Maester Packs
LowScript packFree

User Attributes

Checks that Microsoft Entra users have the attributes HR processes, dynamic groups and licensing depend on, that those values are formatted consistently, and that they use your approved values and office locations.

Version
0.5.0
Tests
26
Connectors
0
Published
5 Nov 2026

DevClate · devclate.user-attributes · 0 stars · Open source · MIT

PowerShell 
Install-MtPack DevClate/maester-pack-ua

Install only packs from sources you trust. This pack is made by DevClate, not by Maester. The site only indexes and scans it: Install-MtPack downloads it straight from github.com/DevClate/maester-pack-ua.

maester-packs.lock.json entry 
{  "Id": "devclate.user-attributes",  "Source": "DevClate/maester-pack-ua",  "Version": "0.5.0",  "Commit": "b517a31d37e07d9c9cb11bf6bf582eaec603ac4d",  "Digest": "sha256:d8b91b6f76225c01279e09ba6b104e5f32e9fdcdbd4f344bfb8d6b2bddeeef92"}

← All tests

MP.CLT.UA.1015 All member users have a mobile phone.

Severity: LowGraph

Checks that every enabled member user has a mobile phone number.

Organisations that issue company phones, or that need to reach staff out of hours, often require a mobile number on every account so it shows in the address book and on the profile card and can feed on-call, emergency-notification and HR systems. This attribute is the directory's mobile number. It is not the phone a user registered for MFA or self-service password reset, which is stored separately and is not checked here.

If some staff have no company mobile, exempt them with ExcludedGroups, or disable this test. MP.CLT.UA.1011 checks that the numbers that are set use international format.

Remediation action

  1. In the Microsoft Entra admin center, go to Entra ID > Users and open each user listed below.
  2. Select Edit properties > Contact info, enter the Mobile phone in international format (for example +14255550100), and save.
  3. For many users, set it with PowerShell: Update-MgUser -UserId <UPN> -MobilePhone '+14255550100'.
  4. For users synced from Active Directory or provisioned from an HR system, fix the value at the source (the AD mobile attribute, or the HR record).

Related links

%TestResult%