assets_guardian.plugins.microsoft365.compare

Functions

index_users(users)

Indexes users by their external identifier.

Classes

`Microsoft365DeletedUserComparisonRule`(**kwargs)	Detects deleted users in Microsoft365.
`Microsoft365NewUserComparisonRule`(**kwargs)	Detects new Microsoft365 users created or added.
`Microsoft365UserStatusComparisonRule`(**kwargs)	Detects user status changes (active/blocked) on Microsoft365.
`Microsoft365UserUserMfaComparaisonRule`(**kwargs)	Detects changes in Microsoft365 MFA.

class assets_guardian.plugins.microsoft365.compare.Microsoft365DeletedUserComparisonRule(**kwargs: Any)[source]

Bases: IComparisonRule

Detects deleted users in Microsoft365.

evaluate(old_entries: Iterable[Identity], new_entries: Iterable[Identity]) → Iterable[Finding][source]

Compares lists to identify deleted users.

Parameters:

old_entries – The old identities (baseline).
new_entries – The new collected identities.

Yields:

Finding – Detected discrepancy for each deleted user.

property description: str: Description of the rule.

property name: str: Name of the rule.

property severity: SeverityType: Severity level of the rule.

property target_entity: str: Entity targeted by the rule.

class assets_guardian.plugins.microsoft365.compare.Microsoft365NewUserComparisonRule(**kwargs: Any)[source]

Bases: IComparisonRule

Detects new Microsoft365 users created or added.

evaluate(old_entries: Iterable[Identity], new_entries: Iterable[Identity]) → Iterable[Finding][source]

Compares lists to identify new users.

Parameters:

old_entries – The old identities (baseline).
new_entries – The new collected identities.

Yields:

Finding – Detected discrepancy for each new user.

property description: str: Description of the rule.

property name: str: Name of the rule.

property severity: SeverityType: Severity level of the rule.

property target_entity: str: Entity targeted by the rule.

class assets_guardian.plugins.microsoft365.compare.Microsoft365UserStatusComparisonRule(**kwargs: Any)[source]

Bases: IComparisonRule

Detects user status changes (active/blocked) on Microsoft365.

evaluate(old_entries: Iterable[Identity], new_entries: Iterable[Identity]) → Iterable[Finding][source]

Compares lists to identify status changes.

Parameters:

old_entries – The old identities (baseline).
new_entries – The new collected identities.

Yields:

Finding – Detected discrepancy for each user whose status changed.

property description: str: Description of the rule.

property name: str: Name of the rule.

property severity: SeverityType: Severity level of the rule.

property target_entity: str: Entity targeted by the rule.

class assets_guardian.plugins.microsoft365.compare.Microsoft365UserUserMfaComparaisonRule(**kwargs: Any)[source]

Bases: IComparisonRule

Detects changes in Microsoft365 MFA.

evaluate(old_entries: Iterable[Identity], new_entries: Iterable[Identity]) → Iterable[Finding][source]

Compares lists to identify privilege changes.

Parameters:

old_entries – The old identities (baseline).
new_entries – The new collected identities.

Yields:

Finding – Detected discrepancy for each user whose MFA changed.

property description: str: Description of the rule.

property name: str: Name of the rule.

property severity: SeverityType: Severity level of the rule.

property target_entity: str: Entity targeted by the rule.

assets_guardian.plugins.microsoft365.compare.index_users(users: Iterable[Identity]) → dict[str, Identity][source]

Indexes users by their external identifier.

Parameters:: users – The user identities to index.
Returns:: Dictionary mapping external_id to the Identity object.
Return type:: dict[str, Identity]