Added Risk Detections Report and List Risky Users

src/_nav.jsx

@@ -45,6 +45,11 @@ const _nav = [
         name: 'Users',
         to: '/identity/administration/users',
       },
+      {
+        component: CNavItem,
+        name: 'Risky Users',
+        to: '/identity/administration/risky-users',
+      },
       {
         component: CNavItem,
         name: 'Groups',
@@ -114,6 +119,11 @@ const _nav = [
         name: 'AAD Connect Report',
         to: '/identity/reports/azure-ad-connect-report',
       },
+      {
+        component: CNavItem,
+        name: 'Risk Detections',
+        to: '/identity/reports/risk-detections',
+      },
     ],
   },
   {

src/importsMap.jsx

@@ -15,6 +15,7 @@ import React from 'react'
   "/identity/administration/jit-admin": React.lazy(() => import('./views/identity/administration/DeployJITAdmin')), 
   "/identity/administration/ViewBec": React.lazy(() => import('./views/identity/administration/ViewBEC')), 
   "/identity/administration/users": React.lazy(() => import('./views/identity/administration/Users')), 
+  "/identity/administration/risky-users": React.lazy(() => import('./views/identity/administration/RiskyUsers')), 
   "/identity/administration/devices": React.lazy(() => import('./views/identity/administration/Devices')), 
   "/identity/administration/groups/add": React.lazy(() => import('./views/identity/administration/AddGroup')), 
   "/identity/administration/group-templates": React.lazy(() => import('./views/identity/administration/GroupTemplates')), 
@@ -32,6 +33,7 @@ import React from 'react'
   "/identity/reports/inactive-users-report": React.lazy(() => import('./views/identity/reports/InactiveUsers')), 
   "/identity/reports/Signin-report": React.lazy(() => import('./views/identity/reports/SignIns')), 
   "/identity/reports/azure-ad-connect-report": React.lazy(() => import('./views/identity/reports/AzureADConnectReport')), 
+  "/identity/reports/risk-detections": React.lazy(() => import('./views/identity/reports/RiskDetections')), 
   "/tenant/administration/tenants": React.lazy(() => import('./views/tenant/administration/Tenants')), 
   "/tenant/administration/tenants/edit": React.lazy(() => import('./views/tenant/administration/EditTenant')), 
   "/tenant/administration/partner-relationships": React.lazy(() => import('./views/tenant/administration/PartnerRelationships')), 

src/routes.json

@@ -99,6 +99,12 @@
     "component": "views/identity/administration/Users",
     "allowedRoles": ["admin", "editor", "readonly"]
   },
+  {
+    "path": "/identity/administration/risky-users",
+    "name": "Risky Users",
+    "component": "views/identity/administration/RiskyUsers",
+    "allowedRoles": ["admin", "editor", "readonly"]
+  },
   {
     "path": "/identity/administration/devices",
     "name": "Devices",
@@ -206,6 +212,12 @@
     "component": "views/identity/reports/AzureADConnectReport",
     "allowedRoles": ["admin", "editor", "readonly"]
   },
+  {
+    "path": "/identity/reports/risk-detections",
+    "name": "Risk Detections",
+    "component": "views/identity/reports/RiskDetections",
+    "allowedRoles": ["admin", "editor", "readonly"]
+  },
   {
     "path": "/tenant",
     "name": "Tenant",

src/views/identity/administration/RiskyUsers.jsx

@@ -0,0 +1,103 @@
+import { useSelector } from 'react-redux'
+import { CippPageList } from 'src/components/layout'
+
+const columns = [
+  {
+    name: 'Risk Last Updated Date',
+    selector: (row) => row['riskLastUpdatedDateTime'],
+    sortable: true,
+    exportSelector: 'riskLastUpdatedDateTime',
+  },
+  {
+    name: 'User Principal Name',
+    selector: (row) => row['userPrincipalName'],
+    sortable: true,
+    exportSelector: 'userPrincipalName',
+  },
+  {
+    name: 'Risk Level',
+    selector: (row) => row['riskLevel'],
+    sortable: true,
+    exportSelector: 'riskLevel',
+  },
+  {
+    name: 'Risk State',
+    selector: (row) => row['riskState'],
+    sortable: true,
+    exportSelector: 'riskState',
+  },
+  {
+    name: 'Risk Detail',
+    selector: (row) => row['riskDetail'],
+    sortable: true,
+    exportSelector: 'riskDetail',
+  },
+  {
+    name: 'isProcessing',
+    selector: (row) => row['isProcessing'],
+    sortable: true,
+    exportSelector: 'isProcessing',
+  },
+  {
+    name: 'isDeleted',
+    selector: (row) => row['isDeleted'],
+    sortable: true,
+    exportSelector: 'isDeleted',
+  },
+]
+
+const RiskyUsers = () => {
+  const tenant = useSelector((state) => state.app.currentTenant)
+
+  return (
+    <>
+      <CippPageList
+        title="Risky Users"
+        capabilities={{ allTenants: true, helpContext: 'https://google.com' }}
+        datatable={{
+          filterlist: [
+            {
+              filterName: 'State: none',
+              filter: 'Complex: riskState eq none',
+            },
+            {
+              filterName: 'State: atRisk',
+              filter: 'Complex: riskState eq atRisk',
+            },
+            {
+              filterName: 'State: confirmedCompromised',
+              filter: 'Complex: riskState eq confirmedCompromised',
+            },
+            {
+              filterName: 'State: confirmedSafe',
+              filter: 'Complex: riskState eq confirmedSafe',
+            },
+            {
+              filterName: 'State: dismissed',
+              filter: 'Complex: riskState eq dismissed',
+            },
+            {
+              filterName: 'State: remediated',
+              filter: 'Complex: riskState eq remediated',
+            },
+            {
+              filterName: 'State: unknownFutureValue',
+              filter: 'Complex: riskState eq unknownFutureValue',
+            },
+          ],
+          columns: columns,
+          path: `api/ListGraphRequest`,
+          reportName: `${tenant?.defaultDomainName}-ListRiskyUsers`,
+          params: {
+            TenantFilter: tenant?.defaultDomainName,
+            Endpoint: `identityProtection/riskyUsers`,
+            $count: true,
+            $orderby: 'riskLastUpdatedDateTime',
+          },
+        }}
+      />
+    </>
+  )
+}
+
+export default RiskyUsers

