sentinelone-users
Enumerate users in the SentinelOne service.
sentinelone-users [profile=PROFILE]
- profile=PROFILE
- Connect profile code of SentinelOne
Output Fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | SentinelOne connect profile code |
| scope | String | Scope | e.g. account |
| id | String | ID | e.g. 1234567890123456789 |
| full_name | String | Full name | |
| String | demo@logpresso.com | ||
| lowest_role | String | Lowest role | e.g. Admin, IR Team |
| is_system | Boolean | Is system | true or false |
| email_verified | Boolean | Is email verified | true or false |
| source | String | Source | e.g. mgmt, sso_saml |
| mfa_status | String | MFA status | e.g. configured |
| is_mfa_enabled | Boolean | Is MFA enabled | true or false |
| is_mfa_configured | Boolean | Is MFA configured | true or false |
| date_joined | Date | Date joined | |
| first_login | Date | First login | |
| can_generate_api_token | Boolean | Can generate API token | true or false |
| api_token_created | Date | API token created | |
| api_token_expiry | Date | API token expiry | |
| email_readonly | Boolean | Is email readonly | true or false |
| full_name_readonly | Boolean | Is full name readonly | true or false |
| groups_readonly | Boolean | Is groups readonly | true or false |