Forum Discussion

KitsuneMiku's avatar
KitsuneMiku
Copper Contributor
Jun 07, 2023

Find users by tag on 365

Hi everyone,   i have a question: i'm a 365 Defender administrator in a tenant with E5 P2 for every user, and we wanted to gather information about all the users with "sensitive" tag.   i've enc...
boshphorus's avatar
boshphorus
Copper Contributor
Jun 07, 2023

KitsuneMiku If I was able to understand your question, one of these might be an answer for you.

1- Do you have Microsoft Defender for Identity portal? If so, you can get this information from there.
2- Also in MS 365 defender, go to submissions and click to user reported settings from the top right corner. You will see the user tags that you have.

  • KitsuneMiku's avatar
    KitsuneMiku
    Copper Contributor
    Jun 08, 2023

    boshphorus 

     

    thanks you for your answer.

     

    yes, we do have MDI portal (with all the sensors set up), which redirects me to 365 Defender by Default.

     

    i tried to look through your second point, but my user tag section in the user reported settings is completely empty. (i only see priority account applied to 0 users).

     

    i did read that MDI automatically tags some accounts if they're in administrative groups, but i can't really look through some of them (hybrid environment and some groups are not synced and i don't have access to the on-premise infrastructure).

     

    do you have any other suggestion?

     

    thank you.

Resources