icon-itdr.svg
ITDR

Adding a Change Detection to the Entra ID Change Detection Object Safelist

After you connect an Entra ID tenant for a scan, any changes detected in the first and subsequent scan results are recorded and compared, and the data is categorized as Good, Bad, or Info on the Entra ID Change Detection dashboard. You can review these changes to confirm that they are not a risk and mark them as safe by moving them to the object safelist if the changes are associated with a principal_id.

The safelist option is not supported for custom change detections.

To add a change detection in an Entra ID tenant to the object safelist:

  1. Go to ITDR > Dashboard > Entra ID Change Detection > Default.
  2. Select an Entra ID tenant from the Result for drop-down menu.

    The change detection data for the Entra ID tenant appears.

  3. Locate the change detection issue that you want to add to the safelist, and under Actions, click the Add to Object Safelist icon.

  4. In the Add to Safelist window, enter a reason for marking the change detection issue as safe and select an expiration date if needed.

    The option to add an item to change detection object safelist is available only if a principal_id is associated with the change.

  5. Click Save.

    The change is added to the safelist. You can view and manage it from the Entra ID Change Detection Object Safelist.

Related Articles
About the Entra ID Change Detection Object SafelistAdding a Change Detection to the Entra ID Change Detection Object SafelistEditing or Deleting an Object from the Entra ID Change Detection Object Safelist