Device

The Device entity represents a device registered in Azure Active Directory (Entra ID).

Field	Type	Possible Operators	Description
Guid	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique identifier for the entity in Forestall
ObjectID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Azure AD Object ID of the device
FSName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name used in Forestall
DisplayName	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Display name of the device in Azure AD
DeviceID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Unique device identifier
MdmAppID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Mobile Device Management application ID
AccountEnabled	BOOLEAN	N/A (toggle)	Whether the device account is enabled
IsInactive	BOOLEAN	N/A (toggle)	Whether the device is inactive
OnPremSyncEnabled	BOOLEAN	N/A (toggle)	Whether the device is synced from on-premises AD
OnPremSID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	On-premises Security Identifier (SID)
OnPremLastSyncDateTime	DATE	SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY	Last sync date/time from on-premises AD
OperatingSystem	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Operating system running on the device
OperatingSystemVersion	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Version of the operating system
TrustType	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Trust type of the device (e.g., AzureAD, Hybrid)
TenantID	TEXT	LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY	Azure AD Tenant ID the device belongs to
AZTier	NUMBER	EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL	Azure tier classification assigned by Forestall