Forum Discussion
KitsuneMiku
Jun 07, 2023Copper Contributor
Find users by tag on 365
Hi everyone, i have a question: i'm a 365 Defender administrator in a tenant with E5 P2 for every user, and we wanted to gather information about all the users with "sensitive" tag. i've enc...
Or Tsemah
Jun 08, 2023Former Employee
Hi, we will soon add "Tags" into the Advanced hunting's IdentityInfo table, available in the security.microsoft.com portal, which will allow you to search by that property, stay tuned for the announcement.
- boshphorusJun 08, 2023Copper Contributor
Or Tsemah is there any current way or something on is way about matching device tags with user accounts? We have some device tags, and they can be filtered from devices page on MS 365 defender. However, it does not list the user accounts which are associated with those device tags. I need to list user accounts which have exclusion for some apps, and I was only able to list the devices which have these tags, not the employee names.
- Or TsemahJun 11, 2023Former EmployeeThe best way i can currently suggest for that scenario would be to use advanced hunting to filter the DeviceInfo table, extracting the relevant LoggedOnUsers by DeviceManualTags and then joining that result with the upcoming Tags column of the IdentityInfo table, feel free to contact me if you wish to discuss this scenario further.