src/views/identity/reports/RiskDetections.jsx

@@ -0,0 +1,125 @@
+import { useSelector } from 'react-redux'
+import { CippPageList } from 'src/components/layout'
+import { CellTip } from 'src/components/tables'
+
+const columns = [
+  {
+    name: 'Detected Date',
+    selector: (row) => row['detectedDateTime'],
+    sortable: true,
+    exportSelector: 'detectedDateTime',
+  },
+  {
+    name: 'User Principal Name',
+    selector: (row) => row['userPrincipalName'],
+    sortable: true,
+    exportSelector: 'userPrincipalName',
+  },
+  {
+    name: 'Location',
+    selector: (row) => `${row.location?.city} - ${row.location?.countryOrRegion}`,
+    sortable: true,
+    exportSelector: 'Location',
+    cell: (row) => CellTip(`${row.location?.city} - ${row.location?.countryOrRegion}`),
+  },
+  {
+    name: 'IP Address',
+    selector: (row) => row['ipAddress'],
+    sortable: true,
+    exportSelector: 'ipAddress',
+  },
+  {
+    name: 'Risk State',
+    selector: (row) => row['riskState'],
+    sortable: true,
+    exportSelector: 'riskState',
+  },
+  {
+    name: 'Risk Detail',
+    selector: (row) => row['riskDetail'],
+    sortable: true,
+    exportSelector: 'riskDetail',
+  },
+  {
+    name: 'Risk Level',
+    selector: (row) => row['riskLevel'],
+    sortable: true,
+    exportSelector: 'riskLevel',
+  },
+  {
+    name: 'Risk Type',
+    selector: (row) => row['riskType'],
+    sortable: true,
+    exportSelector: 'riskType',
+  },
+  {
+    name: 'Risk Event Type',
+    selector: (row) => row['riskEventType'],
+    sortable: true,
+    exportSelector: 'riskEventType',
+  },
+  {
+    name: 'Detection Type',
+    selector: (row) => row['detectionTimingType'],
+    sortable: true,
+    exportSelector: 'detectionTimingType',
+  },
+  {
+    name: 'Activity',
+    selector: (row) => row['activity'],
+    sortable: true,
+    exportSelector: 'activity',
+  },
+]
+
+const RiskDetections = () => {
+  const tenant = useSelector((state) => state.app.currentTenant)
+
+  return (
+    <>
+      <CippPageList
+        title="Risk Detection Report"
+        capabilities={{ allTenants: true, helpContext: 'https://google.com' }}
+        datatable={{
+          filterlist: [
+            {
+              filterName: 'State: atRisk',
+              filter: 'Complex: riskState eq atRisk',
+            },
+            {
+              filterName: 'State: confirmedCompromised',
+              filter: 'Complex: riskState eq confirmedCompromised',
+            },
+            {
+              filterName: 'State: confirmedSafe',
+              filter: 'Complex: riskState eq confirmedSafe',
+            },
+            {
+              filterName: 'State: dismissed',
+              filter: 'Complex: riskState eq dismissed',
+            },
+            {
+              filterName: 'State: remediated',
+              filter: 'Complex: riskState eq remediated',
+            },
+            {
+              filterName: 'State: unknownFutureValue',
+              filter: 'Complex: riskState eq unknownFutureValue',
+            },
+          ],
+          columns: columns,
+          path: `api/ListGraphRequest`,
+          reportName: `${tenant?.defaultDomainName}-RiskDetections-Report`,
+          params: {
+            TenantFilter: tenant?.defaultDomainName,
+            Endpoint: `identityProtection/riskDetections`,
+            $count: true,
+            $orderby: 'detectedDateTime',
+          },
+        }}
+      />
+    </>
+  )
+}
+
+export default RiskDetections