> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/azure-entities/entra-id/administrativeunit.md).

# AdministrativeUnit

## AdministrativeUnit

The **AdministrativeUnit** entity represents an Administrative Unit in Azure Active Directory (Entra ID), used for delegated administration of users, groups, and devices.

| Field                         | Type    | Possible Operators                                             | Description                                            |
| ----------------------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------ |
| Guid                          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier for the entity in Forestall          |
| ObjectID                      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure AD Object ID of the administrative unit          |
| FSName                        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used in Forestall                         |
| DisplayName                   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name of the administrative unit in Azure AD    |
| Description                   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Description of the administrative unit                 |
| IsMemberManagementRestricted  | BOOLEAN | N/A (toggle)                                                   | Whether member management is restricted (protected AU) |
| MembershipRule                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Dynamic membership rule expression                     |
| MembershipRuleProcessingState | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Processing state of the dynamic membership rule        |
| MembershipType                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Membership type (e.g., Assigned, Dynamic)              |
| Visibility                    | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Visibility setting of the administrative unit          |
| TenantID                      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure AD Tenant ID the administrative unit belongs to  |
| AZTier                        | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Azure tier classification assigned by Forestall        |