Open Unified Identities › Resources, filter Providers to Entra ID › Tenant, then select a row to open its details.
Tenants
Tenant Details
Opening a tenant shows the Risk and Exposure Point in the header. The Information pane carries a Tier 0 or Tier 2 badge and contains the Details, User Settings and Device Settings tabs.
You can analyze the object in the Graph by clicking the Graph » button next to the Information title.
Tenant Details
Details
Details tab contains attributes below about tenant.
| Attribute | Description |
|---|---|
| Display Name | The name displayed for the Azure AD tenant in the portal and services. (Field reference) |
| Tenant ID | A unique GUID that identifies your Azure Active Directory tenant. (Field reference) |
| Name | Internal name assigned to the Azure tenant, usually matching the display name. |
| Country Code | Two-letter country or region code (ISO 3166) set during tenant creation. (Field reference) |
| Domains | List of custom and default domains associated with the tenant. (Field reference) |
| Default Domain | Primary domain used by default when creating users (e.g., forestall.io). (Field reference) |
| OnPrem Synced | Indicates whether user accounts are synchronized from an on-premises Active Directory. (Field reference) |
| Password Synced | Shows if password hash synchronization is enabled for hybrid users. (Field reference) |
| Password Writeback | Indicates whether cloud password changes are written back to the on-premises AD. (Field reference) |
| Cloud Password Policy | Specifies if the Azure AD password policy is enforced for cloud-only users. (Field reference) |
| Unified Group Writeback | Indicates whether Microsoft 365 groups are written back to the on-premises directory. (Field reference) |
| User Writeback | Determines if users created in Azure AD are written back to the on-premises AD. (Field reference) |
| Device Writeback | Indicates if Azure AD-registered devices are written back to the on-premises AD. (Field reference) |
| Group Writeback | Shows if groups created in Azure AD are written back to the on-prem AD. (Field reference) |
User Settings
User Settings tab shows the tenant-wide user settings.
User Settings
| Section | Settings |
|---|---|
| Default User Role Permissions | Users can register applications, Restrict non-admin users from creating tenants, Users can create security groups |
| Guest User Access | Guest user access restrictions, for example Guest users have the same access as members (most inclusive) |
Device Settings
Device Settings tab shows the tenant-wide device settings.
Device Settings
| Section | Settings |
|---|---|
| Microsoft Entra Join and Registration Settings | Users may join devices to Microsoft Entra, Require Multifactor Authentication to register or join devices with Microsoft Entra, Maximum number of devices per user |
| Local Administrator Settings | Global administrator role is added as local administrator on the device during Microsoft Entra join (Preview), Registering user is added as local administrator on the device during Microsoft Entra join (Preview), Enable Microsoft Entra Local Administrator Password Solution (LAPS), Restrict users from recovering the BitLocker key(s) for their owned devices |