Azure Resources, Roles, Security, and Services Tables

Tables

AzureADResourceGroups

Azure resource group resources used to organize resources within a subscription.

Name	Type	Description
ID	integer	A unique identifier for the resource group configuration.
ResourceGroupId	string	A unique identifier for the resource group.
SubscriptionId	string	The unique identifier for the subscription to which the resource group belongs.
Name	string	The name of the resource group.
Type	string	The type of resource, typically `Microsoft.Resources`, `resourceGroups` for resource groups.
BatchID	integer	A unique identifier for the batch operation related to the resource group.
BatchDate	datetime	The date and time the batch operation for the resource group configuration was created or last updated.
ConfigID	integer	A unique identifier for the configuration related to the resource group.

AzureADResources

Generic inventory of Azure resources across resource types, including SKU, kind, and identity metadata.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the resource.
ID	string	A unique identifier for the resource.
Type	string	The type of resource, typically indicating the specific Azure service.
SkuName	string	The SKU (Stock Keeping Unit) name, specifying the pricing tier of the resource.
SkuTier	string	The tier of the SKU for the resource (e.g., `Basic`, `Standard`, `Premium`).
SkuSize	string	The size of the SKU for the resource (e.g., `Small`, `Medium`, `Large`).
SkuFamily	string	The family to which the SKU belongs (e.g., `Gen5`, `Gen6` for virtual machines).
SkuCapacity	integer	The capacity of the SKU for the resource.
Kind	string	The kind or category of the resource (e.g., `VirtualMachine`, `StorageAccount`).
Location	string	The geographic location where the resource is hosted.
TagsMsResourceUsage	string	A custom tag indicating resource usage information for the resource.
TagsHiddenTitle	string	A custom tag used to hide or specify a hidden title for the resource.

AzureADRoleDefinitionAssignableScopes

Scopes to which a given Azure RBAC role definition can be assigned.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the role definition assignable scope.
RoleDefinitionAssignableScopeID	integer	A unique identifier for the assignable scope of the role definition.
Scope	string	The scope in which the role definition can be assigned (e.g., `Subscription`, `Resource Group`).
BatchDate	datetime	The date and time the batch operation for the assignable scopes was created or last updated.

AzureADRoleDefinitionPermissionActions

Individual permission action strings that belong to an Azure RBAC role definition permission set.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the role definition permission action.
RoleDefinitionPermissionActionID	integer	A unique identifier for the permission action in the role definition.
Action	string	The action associated with the permission in the role definition (e.g., `Read`, `Write`, `Delete`).
BatchDate	datetime	The date and time the batch operation for the permission actions was created or last updated.

AzureADRoleDefinitionPermissions

Permission sets defined within Azure RBAC role definitions.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the role definition permission.
RoleDefinitionPermissionID	integer	A unique identifier for the role definition permission.
BatchDate	datetime	The date and time the batch operation for the permissions was created or last updated.

AzureADRoleDefinitionPermissions_AzureADRoleDefinitionPermissionActions

Junction table linking role definition permission sets to their individual permission actions.

Name	Type	Description
RoleDefinitionPermissionID	integer	A unique identifier for the role definition permission.
RoleDefinitionPermissionActionID	integer	A unique identifier for the role definition permission action.
ConfigID	integer	A unique identifier for the configuration related to the permission actions.

AzureADRoleDefinitions

Azure RBAC role definitions, including their name, description, and type.

Name	Type	Description
ConfigID	integer	A unique identifier for the configuration related to the role definition.
RoleDefinitionID	string	A unique identifier for the role definition.
RoleName	string	The name of the role definition.
Type	string	The type of role definition (e.g., `Built-in`, `Custom`).
Description	string	A description of the role definition.
BatchDate	datetime	The date and time the batch operation for the role definitions was created or last updated.

AzureADRoleDefinitions_AzureADRoleDefinitionAssignableScopes

Junction table linking role definitions to their assignable scopes.

Name	Type	Description
RoleDefinitionID	string	A unique identifier for the role definition.
RoleDefinitionAssignableScopeID	integer	A unique identifier for the assignable scope of the role definition.
ConfigID	integer	A unique identifier for the configuration related to the assignable scopes.

AzureADRoleDefinitions_AzureADRoleDefinitionPermissions

Junction table linking role definitions to their permission sets.

Name	Type	Description
RoleDefinitionID	string	A unique identifier for the role definition.
RoleDefinitionPermissionID	integer	A unique identifier for the role definition permission.
ConfigID	integer	A unique identifier for the configuration related to the permissions.

AzureADRoleMembers

Membership records of principals assigned to Azure AD directory roles.

Name	Type	Description
ID	integer	A unique identifier for the role member configuration.
RoleId	string	The identifier for the role.
ParentType	string	The type of the parent entity (e.g., `User`, `Group`, `Service Principal`).
MemberType	string	The type of the member (e.g., `User`, `Group`, `Service Principal`).
MemberId	string	The unique identifier of the member assigned to the role.
BatchId	integer	The unique identifier for the batch operation related to the role members.
BatchDate	datetime	The date and time the batch operation for the role members was created or last updated.
ConfigId	integer	A unique identifier for the configuration related to the role members.

