{
  "schemaVersion": "1.0",
  "source": "MicrosoftEntraID",
  "collector": {
    "name": "IdentityGuard Entra Collector",
    "version": "0.1-demo",
    "collectedAtUtc": "2026-09-12T08:55:00Z",
    "anonymized": true
  },
  "tenant": {
    "displayName": "Contoso Hybrid Demo",
    "tenantId": "demo-tenant"
  },
  "legacyAuthenticationEnabled": true,
  "users": [
    {
      "displayName": "Alex Admin",
      "userPrincipalName": "alex.admin@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": true,
      "roles": [
        "Global Administrator"
      ],
      "mfaRegistered": false,
      "mfaDataAvailable": true,
      "lastSignInDays": 2,
      "conditionalAccessCovered": false,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Taylor Security",
      "userPrincipalName": "taylor.security@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": true,
      "roles": [
        "Security Administrator",
        "Conditional Access Administrator"
      ],
      "mfaRegistered": true,
      "mfaDataAvailable": true,
      "lastSignInDays": 4,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Jordan Legacy",
      "userPrincipalName": "jordan.legacy@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": false,
      "roles": [],
      "mfaRegistered": true,
      "mfaDataAvailable": true,
      "lastSignInDays": 3,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Morgan CloudStale",
      "userPrincipalName": "morgan.cloudstale@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": false,
      "roles": [],
      "mfaRegistered": true,
      "mfaDataAvailable": true,
      "lastSignInDays": 160,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Riley ADStale",
      "userPrincipalName": "riley.adstale@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": false,
      "roles": [],
      "mfaRegistered": true,
      "mfaDataAvailable": true,
      "lastSignInDays": 5,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Casey Lifecycle",
      "userPrincipalName": "casey.lifecycle@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": false,
      "roles": [],
      "mfaRegistered": true,
      "mfaDataAvailable": true,
      "lastSignInDays": 8,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Svc Hybrid",
      "userPrincipalName": "svc.hybrid@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": true,
      "roles": [
        "User Administrator"
      ],
      "mfaRegistered": false,
      "mfaDataAvailable": true,
      "lastSignInDays": 1,
      "conditionalAccessCovered": true,
      "serviceAccount": true,
      "credentialAgeDays": 420
    },
    {
      "displayName": "Guest Partner",
      "userPrincipalName": "guest.partner@external-demo.invalid",
      "userType": "Guest",
      "enabled": true,
      "isPrivileged": false,
      "roles": [],
      "mfaRegistered": true,
      "mfaDataAvailable": true,
      "lastSignInDays": 145,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Normal User 1",
      "userPrincipalName": "user01@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": false,
      "roles": [],
      "mfaRegistered": true,
      "mfaDataAvailable": true,
      "lastSignInDays": 6,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    },
    {
      "displayName": "Normal User 2",
      "userPrincipalName": "user02@contoso-demo.invalid",
      "userType": "Member",
      "enabled": true,
      "isPrivileged": false,
      "roles": [],
      "mfaRegistered": false,
      "mfaDataAvailable": true,
      "lastSignInDays": 12,
      "conditionalAccessCovered": true,
      "serviceAccount": false,
      "credentialAgeDays": 0
    }
  ],
  "applications": [
    {
      "name": "Legacy Directory Tool",
      "appId": "demo-app-001",
      "permissions": [
        "Directory.ReadWrite.All",
        "User.ReadWrite.All"
      ],
      "credentialAgeDays": 365,
      "lastActivityDays": 5
    },
    {
      "name": "Old Test App",
      "appId": "demo-app-002",
      "permissions": [
        "User.Read.All"
      ],
      "credentialAgeDays": 90,
      "lastActivityDays": 220
    }
  ],
  "conditionalAccess": {
    "policies": [
      {
        "name": "Require MFA for Admins",
        "enabled": true,
        "state": "enabled"
      },
      {
        "name": "Block Legacy Authentication",
        "enabled": true,
        "state": "enabled"
      }
    ],
    "excludedUsers": 1,
    "excludedGroups": 0,
    "coverageMethod": "Synthetic demo"
  },
  "governance": {
    "privilegedAccessReviews": false,
    "guestAccessReviews": false
  }
}