User enrichment

User enrichment is important to MDCA, especially when uploading firewall logs via snapshot reports, continuous uploads, and automatic log uploads.

Consider a standard firewall log, it may contain a username, but that username does not tie back to the Entra ID account. User enrichment attempts to make that match between the log username and Entra ID username.

This join to Entra ID allows us to also leverage user groups which are a requirement for excluding certain groups from MDCA.