# Devices

The `Devices` page provides a list of enumerated devices in entire Azure. The list contains the `Account Enabled`, `Operating System`, `Operating System Version`, `Owner Users`, `Tier0`, `Risk Score` , `Exposure Point` and `Issue Counts` of each device object.

<figure><img src="/files/N6f6oE7THScAH49aEioZ" alt=""><figcaption><p>Devices</p></figcaption></figure>

## Device Details

Details page contains the `Risk Score` of the computer,`Exposure Point` ,`Information`, and `Issues` panes.

{% hint style="info" %}
You can analyze objects in the `Graph module` by clicking the `Visualize` button on the upper left side of the `Information Pane`.
{% endhint %}

<figure><img src="/files/qXCwRb3A4ssWuXa9Jklt" alt=""><figcaption><p>Devices Details</p></figcaption></figure>

## Information

`Information Pane` can contain different badges to highlight important attributes.

| Badge | Description                                                            |
| ----- | ---------------------------------------------------------------------- |
| Tier  | Indicates that the object tier according to risk score and importance. |

`Information Pane` contains `Details`, `Groups`, `Administrative Units` tabs respectively.

## Details

Details tab contains attributes below about device object.

| Attribute                    | Description                                                                                                                                                                                                                                                                            |
| ---------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Name**                     | The device's unique name in Azure AD, typically in the format of the device hostname followed by the domain.                                                                                                                                                                           |
| **Display Name**             | The type of operating system installed on the device, such as Windows, macOS, iOS, or Android.                                                                                                                                                                                         |
| **Operating System**         | The device name as shown in the Azure portal, usually matching the hostname of the machine.                                                                                                                                                                                            |
| **Operating System Version** | The specific version number of the installed operating system, which helps determine update status and compatibility.                                                                                                                                                                  |
| **Device ID**                | A unique identifier (GUID) assigned to the device within Azure AD.                                                                                                                                                                                                                     |
| **Trust Type**               | <p></p><p>Indicates how the device is registered or joined to Azure AD. Common values include:</p><ul><li><code>Azure AD joined</code></li><li><code>Hybrid Azure AD joined</code></li><li><code>Workplace</code> (for personal or BYOD devices using Azure AD registration)</li></ul> |
| **Tenant ID**                | The unique identifier (GUID) of the Azure AD tenant where the device is registered.                                                                                                                                                                                                    |
| **Account Enabled**          | Specifies whether the device object is currently active and allowed to authenticate with Azure AD.                                                                                                                                                                                     |
| **Object ID**                | A globally unique object identifier for the device within the Azure AD directory.                                                                                                                                                                                                      |
| **On Prem SID**              | The security identifier (SID) from the on-premises Active Directory, if the device is hybrid joined. This is empty if the device is cloud-only or not synced.                                                                                                                          |

## Groups

Groups tab contains a list of groups that the device is a member of. This list also contains `Enabled` and `On Prem Sync Enabled` columns to identify the status of these groups.

<figure><img src="/files/xtAqFltuNjAzYl00x0fw" alt=""><figcaption><p>Groups</p></figcaption></figure>

## Administrative Units

Administrative Unit tab contains a list of administrative units that have a ownership on this device. This list also contains `Display Name`, `Member Management Restricted`, and `Visibility` columns to identify the status of these administrative units.

<figure><img src="/files/nxpCgSQ7Rg7tm21aidk8" alt=""><figcaption><p>Administrative Unit</p></figcaption></figure>

## Issues

Issues pane contains identified issues on the device object.

![Issues](/files/vhkDzetCsJfLEzOBig6z)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.forestall.io/fsprotect/azure-identities/devices.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.