> ## Documentation Index
> Fetch the complete documentation index at: https://bloodhound.specterops.io/llms.txt
> Use this file to discover all available pages before exploring further.

# AZGroup

<img noZoom src="https://mintcdn.com/specterops/tTIczgde9H07oLXf/assets/enterprise-AND-community-edition-pill-tag.svg?fit=max&auto=format&n=tTIczgde9H07oLXf&q=85&s=ad49a576589f4d2a8081df77d07fdf56" alt="Applies to BloodHound Enterprise and CE" width="482" height="45" data-path="assets/enterprise-AND-community-edition-pill-tag.svg" />

## Node properties

The node supports the properties of the table below.

<Note>
  Properties which are blank/null will not be shown in the Entity Panel.
</Note>

|                        |                                                                                                                                                                                                                                                                                                                                          |
| ---------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **Entity Panel name**  | **Description**                                                                                                                                                                                                                                                                                                                          |
| Tier Zero / High Value | BloodHound Enterprise: Whether the object is part of Tier Zero of the Microsoft's Active Directory Tier Model, or the Control Plane of Microsoft's Enterprise Access Model.  <br />  <br />BloodHound CE: Whether the object is currently marked as High Value. By default any object that belongs to Tier Zero is marked as High Value. |
| Display Name           | The display name for the object.                                                                                                                                                                                                                                                                                                         |
| Object ID              | The object's security identifier (SID), a unique identifier in the directory.                                                                                                                                                                                                                                                            |
| Admin Count            | Whether the object currently, or possibly ever has belonged to a certain set of highly privileged groups. For Active Directory nodes this is related to the AdminSDHolder container and the ProtectAdminGroups background task. Read more about that [here](https://specterops.io/resources/adminsdholder).                              |
| Created                | The time when the object was created in the directory.                                                                                                                                                                                                                                                                                   |
| Description            | The contents of the description field for the object.                                                                                                                                                                                                                                                                                    |
| Is Role Assignable     | Whether the group can be assigned to Azure roles. When set to "True," group members inherit role-based permissions. When set to "False," role assignments are not allowed for the group.                                                                                                                                                 |
| On-Prem Sync Enabled   | Whether the object is synchronized to on-premises Active Directory.                                                                                                                                                                                                                                                                      |
| Security Enabled       | Whether the group is a Security Principal, meaning it can be used to secure objects in Entra ID.                                                                                                                                                                                                                                         |
| Security Identifier    | -                                                                                                                                                                                                                                                                                                                                        |
| Tenant ID              | Unique identifier for the Azure tenant.                                                                                                                                                                                                                                                                                                  |