Azure Monitor Activity, MySQL, Network Security, Policy, PostgreSQL, PublicIP, and Recovery Services Tables

Tables

AzureADMonitorActivityLogEvents

Azure Activity Log events recording control-plane operations performed on resources.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the log event.
ID	string	A unique identifier for the event.
AuthorizationAction	string	The action taken during the event (e.g., `create`, `update`, `delete`).
AuthorizationRole	string	The role that performed the action (e.g., `admin`, `user`).
AuthorizationScope	string	The scope at which the event occurred (e.g., `resource`, `tenant`).
Caller	string	The identifier or name of the caller who initiated the event.
CorrelationId	string	A unique identifier for the event’s correlation across systems.
Description	string	A detailed description of the event.
EventDataId	string	A unique identifier for the event's associated data.
EventNameValue	string	The event's name in its original value form.
EventNameLocalizedValue	string	The localized version of the event's name.
HttpRequestClientRequestId	string	The client request identifier for the HTTP request associated with the event.

AzureADMySQLServers

Azure Database for MySQL server resources, including SKU, storage, and networking configuration.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the MySQL server.
ID	string	A unique identifier for the MySQL server.
SkuName	string	The SKU (Stock Keeping Unit) name for the MySQL server (e.g., `Basic`, `General Purpose`).
SkuTier	string	The tier for the MySQL server, which defines the server's capabilities (e.g., `Basic`, `General Purpose`).
PropertiesAdministratorLogin	string	The login name of the administrator for the MySQL server.
PropertiesStorageSizeGB	integer	The storage size in GB allocated to the MySQL server.
PropertiesStorageIops	integer	The input`,` output operations per second (IOPS) allocated to the MySQL server.
PropertiesStorageAutoGrow	string	Indicates if the storage auto-grow feature is enabled.
PropertiesStorageSku	string	The SKU type of the storage for the MySQL server.
PropertiesVersion	string	The version of MySQL running on the server.
PropertiesState	string	The current state of the MySQL server (e.g., `running`, `stopped`).
PropertiesFullyQualifiedDomainName	string	The fully qualified domain name (FQDN) of the MySQL server.

AzureADNetworkSecurityGroups

Network Security Group resources used to filter network traffic to Azure resources.

Name	Type	Description
ID	integer	A unique identifier for the network security group.
Name	string	The name of the network security group.
Type	string	The type of the network security group (e.g., `Microsoft.Network`, `networkSecurityGroups`).
Location	string	The geographic location where the network security group is deployed.
BatchID	integer	The identifier for the batch process that created or updated the record.
BatchDate	datetime	The date and time the batch process occurred.
ConfigID	integer	A unique identifier for the configuration related to the security group.

AzureADNetworkSecurityRules

Individual inbound/outbound security rules defined within Network Security Groups.

Name	Type	Description
ID	integer	A unique identifier for the network security rule.
NetworkSecurityGroupID	integer	The identifier for the network security group to which the rule belongs.
ProvisioningState	string	The provisioning state of the security rule (e.g., `succeeded`, `failed`, etc.).
ResourceGuid	string	A unique identifier for the resource related to the rule.
Protocol	string	The protocol used by the rule (e.g., `TCP`, `UDP`).
SourcePortRange	string	The range of source ports to which the rule applies.
DestinationPortRange	string	The range of destination ports to which the rule applies.
SourceAddressPrefix	string	The source IP address or range to which the rule applies.
DestinationAddressPrefix	string	The destination IP address or range to which the rule applies.
Access	string	The access type of the rule (e.g., `Allow`, `Deny`).
Direction	string	The direction of the rule (e.g., `Inbound`, `Outbound`).
Description	string	A description of the security rule.

AzureADPimRoleEligibilityScheduleInstances

Active PIM eligible role instances for principals, including scope and schedule.

Name	Type	Description
ID	string	Graph PIM eligibility schedule instance id (PK with ConfigID)
ConfigID	integer	Azure integration config that collected the row (PK with ID)
PrincipalID	string	Object id of the eligible user, group, or service principal
RoleDefinitionID	string	Entra role definition id the principal is eligible for
DirectoryScopeID	string	Directory scope of the eligibility (/ tenant, or admin unit)
AppScopeID	string	App scope id when eligibility is scoped to an application
MemberType	string	How the principal holds eligibility (Direct, Group, UnknownFutureValue)
StartDateTime	datetime	When this eligibility instance became effective
EndDateTime	datetime	When this eligibility instance expires
RoleEligibilityScheduleID	string	Parent role eligibility schedule id
RoleDefinitionDisplayName	string	Display name of the expanded role definition
PrincipalDisplayName	string	Display name of the expanded principal
PrincipalType	string	Graph @odata.type of the expanded principal
BatchDate	datetime	UTC timestamp of the ETL load that wrote the row

AzureADPimRoleAssignmentScheduleInstances

Active PIM role assignment instances for principals, including scope, type, and schedule.

