Office 365: Users w/o ATP
submitted
A
Addison Caldwell
This is helpful to someone who's trying to obtain/maintain visibility into users without Advanced Threat Protection in an organization's M365 instance. This is a good Metric for QBRs, recurring site reviews, and an onboarding report. This Metric can also be used to create a pointed Actionable Alert that helps to maintain ATP as a security setting.
Users[? !contains(Assigned_Products,
hreat
)].displayName