Profile reference

11 assessment profiles. Each discloses its packs, its explicitly declared check ids, and the resolved check set (declared plus pack-expanded).

Profile	Packs	Declared	Resolved checks
collaboration	collaboration	0	spo-anyone-link-expiration, spo-anyone-link-view, spo-default-link-specific, spo-default-link-view, spo-domain-restrictions, spo-onedrive-sharing-limited, spo-sharing-capability-limited, spo-unmanaged-device-access, spo-verification-reauth, teams-anonymous-lobby, teams-anonymous-start-disabled, teams-broadcast-not-always-record, teams-custom-apps-governed, teams-dialin-lobby, teams-email-integration-disabled, teams-external-access-per-domain, teams-external-control-disabled, teams-guest-access-restricted, teams-internal-auto-admit, teams-microsoft-apps-governed, teams-recording-disabled, teams-third-party-apps-governed, teams-unmanaged-inbound-blocked, teams-unmanaged-outbound-blocked
core	endpoint, identity	0	endpoint-compliance-noncompliance-action, endpoint-compliance-policy-assigned, endpoint-enrollment-coverage, endpoint-mde-connector, endpoint-security-baseline, endpoint-security-policy-coverage, ep-asr-rules, ep-bitlocker-policy, ep-compliance-enforcement, ep-mam-app-protection, ep-tamper-protection, id-access-reviews-scope, id-access-reviews-unused, id-ai-agents-risky-block, id-app-admin-consent-workflow, id-app-certificate-lifetime, id-app-expiring-credentials, id-app-ownerless-or-stale, id-app-password-addition-blocked, id-app-password-lifetime, id-app-registration-admin-only, id-app-risky-delegated-consent, id-app-user-consent-restricted, id-auth-authenticator-context, id-auth-methods-migration, id-auth-weak-methods-disabled, id-break-glass-exclusion, id-ca-device-code-block, id-ca-high-risk-signins, id-ca-high-risk-users, id-ca-legacy-auth-block, id-ca-managed-devices, id-ca-mfa-all-users, id-ca-mfa-registration-managed, id-ca-phishing-resistant-all, id-ca-phishing-resistant-privileged, id-ca-priv-gaps, id-ca-workload-identity, id-cross-tenant-defaults, id-cross-tenant-mfa-trust, id-dormant-privileged, id-entitlement-access-packages, id-ga-count-bounds, id-ga-finer-roles, id-guest-directory-access-limited, id-guest-invite-domains, id-guest-inviter-restricted, id-identity-protection-workload, id-idprotect-notify-high-risk, id-idprotect-off, id-logs-to-soc, id-number-matching, id-password-never-expire, id-pim-activation-controls, id-pim-ga-activation-alert, id-pim-ga-activation-approval, id-pim-no-outside-pam, id-pim-no-permanent-privileged, id-pim-other-activation-alert, id-pim-privileged-assignment-alert, id-pim-unused, id-priv-cloud-only, id-protective-plan-assignment, id-security-defaults-on, mde-onboard-gap, mde-sensor-health, xdr-incident-readiness
data-protection	data-protection	12	mdo-unified-audit-enabled, pur-communication-compliance-readiness, pur-dlp-enforcement-block, pur-dlp-locations-complete, pur-dlp-not-enforced, pur-dlp-notifications, pur-dlp-policy-present, pur-ediscovery-readiness, pur-insider-risk-readiness, pur-retention-policy-coverage, pur-sensitivity-auto-labeling, pur-sensitivity-labels-published
email	email	35	exo-dkim-enabled, exo-dmarc-agency-contact, exo-dmarc-federal-contact, exo-dmarc-published, exo-dmarc-reject, exo-external-sender-warnings, exo-forwarding-external-disabled, exo-mailbox-audit-enabled, exo-sharing-calendar-not-all-domains, exo-sharing-contact-not-all-domains, exo-smtp-auth-disabled, exo-spf-published, mdo-alert-policies-enabled, mdo-anti-spam-no-allowed-domains, mdo-audit-retention, mdo-connection-filter-no-ip-allow, mdo-connection-filter-no-safe-list, mdo-impersonation-domains-owned, mdo-impersonation-partner-domains, mdo-impersonation-users-protected, mdo-mailbox-intelligence, mdo-malware-file-filter, mdo-malware-zap, mdo-outbound-spam-forwarding-block, mdo-p2-policies-default, mdo-quarantine-policy, mdo-safe-attachments-block, mdo-safe-attachments-spo-teams, mdo-safe-documents, mdo-safe-links-block-list, mdo-safe-links-click-through, mdo-safe-links-click-tracking, mdo-safe-links-real-time-scan, mdo-safety-tips-enabled, mdo-spam-phish-not-inbox, mdo-transport-rule-external-forward, mdo-unified-audit-enabled, pur-dlp-enforcement-block, pur-dlp-locations-complete, pur-dlp-notifications, pur-dlp-policy-present, pur-endpoint-dlp
