> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/unified-identities/azure-identities/azure-resource-management/virtual-machines.md).

# Virtual Machines

Open **Unified Identities › Resources**, filter **Providers** to **Azure Resource Management › Virtual Machine**, then select a row to open its details.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-7fbfdf83f4792f5684fcfa156da4382dffc0d32f%2Faz-virtual-machines.png?alt=media" alt=""><figcaption><p>Virtual Machines</p></figcaption></figure>

### Virtual Machines Details

Details page contains the `Risk` and `Exposure Point` of the virtual machine and the `Information` pane.

{% hint style="info" %}
You can analyze the object in the [Graph](/forestall/visualize/visualize.md) by clicking the **Graph »** button next to the `Information` title.
{% endhint %}

### Information

`Information Pane` contains `Details` and `Managed Identities` tabs.

A `Tier 0` or `Tier 2` badge on the right of the `Information` title shows the tier of the virtual machine.

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-63bad4dd7915954d66a42f5395022e0d4575c21c%2Fvm_detailts.PNG?alt=media" alt=""><figcaption><p>Virtual Machines Details</p></figcaption></figure>

### Details

Details tab contains attributes below about the Virtual machine.

| Attribute                | Description                                                                                                                                             |
| ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Name                     | The display name of the virtual machine with tenant suffix                                                                                              |
| Location                 | The Azure region where the virtual machine is deployed                                                                                                  |
| VM Size                  | The size of the virtual machine (e.g., Standard\_D8as\_v6)                                                                                              |
| Provisioning State       | The provisioning state of the virtual machine (e.g., Succeeded)                                                                                         |
| Os Type                  | The operating system type of the virtual machine (e.g., Linux)                                                                                          |
| Created Time             | The date and time when the virtual machine was created                                                                                                  |
| Entra ID Login Extension | Indicates whether the Entra ID login extension is installed. When installed, it enables Entra ID authentication for RDP (Windows) or SSH (Linux) access |
| Tenant                   | The tenant the virtual machine belongs to                                                                                                               |
| Resource Group           | The resource group the virtual machine is associated with                                                                                               |

### Managed Identities

The `Managed Identities` tab lists Azure Active Directory service principals (managed identities) assigned to the virtual machine. A managed identity lets the VM authenticate to other Azure resources (e.g. Key Vault, Storage, SQL) without storing credentials in code or configuration. Any role granted to an identity listed here is effectively granted to this VM, so these identities are part of its attack surface.

| Attribute    | Description                                                 |
| ------------ | ----------------------------------------------------------- |
| Name         | The display name of the managed identity with tenant suffix |
| Display Name | The display name of the service principal                   |
| Type         | The service principal type (e.g., ManagedIdentity)          |

<figure><img src="https://3408039743-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FObpV44hoVkNmo5bFuVVL%2Fuploads%2Fgit-blob-b6843cc0236edc291b385d958dad873d487e5399%2Fidentities_tab_vms.PNG?alt=media" alt=""><figcaption><p>Managed Identities</p></figcaption></figure>