ITDR
Adding a Change Detection to the Entra ID Change Detection Object Safelist
After you connect an Entra ID tenant for a scan, any changes detected in the first and subsequent scan results are recorded and compared, and the data is categorized as Good, Bad, or Info on the Entra ID Change Detection dashboard. You can review these changes to confirm that they are not a risk and mark them as safe by moving them to the object safelist if the changes are associated with a principal_id.
The safelist option is not supported for custom change detections.
To add a change detection in an Entra ID tenant to the object safelist:
- Go to ITDR > Dashboard > Entra ID Change Detection > Default.
Select an Entra ID tenant from the Result for drop-down menu.
The change detection data for the Entra ID tenant appears.
Locate the change detection issue that you want to add to the safelist, and under Actions, click the Add to Object Safelist icon.
In the Add to Safelist window, enter a reason for marking the change detection issue as safe and select an expiration date if needed.
The option to add an item to change detection object safelist is available only if a
principal_idis associated with the change.Click Save.
The change is added to the safelist. You can view and manage it from the Entra ID Change Detection Object Safelist.
