Forum Discussion
Users flagged for risk - Azure AD Identity Protection
I would agree with you that this would be considered a false positive if the user did visit the country noted. I would suggest using "Resolved" if, for example, you found that he did not visit the country so you reset the password on the account and investigated the event further.
Short question. by default are there any User Risk oder Identity Risk Policies activated which act by default? As example block the sign in or something which creates an impact. IM asking before we add Licenses to our Contract to know if i have to configure something before. Because our Users are highly traveling around the world and i dont want to have any impact because of a false detection, dont want to have 200 accounts blocked because of a automatic acting policy.
Thank you very much.