Name	Type	Description
ID	string	Graph PIM assignment schedule instance id (PK with ConfigID)
ConfigID	integer	Azure integration config that collected the row (PK with ID)
PrincipalID	string	Object id of the assigned user, group, or service principal
RoleDefinitionID	string	Entra role definition id currently assigned
DirectoryScopeID	string	Directory scope of the assignment (/ tenant, or admin unit)
AppScopeID	string	App scope id when assignment is scoped to an application
MemberType	string	How the principal holds the assignment (Direct, Group, UnknownFutureValue)
StartDateTime	datetime	When this assignment instance became effective
EndDateTime	datetime	When this assignment instance expires
AssignmentType	string	Assignment kind (Assigned permanent, Activated via PIM)
RoleAssignmentOriginID	string	Origin assignment id this instance was created from
RoleAssignmentScheduleID	string	Parent role assignment schedule id

AzureADPolicyAssignments

Azure Policy assignments applied at a scope, including their definition and enforcement mode.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the policy assignment.
ID	string	A unique identifier for the policy assignment.
Type	string	The type of policy assignment (e.g., `Custom`, `Built-in`).
IdentityPrincipalId	string	The principal ID of the identity to which the policy is assigned.
IdentityTenantId	string	The tenant ID where the policy assignment was created.
IdentityType	string	The type of identity (e.g., `User`, `Group`).
Location	string	The location where the policy assignment was created or applied.
SystemDataCreatedBy	string	The creator of the policy assignment.
SystemDataCreatedByType	string	The type of entity that created the policy assignment (e.g., `User`, `Service`).
SystemDataCreatedAt	datetime	The timestamp when the policy assignment was created.
SystemDataLastModifiedBy	string	The user or system that last modified the policy assignment.
SystemDataLastModifiedByType	string	The type of entity that last modified the policy assignment (e.g., `User`, `Service`).

AzureADPolicySetDefinitions

Azure Policy initiative (policy set) definitions grouping related policy definitions.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the policy set definition.
ID	string	The unique identifier for the policy set definition.
Type	string	The type of the policy set definition (e.g., `custom`, `built-in`).
Name	string	The name of the policy set definition.
PropertiesDisplayName	string	The display name of the policy set definition.
PropertiesPolicyType	string	The type of the policy (e.g., `regulatory`, `compliance`).
PropertiesDescription	string	A description of the policy set definition.
PropertiesMetadataCategory	string	The category of the metadata for the policy set definition (e.g., `security`, `governance`).
PropertiesVersion	string	The version of the policy set definition.
ListPropertiesVersions	string	A list of versions available for the policy set definition.
PropertiesParameters	string	The parameters used in the policy set definition.
PropertiesPolicyDefinitions	string	A list of policy definitions included in the policy set definition.
BatchDate	datetime	The date and time when the batch operation for the policy set was created or updated.

AzureADPostgreSqlServers

Azure Database for PostgreSQL server resources, including SKU, storage, and networking configuration.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the PostgreSQL server.
ID	string	A unique identifier for the PostgreSQL server.
SkuName	string	The SKU (Stock Keeping Unit) name, which specifies the pricing tier of the PostgreSQL server.
SkuTier	string	The tier of the PostgreSQL server (e.g., `Basic`, `Standard`, `Premium`).
Location	string	The geographic location where the PostgreSQL server is hosted.
TagElasticServer	string	A tag for elastic server settings associated with the PostgreSQL server.
Type	string	The type of resource, typically `Microsoft.DBforPostgreSQL`, `servers` for PostgreSQL servers.
PropertiesFullyQualifiedDomainName	string	The fully qualified domain name (FQDN) for the PostgreSQL server.
PropertiesVersion	string	The version of PostgreSQL installed on the server.
PropertiesMinorVersion	string	The minor version of PostgreSQL installed on the server.
PropertiesAdministratorLogin	string	The administrator login for the PostgreSQL server.
PropertiesState	string	The current state of the PostgreSQL server (e.g., `Online`, `Creating`, `Deleting`).