endpoint	endpoint	2	endpoint-compliance-noncompliance-action, endpoint-compliance-policy-assigned, endpoint-enrollment-coverage, endpoint-mde-connector, endpoint-security-baseline, endpoint-security-policy-coverage, ep-asr-rules, ep-bitlocker-policy, ep-compliance-enforcement, ep-mam-app-protection, ep-tamper-protection, mde-onboard-gap, mde-sensor-health, mdi-sensors-missing, xdr-incident-readiness
full	collaboration, data-protection, email, endpoint, identity, power-bi, power-platform, secops	52	endpoint-compliance-noncompliance-action, endpoint-compliance-policy-assigned, endpoint-enrollment-coverage, endpoint-mde-connector, endpoint-security-baseline, endpoint-security-policy-coverage, ep-asr-rules, ep-bitlocker-policy, ep-compliance-enforcement, ep-mam-app-protection, ep-tamper-protection, exo-dkim-enabled, exo-dmarc-agency-contact, exo-dmarc-federal-contact, exo-dmarc-published, exo-dmarc-reject, exo-external-sender-warnings, exo-forwarding-external-disabled, exo-mailbox-audit-enabled, exo-sharing-calendar-not-all-domains, exo-sharing-contact-not-all-domains, exo-smtp-auth-disabled, exo-spf-published, id-access-reviews-scope, id-access-reviews-unused, id-ai-agents-risky-block, id-app-admin-consent-workflow, id-app-certificate-lifetime, id-app-expiring-credentials, id-app-ownerless-or-stale, id-app-password-addition-blocked, id-app-password-lifetime, id-app-registration-admin-only, id-app-risky-delegated-consent, id-app-user-consent-restricted, id-auth-authenticator-context, id-auth-methods-migration, id-auth-weak-methods-disabled, id-break-glass-exclusion, id-ca-device-code-block, id-ca-high-risk-signins, id-ca-high-risk-users, id-ca-legacy-auth-block, id-ca-managed-devices, id-ca-mfa-all-users, id-ca-mfa-registration-managed, id-ca-phishing-resistant-all, id-ca-phishing-resistant-privileged, id-ca-priv-gaps, id-ca-workload-identity, id-cross-tenant-defaults, id-cross-tenant-mfa-trust, id-dormant-privileged, id-entitlement-access-packages, id-ga-count-bounds, id-ga-finer-roles, id-guest-directory-access-limited, id-guest-invite-domains, id-guest-inviter-restricted, id-identity-protection-workload, id-idprotect-notify-high-risk, id-idprotect-off, id-logs-to-soc, id-number-matching, id-password-never-expire, id-pim-activation-controls, id-pim-ga-activation-alert, id-pim-ga-activation-approval, id-pim-no-outside-pam, id-pim-no-permanent-privileged, id-pim-other-activation-alert, id-pim-privileged-assignment-alert, id-pim-unused, id-priv-cloud-only, id-protective-plan-assignment, id-security-defaults-on, mde-onboard-gap, mde-sensor-health, mdi-sensors-missing, mdo-alert-policies-enabled, mdo-anti-spam-no-allowed-domains, mdo-audit-retention, mdo-connection-filter-no-ip-allow, mdo-connection-filter-no-safe-list, mdo-impersonation-domains-owned, mdo-impersonation-partner-domains, mdo-impersonation-users-protected, mdo-mailbox-intelligence, mdo-malware-file-filter, mdo-malware-zap, mdo-outbound-spam-forwarding-block, mdo-p2-policies-default, mdo-quarantine-policy, mdo-safe-attachments-block, mdo-safe-attachments-spo-teams, mdo-safe-documents, mdo-safe-links-block-list, mdo-safe-links-click-through, mdo-safe-links-click-tracking, mdo-safe-links-real-time-scan, mdo-safety-tips-enabled, mdo-spam-phish-not-inbox, mdo-transport-rule-external-forward, mdo-unified-audit-enabled, pbi-export-controls, pbi-external-invite-disabled, pbi-guest-access-disabled, pbi-premium-capacity-governance, pbi-publish-to-web-disabled, pbi-python-r-visuals-disabled, pbi-resource-key-auth-blocked, pbi-sensitivity-labels-enabled, pbi-sp-api-restricted, pbi-sp-profiles-disabled, pp-dlp-all-environments, pp-dlp-nondefault-envs, pp-env-creation-admin-only, pp-pages-creation-admin-only, pp-share-with-everyone-disabled, pp-tenant-isolation-allowlist, pp-tenant-isolation-enabled, pp-trial-creation-admin-only, pur-communication-compliance-readiness, pur-dlp-enforcement-block, pur-dlp-locations-complete, pur-dlp-not-enforced, pur-dlp-notifications, pur-dlp-policy-present, pur-ediscovery-readiness, pur-endpoint-dlp, pur-insider-risk-readiness, pur-retention-policy-coverage, pur-sensitivity-auto-labeling, pur-sensitivity-labels-published, sen-analytics-rule-coverage, sen-ueba-not-enabled, spo-anyone-link-expiration, spo-anyone-link-view, spo-default-link-specific, spo-default-link-view, spo-domain-restrictions, spo-onedrive-sharing-limited, spo-sharing-capability-limited, spo-unmanaged-device-access, spo-verification-reauth, teams-anonymous-lobby, teams-anonymous-start-disabled, teams-broadcast-not-always-record, teams-custom-apps-governed, teams-dialin-lobby, teams-email-integration-disabled, teams-external-access-per-domain, teams-external-control-disabled, teams-guest-access-restricted, teams-internal-auto-admit, teams-microsoft-apps-governed, teams-recording-disabled, teams-third-party-apps-governed, teams-unmanaged-inbound-blocked, teams-unmanaged-outbound-blocked, xdr-incident-readiness
identity	identity	44	id-access-reviews-scope, id-access-reviews-unused, id-ai-agents-risky-block, id-app-admin-consent-workflow, id-app-certificate-lifetime, id-app-expiring-credentials, id-app-ownerless-or-stale, id-app-password-addition-blocked, id-app-password-lifetime, id-app-registration-admin-only, id-app-risky-delegated-consent, id-app-user-consent-restricted, id-auth-authenticator-context, id-auth-methods-migration, id-auth-weak-methods-disabled, id-break-glass-exclusion, id-ca-device-code-block, id-ca-high-risk-signins, id-ca-high-risk-users, id-ca-legacy-auth-block, id-ca-managed-devices, id-ca-mfa-all-users, id-ca-mfa-registration-managed, id-ca-phishing-resistant-all, id-ca-phishing-resistant-privileged, id-ca-priv-gaps, id-ca-workload-identity, id-cross-tenant-defaults, id-cross-tenant-mfa-trust, id-dormant-privileged, id-entitlement-access-packages, id-ga-count-bounds, id-ga-finer-roles, id-guest-directory-access-limited, id-guest-invite-domains, id-guest-inviter-restricted, id-identity-protection-workload, id-idprotect-notify-high-risk, id-idprotect-off, id-logs-to-soc, id-number-matching, id-password-never-expire, id-pim-activation-controls, id-pim-ga-activation-alert, id-pim-ga-activation-approval, id-pim-no-outside-pam, id-pim-no-permanent-privileged, id-pim-other-activation-alert, id-pim-privileged-assignment-alert, id-pim-unused, id-priv-cloud-only, id-protective-plan-assignment, id-security-defaults-on
power-bi	power-bi	0	pbi-export-controls, pbi-external-invite-disabled, pbi-guest-access-disabled, pbi-premium-capacity-governance, pbi-publish-to-web-disabled, pbi-python-r-visuals-disabled, pbi-resource-key-auth-blocked, pbi-sensitivity-labels-enabled, pbi-sp-api-restricted, pbi-sp-profiles-disabled
power-platform	power-platform	0	pp-dlp-all-environments, pp-dlp-nondefault-envs, pp-env-creation-admin-only, pp-pages-creation-admin-only, pp-share-with-everyone-disabled, pp-tenant-isolation-allowlist, pp-tenant-isolation-enabled, pp-trial-creation-admin-only
