Skip to Main Content
Liongard Library

Welcome to Liongard Library, where Lions share! This is a community-led space where Liongard users can come to teach and learn from one another.
Share custom Metrics, get inspired and see what’s trending in the Pride.

Pride Etiquette:
➕ Have great custom Metrics? Add them as entries!
🌟 Want to use a Metric? Copy the query and
follow this doc.
👍 Tried a Metric from the Library? Like it!
📣 Have a question or feedback on a Metric? Add a comment!
🔎 Not sure where to start? Learn about Metrics and how to write them.
💬 Need help writing a metric or want to help support others? Join the conversation in our Liongard Lounge #metrics slack channel.


🥴 See something off? Open a support chat to let us know.

Categories Microsoft 365
Created by De'Shard Brown
Created on Sep 30, 2021

M365: Non-Admin Users with MFA Enabled List

This is helpful to someone who's trying to obtain/maintain visibility into the non-admin users in an organization's M365 instance. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. Also, this Metric could be used to build a user audit with the intention of an end customer confirming that all looks as expected. This Metric can also be used to create a pointed Actionable Alert that helps to maintain visibility into changes to the list of Admin users with MFA disabled.


Query

Users[? Privileged == `No` && isMfaRegistered_r == `Enabled`].displayName

  • Attach files
  • John Larger
    Reply
    |
    Apr 21, 2022

    We believe this requires a P1 license or greater to return valid data. I believe the data print returns 'Unknown' for this value otherwise.

  • Austin B [QuoStar]
    Reply
    |
    Dec 8, 2021

    To filter out guests, add: && userType == `Member`

    Or: && userType != `Guest`


  • Charles Van Duynhoven
    Reply
    |
    Nov 22, 2021

    Looking for more (not a guest, active license is yes) --> https://share.liongard.com/ideas/LCCL-I-243

  • Charles Van Duynhoven
    Reply
    |
    Nov 22, 2021

    Need to add variable to NOT include Guest users