AzureADRoles

Azure AD directory role objects defined in the tenant.

Name	Type	Description
ID	integer	A unique identifier for the role configuration.
RoleId	string	The unique identifier for the role.
DisplayName	string	The display name of the role.
BatchID	integer	The unique identifier for the batch operation related to the roles.
BatchDate	datetime	The date and time the batch operation for the roles was created or last updated.
ConfigID	integer	A unique identifier for the configuration related to the roles.

AzureADSecurityContacts

Microsoft Defender for Cloud security contact configuration, including notification emails and alert settings.

Name	Type	Description
ID	integer	A unique identifier for the security contact.
Name	string	The name of the security contact.
Location	string	The location of the security contact.
Emails	string	A list of emails associated with the security contact.
AlertNotificationsState	string	The state of alert notifications for the security contact.
MinimalServerity	string	The minimal severity level for notifications associated with the security contact.
NotificationsByRoleState	string	The state of notifications by role for the security contact.
NotificationRoles	string	The roles that receive notifications for the security contact.
BatchID	integer	The unique identifier for the batch operation related to the security contacts.
BatchDate	datetime	The date and time the batch operation for the security contacts was created or last updated.
ConfigID	integer	A unique identifier for the configuration related to the security contacts.

AzureADSecurityScoreControls

Microsoft Defender for Cloud secure score control items and their compliance status.

Name	Type	Description
ID	integer	A unique identifier for the security score control.
ControlName	string	The name of the security score control.
ControlCategory	string	The category that the security score control belongs to.
State	string	The state of the security score control (e.g., `Active`, `Inactive`).
Description	string	A detailed description of the security score control.
ImplementationStatus	string	The implementation status of the security score control (e.g., `Not Implemented`, `Implemented`).
IsApplicable	boolean	Whether the control is applicable or not.
Score	decimal	The score associated with the control.
ScoreInPercentage	decimal	The score represented as a percentage.
CreatedDateTime	datetime	The date and time when the control was created.
LastSynced	datetime	The last date and time the control was synced.
BatchID	integer	The unique identifier for the batch operation related to the security score control.
BatchDate	datetime	The date and time the batch operation for the security score control was created or last updated.
ConfigID	integer	A unique identifier for the configuration related to the security score control.

AzureADSecuritySubscriptionPricings

Microsoft Defender for Cloud pricing tier configuration per subscription and resource type.

Name	Type	Description
ConfigID	integer	A unique identifier for the security subscription pricing.
ID	string	The identifier for the subscription pricing.
Name	string	The name of the security subscription pricing.
Type	string	The type of the security subscription pricing.
PropertiesPricingTier	string	The pricing tier associated with the subscription.
PropertiesSubPlan	string	The sub-plan associated with the subscription pricing.
PropertiesFreeTrialRemainingTime	string	The remaining time for a free trial, if applicable.
PropertiesEnablementTime	datetime	The enablement time of the security subscription pricing.
PropertiesEnforce	string	Whether the security subscription pricing is enforced.
PropertiesResourcesCoverageStatus	string	The status of resources coverage for the subscription pricing.
PropertiesDeprecated	boolean	Whether the security subscription pricing is deprecated.
PropertiesExtension	string	Any extension information for the security subscription pricing.
PropertiesReplacedBy	string	The name of the subscription that replaces the current one, if applicable.
BatchDate	datetime	The date and time the batch operation for the security subscription pricing was created or last updated.

AzureADServiceBusNamespaces

Azure Service Bus namespace resources, including SKU, endpoint, and security configuration.

Name	Type	Description
ConfigID	integer	A unique identifier for the service bus namespace.
ID	string	The identifier for the service bus namespace.
SkuName	string	The SKU name of the service bus namespace.
SkuTier	string	The SKU tier for the service bus namespace (e.g., `Basic`, `Standard`, `Premium`).
SkuCapacity	integer	The capacity of the service bus namespace.
Type	string	The type of the service bus namespace.
Location	string	The location of the service bus namespace.
Tag1	string	Tag 1 associated with the service bus namespace.
Tag2	string	Tag 2 associated with the service bus namespace.
PropertiesProvisioningState	string	The provisioning state of the service bus namespace.
PropertiesMetricId	string	The metric ID for the service bus namespace.
PropertiesCreatedAt	datetime	The date and time when the service bus namespace was created.

AzureADServicePrincipals

Azure AD service principal objects representing applications and managed identities in the tenant.

Name	Type	Description
ConfigID	integer	A unique identifier for the service principal configuration.
ID	string	The identifier for the service principal.
DeletedDateTime	datetime	The date and time when the service principal was deleted, if applicable.
AccountEnabled	boolean	Indicates whether the service principal account is enabled (`true` or `false`).
AppDisplayName	string	The display name of the application associated with the service principal.
AppDescription	string	A description of the application associated with the service principal.
AppId	string	The application ID of the service principal.
ApplicationTemplateId	string	The application template ID associated with the service principal.
AppOwnerOrganizationId	string	The organization ID of the app owner associated with the service principal.
AppRoleAssignmentRequired	boolean	Whether the service principal requires app role assignment (`true` or `false`).
CreatedDateTime	datetime	The date and time when the service principal was created.
Description	string	A description of the service principal.