The Device entity represents a device registered in Azure Active Directory (Entra ID).
| Field | Type | Possible Operators | Description |
|---|---|---|---|
| Guid | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique identifier for the entity in Forestall |
| ObjectID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Azure AD Object ID of the device |
| FSName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name used in Forestall |
| DisplayName | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Display name of the device in Azure AD |
| DeviceID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Unique device identifier |
| MdmAppID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Mobile Device Management application ID |
| AccountEnabled | BOOLEAN | N/A (toggle) | Whether the device account is enabled |
| IsInactive | BOOLEAN | N/A (toggle) | Whether the device is inactive |
| OnPremSyncEnabled | BOOLEAN | N/A (toggle) | Whether the device is synced from on-premises AD |
| OnPremSID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | On-premises Security Identifier (SID) |
| OnPremLastSyncDateTime | DATE | SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY | Last sync date/time from on-premises AD |
| OperatingSystem | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Operating system running on the device |
| OperatingSystemVersion | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Version of the operating system |
| TrustType | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Trust type of the device (e.g., AzureAD, Hybrid) |
| TenantID | TEXT | LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY | Azure AD Tenant ID the device belongs to |
| AZTier | NUMBER | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL | Azure tier classification assigned by Forestall |