In line with Microsoft 365 monitoring packs, it would be very interesting to be able to monitor Entra ID objects such as security groups, in order to detect changes in sensitive security groups, such as:
- top-level management
- groups regulating MFA exclusion
Monitoring the number of members would be a very good start, and being able to detect changes would be even better (to detect the replacement of a high-profile member by another, for example).
have a nice day !