Misconfigurations, excessive privileges, weak authentication measures, and vulnerabilities in a Microsoft Entra ID tenant are a key attack vector. Adversaries use stolen credentials to compromise users and leverage these misconfigurations and permissions in the tenant to escalate privileges and move laterally. A security compromise of the tenant can destabilize the integrity of your identity management infrastructure.

After the Entra ID tenant is assessed for vulnerabilities, the results are displayed on a dashboard.

About the Entra ID Dashboard

The dashboard summarizes the state of your Entra ID security posture. On the Entra ID dashboard (ITDR > Dashboard > Entra ID), you can do the following:

1. Filter scan results by Entra ID tenant and timestamp.
2. View the total number of issues discovered after assessing the users, service principals, and configurations in the Entra ID tenant.
3. View the tenant risk severity, categorized as Critical, High, Medium, or Low. The risk posture gets better as the severity level decreases.
4. View a list of the top 5 issues that are found in the Entra ID. After the Entra ID is scanned for various posture checks that are mainly focused on best practice violations, data loss, excessive privileges, etc., the issues and misconfigurations detected are listed. These are issues and misconfigurations that have the highest impact on your risk score and are the easiest to remediate. If you fix these issues first, you can significantly reduce your risk score. Click an issue to view additional details.
5. View a list of the top 10 identities that have the highest risks in the Entra ID tenant. Having visibility of these 10 riskiest identities in your Entra ID helps you to prioritize what to focus on first. You can drill down to a specific affected identity to investigate and remediate.
6. View all the Entra ID issues categorized by severity in a bar chart. This gives you an overview of the risk composition of the Entra ID. Click the chart to view additional details.
7. View all the Entra ID issues categorized by risk in a donut chart. This gives you an overview of the types of risk most prevalent in Entra ID. Click the chart to view additional details.
8. View active changes detected that provide near real-time visibility into new misconfigurations and security risks introduced to your Entra ID. Double-click a change detection issue to view issue and remediation details.
9. View the Risk Reduction Roadmap to see the current risk severity of the Entra ID tenant and set targets to systematically lower the risk severity by providing an automated and prioritized remediation roadmap.
10. View all the Entra ID issues mapped to MITRE ATT&CK techniques and displayed on a kill chain. This widget enables you to get visibility into issues that can be exploited by adversaries during various stages of an attack. Click an issue mapped on the kill chain to view additional details.
11. Download the ITDR Microsoft Entra ID executive summary report and Delta Scan report in the PDF and Excel format.
12. View Entra ID remediation logs or history details.
13. View and download the Entra ID vulnerability report.
14. Run an on-demand scan for the selected Entra ID tenant whenever necessary. After you configure an Entra ID tenant for a vulnerability scan, the scan is triggered at the scheduled time. If you don't want to wait till the scheduled time, you can trigger an on demand scan manually.
15. Delete a scan report.