Maester Packs
LowScript packFree

User Attributes

Checks that Microsoft Entra users have the attributes HR processes, dynamic groups and licensing depend on, that those values are formatted consistently, and that they use your approved values and office locations.

Version
0.5.0
Tests
26
Connectors
0
Published
5 Nov 2026

DevClate · devclate.user-attributes · 0 stars · Open source · MIT

PowerShell 
Install-MtPack DevClate/maester-pack-ua

Install only packs from sources you trust. This pack is made by DevClate, not by Maester. The site only indexes and scans it: Install-MtPack downloads it straight from github.com/DevClate/maester-pack-ua.

maester-packs.lock.json entry 
{  "Id": "devclate.user-attributes",  "Source": "DevClate/maester-pack-ua",  "Version": "0.5.0",  "Commit": "b517a31d37e07d9c9cb11bf6bf582eaec603ac4d",  "Digest": "sha256:d8b91b6f76225c01279e09ba6b104e5f32e9fdcdbd4f344bfb8d6b2bddeeef92"}

← All tests

MP.CLT.UA.1025 User business phone numbers are on the approved list.

Severity: LowGraph

Checks that every business phone number set on enabled member users is one of your approved values. Blank values are not checked here (the presence tests check those).

Business phone numbers appear in the address book, email signatures and the profile card, and are dialled by Teams and contact sync. A number that is not one of your approved main or desk numbers often belongs to a former employee or a personal phone.

The approved values come from businessPhones in CLT.UA.AllowedValues under GlobalSettings in maester-config.json (approved office locations count too), from the file named in CLT.UA.AllowedValuesFile, or from this test's own AllowedValues, which replaces the shared list for this test only. Until any are set, this test lists the values it finds and asks you to review them (Investigate) instead of failing.

Remediation action

  1. Review the values listed below and decide which are correct.

  2. Add the approved values to maester-config.json:

    { "GlobalSettings": { "CLT.UA.AllowedValues": { "businessPhones": ["+14255550100", "+12125550100"] } } }

  3. Change the users with a value that is not approved, in the Microsoft Entra admin center (Entra ID > Users > the user > Edit properties > Contact info > Business phone) or with PowerShell: Update-MgUser -UserId <UPN> -BusinessPhones '+14255550100'.

  4. For users synced from Active Directory or provisioned from an HR system, fix the value at the source (telephoneNumber in AD), because changes made in Microsoft Entra ID are overwritten at the next sync.

  5. If a value is correct but not listed, add it to the approved values rather than changing the user.

Related links

%TestResult%