AzureADPublicIPAddresses

Public IP address resources, including allocation method, DNS settings, and DDoS protection.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the public IP address.
ID	string	A unique identifier for the public IP address.
Location	string	The geographic location where the public IP address is assigned.
Type	string	The type of resource, typically `Microsoft.Network`, `publicIPAddresses` for public IP addresses.
PropertiesProvisioningState	string	The provisioning state of the public IP address (e.g., `succeeded`, `failed`).
PropertiesPublicIPAddressVersion	string	The version of the public IP address (e.g., `IPv4`, `IPv6`).
PropertiesPublicIPAllocationMethod	string	The allocation method for the public IP address (e.g., `Static`, `Dynamic`).
PropertiesIdleTimeoutInMinutes	integer	The idle timeout duration in minutes for the public IP address.
PropertiesIpConfigurationID	string	The ID of the IP configuration associated with the public IP address.
PropertiesDdosSettingsProtectionMode	string	The DDoS protection mode for the public IP address (e.g., `Basic`, `Standard`).
PropertiesIpTags	string	Tags associated with the public IP address.
PropertiesIpAddress	string	The actual IP address associated with the public IP resource.

AzureADRecoveryServicesBackupJobs

Backup and restore job records executed against Recovery Services vaults.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the backup job.
ID	string	A unique identifier for the backup job.
Name	string	The name of the backup job.
Type	string	The type of resource, typically `Microsoft.RecoveryServices`, `backup`Jobs`for`backup` jobs.
PropertiesJobType	string	The type of the backup job (e.g., `backup`, `restore`).
PropertiesDuration	string	The duration of the backup job.
PropertiesVirtualMachineVersion	string	The version of the virtual machine associated with the backup job.
PropertiesEntityFriendlyName	string	The friendly name of the entity being backed up.
PropertiesBackupManagementType	string	The `backup` management type (e.g., `Azure`, `MARS Agent`).
PropertiesOperation	string	The operation being performed in the backup job (e.g., `backup`, `restore`).
PropertiesStatus	string	The current status of the backup job (e.g., `InProgress`, `Completed`, `failed`).
PropertiesStartTime	datetime	The start time of the backup job.
PropertiesActivityId	string	The activity ID associated with the backup job.
PropertiesEndTime	datetime	The end time of the backup job.
BatchDate	datetime	The date and time the batch operation for the backup job was created or last updated.

AzureADRecoveryServicesBackupPolicies

Backup policy definitions configured within Recovery Services vaults.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the backup policy.
ID	string	A unique identifier for the backup policy.
Name	string	The name of the backup policy.
Type	string	The type of resource, typically `Microsoft.RecoveryServices`, `backupPolicies` for backup policies.
PropertiesBackupManagementType	string	The backup management type (e.g., `Azure`, `MARS Agent`).
PropertiesSchedulePolicy	string	The schedule policy for the backup job, including frequency and timing.
PropertiesRetentionPolicy	string	The retention policy specifying how long backup's are retained.
PropertiesProtectedItemsCount	integer	The number of items protected by the backup policy.
PropertiesTimeZone	string	The time zone associated with the backup policy.
BatchDate	datetime	The date and time the batch operation for the backup policy was created or last updated.

AzureADRecoveryServicesProtectedItems

Items protected by Recovery Services vaults, including their protection state and last backup status.

Name	Type	Description
ID	string	ARM resource id of the protected item (PK with ConfigID)
ConfigID	integer	Azure integration config that collected the row (PK with ID)
Type	string	ARM resource type
VaultName	string	Recovery Services vault that owns the item
ResourceGroupName	string	Resource group of the vault
PropertiesFriendlyName	string	Friendly name of the protected workload
PropertiesProtectionState	string	Protection state (Protected, ProtectionStopped, etc.)
PropertiesProtectionStatus	string	Protection status string from ARM
PropertiesBackupManagementType	string	Backup management type (AzureIaasVM, AzureSQL, etc.)
PropertiesWorkloadType	string	Workload type (VM, SQL, etc.)
PropertiesPolicyID	string	Backup policy ARM id applied to the item
PropertiesPolicyName	string	Backup policy name

AzureADRecoveryServicesVaults

Azure Recovery Services vault resources used for backup and disaster recovery.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the recovery services vault.
ID	string	A unique identifier for the recovery services vault.
Location	string	The geographic location where the recovery services vault is hosted.
Name	string	The name of the recovery services vault.
Etag	string	The entity tag (ETag) for the recovery services vault, used for concurrency control.
Type	string	The type of resource, typically `Microsoft.RecoveryServices`, `vaults` for recovery services vaults.
SkuName	string	The SKU (Stock Keeping Unit) name, which specifies the pricing tier of the recovery services vault.
PropertiesProvisioningState	string	The provisioning state of the recovery services vault (e.g., `succeeded`, `failed`).
TagsLove	string	A custom tag associated with the recovery services vault.
TagsTestUpdatedKey	string	A custom test tag with an updated key associated with the recovery services vault.
ResourceGroupName	string	The name of the resource group containing the recovery services vault.
BatchDate	datetime	The date and time the batch operation for the recovery services vault configuration was created or last updated.