{"id":439,"date":"2023-12-22T22:46:21","date_gmt":"2023-12-22T21:46:21","guid":{"rendered":"https:\/\/sparrowte.ch\/?p=439"},"modified":"2024-11-04T20:22:25","modified_gmt":"2024-11-04T19:22:25","slug":"diving-into-entra-id-systemlabels","status":"publish","type":"post","link":"https:\/\/sparrow365.de\/index.php\/en\/2023\/12\/22\/diving-into-entra-id-systemlabels\/","title":{"rendered":"Diving into Entra ID systemLabels"},"content":{"rendered":"

The Original Question<\/h2>\n
\n

I came here for an Answer, not some Blog Post!<\/em><\/strong><\/p>\n

\n

Okay geez, head directly to the GitHub Repo<\/a>
\nMaybe come back though, The journey is its own reward…<\/p>\n<\/blockquote>\n<\/blockquote>\n

One of my colleagues did not understand why Dynamic Groups were not being Processed and asked for help – Assumption being, that systemLabels referred to Defender for Endpoint Device Tags – a fair assumption, since the Words "Tags" and "Labels" mean a lot of things in the Microsoft 365 Universe.
\nUpon double checking, it became obvious rather quickly, that there is no relation and we moved on to a different Solution. But the question still irked me – what are systemLabels actually?<\/p>\n


<\/p>\n

Looking into Dynamic Group Membership Rules for devices<\/a> we only find a note:<\/p>\n

\"Everything<\/p>\n


<\/p>\n

Even the Graph API Documentation is similarly Vague:<\/p>\n

\"GraphAPIDocumentation.png\"<\/p>\n


<\/p>\n

If we fine tune our search to site:learn.microsoft.com "systemlabels"<\/em>, we find a lot of References to the general Device Object Schema, but never a comprehensive List what the actual values are.<\/p>\n

At least the Conditional Access Documentation gives us some Examples:<\/a><\/p>\n

\n

List of labels applied to the device by the system.
\nSome<\/strong> of the supported values are: <\/p>\n

    \n
  1. AzureResource: Windows VMs in Azure enabled with Microsoft Entra sign-in<\/a> <\/li>\n
  2. M365Managed: Devices managed using Microsoft Managed Desktop<\/a><\/li>\n
  3. MultiUser: Shared devices<\/a><\/li>\n<\/ol>\n<\/blockquote>\n


    <\/p>\n

    Keyword being Some<\/em><\/strong> – this is a word I do not like. <\/p>\n

    \n

    Before you ask – both ChatGPT and by extension bing cant do any better https:\/\/chat.openai.com\/share\/212b34dd-2ede-4311-914b-78f0e57cef52<\/a><\/p>\n<\/blockquote>\n


    <\/p>\n

    Now, for a sane Person the original question is answered, the Property has nothing to do with the Defender Labels – so we could stop here. But are those all the Values we could use? What possibilities are out there? I must go deeper<\/em><\/strong><\/p>\n


    <\/p>\n

    Casting wider into the Net<\/h2>\n

    Moving outside Microsofts Official Documentation, we find that I am unsurprisingly not the first one to ask this question. However, on the issue opened around the documentation<\/a> we only find Adam Gross<\/a> asking pretty much the same Question<\/a>…<\/p>\n

    At least we also find, that there used to be two additional systemLabels, but while history is interesting, it doesn’t really help much here.<\/p>\n

    \"JeffreyAppel\"<\/p>\n

    Courtesy of Jeffrey Appel<\/a><\/em><\/p>\n


    <\/p>\n

    20.000 Lines under the API<\/h2>\n

    My curiosity not being satisfied I wrote a script<\/a> to fetch the Information I want – sadly I could not find a single Example in the Tenants I have access to… So maybe there is Someone out there who might find a bit of time to check what might be out there…<\/p>\n

    If you do find something, please feel free to let me know through GitHub or LinkedIn, so we can share your knowledge with those weirdos who might care…<\/p>\n


    <\/p>\n

    I will not moderate comments and I do not want your email address – this post does not allow Comments.<\/p>\n

    If you are interested in the things I do follow me on LinkedIn<\/a>. <\/p>\n


    <\/p>\n","protected":false},"excerpt":{"rendered":"

    The Original Question I came here for an Answer, not some Blog Post! Okay geez, head directly to the GitHub Repo Maybe come back though, The journey is its own reward… One of my colleagues did not understand why Dynamic Groups were not being Processed and asked for help – Assumption being, that systemLabels referred… » weiterlesen<\/a><\/p>\n","protected":false},"author":2,"featured_media":446,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[76],"tags":[80,84,138,136,88,90,96,98,100,103,105,134],"class_list":["post-439","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-me-id-en","tag-aad-en","tag-azure-ad-en","tag-conditional-access","tag-dynamic-device-groups","tag-entra-en","tag-entra-id-en","tag-graph-en","tag-graph-api-en","tag-microsoft-graph-en","tag-powershell-en","tag-powershell-sdk-en","tag-systemlabels"],"_links":{"self":[{"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/posts\/439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/comments?post=439"}],"version-history":[{"count":7,"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/posts\/439\/revisions"}],"predecessor-version":[{"id":453,"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/posts\/439\/revisions\/453"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/media\/446"}],"wp:attachment":[{"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/media?parent=439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/categories?post=439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sparrow365.de\/index.php\/wp-json\/wp\/v2\/tags?post=439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}