCInsiderRiskEntityListDomain¶

Parameters¶

Parameter	Attribute	DataType	Description	Allowed Values
Dmn	Required	String	Domain name.
isMLSubDmn	Write	Boolean	Defines if the entry should include multi-level subdomains or not.

MSFT_SCInsiderRiskEntityListSite¶

Parameters¶

Parameter	Attribute	DataType	Description
Url	Required	String	Url of the site.
Name	Write	String	Name of the site.
Guid	Write	String	Unique identifier of the site.

Description¶

Configures settings for Insider Risk in Purview.

Permissions¶

Office 365 Exchange Online¶

To authenticate with the Office 365 Exchange Online API, this resource requires the following permissions:

Delegated permissions¶

Read
None
Update
None

Application permissions¶

Read
Exchange.ManageAsApp
Update
Exchange.ManageAsApp

Examples¶

Example 1¶

This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.

Configuration Example
{
    param
    (
        [Parameter()]
        [System.String]
        $ApplicationId,

        [Parameter()]
        [System.String]
        $TenantId,

        [Parameter()]
        [System.String]
        $CertificateThumbprint
    )

    Import-DscResource -ModuleName Microsoft365DSC

    Node localhost
    {
        SCInsiderRiskEntityList "SCInsiderRiskEntityList-Example"
        {
            Description           = "High risk file types monitored when data is copied to removable media";
            DisplayName           = "High risk file types";
            Ensure                = "Present";
            FileTypes             = @(".exe",".cmd",".bat");
            Keywords              = @();
            ListType              = "CustomFileTypeLists";
            Name                  = "Restricted File Types";
            ApplicationId         = $ApplicationId;
            TenantId              = $TenantId;
            CertificateThumbprint = $CertificateThumbprint;
        }
    }
}

Example 2¶

This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.

Configuration Example
{
    param
    (
        [Parameter()]
        [System.String]
        $ApplicationId,

        [Parameter()]
        [System.String]
        $TenantId,

        [Parameter()]
        [System.String]
        $CertificateThumbprint
    )

    Import-DscResource -ModuleName Microsoft365DSC

    Node localhost
    {
        SCInsiderRiskEntityList "SCInsiderRiskEntityList-Example"
        {
            Description           = "High risk file types monitored when data is copied to removable media";
            DisplayName           = "High risk file types";
            Ensure                = "Present";
            FileTypes             = @(".exe",".txt",".bat"); # Updated Property
            Keywords              = @();
            ListType              = "CustomFileTypeLists";
            Name                  = "Restricted File Types";
            ApplicationId         = $ApplicationId;
            TenantId              = $TenantId;
            CertificateThumbprint = $CertificateThumbprint;
        }
    }
}

Example 3¶

This example is used to test new resources and showcase the usage of new resources being worked on. It is not meant to use as a production baseline.

Configuration Example
{
    param
    (
        [Parameter()]
        [System.String]
        $ApplicationId,

        [Parameter()]
        [System.String]
        $TenantId,

        [Parameter()]
        [System.String]
        $CertificateThumbprint
    )

    Import-DscResource -ModuleName Microsoft365DSC

    Node localhost
    {
        SCInsiderRiskEntityList "SCInsiderRiskEntityList-Example"
        {
            Ensure                = "Absent";
            ListType              = "CustomFileTypeLists";
            Name                  = "Restricted File Types";
            ApplicationId         = $ApplicationId;
            TenantId              = $TenantId;
            CertificateThumbprint = $CertificateThumbprint;
        }
    }
}