scuba	collaboration, data-protection, email, endpoint, identity, power-bi, power-platform, secops	0	endpoint-compliance-noncompliance-action, endpoint-compliance-policy-assigned, endpoint-enrollment-coverage, endpoint-mde-connector, endpoint-security-baseline, endpoint-security-policy-coverage, ep-asr-rules, ep-bitlocker-policy, ep-compliance-enforcement, ep-mam-app-protection, ep-tamper-protection, exo-dkim-enabled, exo-dmarc-agency-contact, exo-dmarc-federal-contact, exo-dmarc-published, exo-dmarc-reject, exo-external-sender-warnings, exo-forwarding-external-disabled, exo-mailbox-audit-enabled, exo-sharing-calendar-not-all-domains, exo-sharing-contact-not-all-domains, exo-smtp-auth-disabled, exo-spf-published, id-access-reviews-scope, id-access-reviews-unused, id-ai-agents-risky-block, id-app-admin-consent-workflow, id-app-certificate-lifetime, id-app-expiring-credentials, id-app-ownerless-or-stale, id-app-password-addition-blocked, id-app-password-lifetime, id-app-registration-admin-only, id-app-risky-delegated-consent, id-app-user-consent-restricted, id-auth-authenticator-context, id-auth-methods-migration, id-auth-weak-methods-disabled, id-break-glass-exclusion, id-ca-device-code-block, id-ca-high-risk-signins, id-ca-high-risk-users, id-ca-legacy-auth-block, id-ca-managed-devices, id-ca-mfa-all-users, id-ca-mfa-registration-managed, id-ca-phishing-resistant-all, id-ca-phishing-resistant-privileged, id-ca-priv-gaps, id-ca-workload-identity, id-cross-tenant-defaults, id-cross-tenant-mfa-trust, id-dormant-privileged, id-entitlement-access-packages, id-ga-count-bounds, id-ga-finer-roles, id-guest-directory-access-limited, id-guest-invite-domains, id-guest-inviter-restricted, id-identity-protection-workload, id-idprotect-notify-high-risk, id-idprotect-off, id-logs-to-soc, id-number-matching, id-password-never-expire, id-pim-activation-controls, id-pim-ga-activation-alert, id-pim-ga-activation-approval, id-pim-no-outside-pam, id-pim-no-permanent-privileged, id-pim-other-activation-alert, id-pim-privileged-assignment-alert, id-pim-unused, id-priv-cloud-only, id-protective-plan-assignment, id-security-defaults-on, mde-onboard-gap, mde-sensor-health, mdo-alert-policies-enabled, mdo-anti-spam-no-allowed-domains, mdo-audit-retention, mdo-connection-filter-no-ip-allow, mdo-connection-filter-no-safe-list, mdo-impersonation-domains-owned, mdo-impersonation-partner-domains, mdo-impersonation-users-protected, mdo-mailbox-intelligence, mdo-malware-file-filter, mdo-malware-zap, mdo-outbound-spam-forwarding-block, mdo-p2-policies-default, mdo-quarantine-policy, mdo-safe-attachments-block, mdo-safe-attachments-spo-teams, mdo-safe-documents, mdo-safe-links-block-list, mdo-safe-links-click-through, mdo-safe-links-click-tracking, mdo-safe-links-real-time-scan, mdo-safety-tips-enabled, mdo-spam-phish-not-inbox, mdo-transport-rule-external-forward, mdo-unified-audit-enabled, pbi-export-controls, pbi-external-invite-disabled, pbi-guest-access-disabled, pbi-premium-capacity-governance, pbi-publish-to-web-disabled, pbi-python-r-visuals-disabled, pbi-resource-key-auth-blocked, pbi-sensitivity-labels-enabled, pbi-sp-api-restricted, pbi-sp-profiles-disabled, pp-dlp-all-environments, pp-dlp-nondefault-envs, pp-env-creation-admin-only, pp-pages-creation-admin-only, pp-share-with-everyone-disabled, pp-tenant-isolation-allowlist, pp-tenant-isolation-enabled, pp-trial-creation-admin-only, pur-dlp-enforcement-block, pur-dlp-locations-complete, pur-dlp-notifications, pur-dlp-policy-present, pur-endpoint-dlp, sen-ueba-not-enabled, spo-anyone-link-expiration, spo-anyone-link-view, spo-default-link-specific, spo-default-link-view, spo-domain-restrictions, spo-onedrive-sharing-limited, spo-sharing-capability-limited, spo-unmanaged-device-access, spo-verification-reauth, teams-anonymous-lobby, teams-anonymous-start-disabled, teams-broadcast-not-always-record, teams-custom-apps-governed, teams-dialin-lobby, teams-email-integration-disabled, teams-external-access-per-domain, teams-external-control-disabled, teams-guest-access-restricted, teams-internal-auto-admit, teams-microsoft-apps-governed, teams-recording-disabled, teams-third-party-apps-governed, teams-unmanaged-inbound-blocked, teams-unmanaged-outbound-blocked, xdr-incident-readiness
secops	secops	2	sen-analytics-rule-coverage, sen-ueba-not-enabled