How to get the exact reason why a Device is tagged SENSITIVE in MDI portal (https://security.microsoft.com)

Hello @Vinoth G ,
Thank you for reaching out.
In Microsoft Defender for Identity, the Sensitive tag on a device is automatically assigned based on identity risk and infrastructure role analysis, such as a device’s involvement in authentication paths, privileged account activity, or directory services operations. The portal does not expose an exact reason, rule, or event that triggered the tag, nor does it provide an audit trail for automatic tagging. This is by design, as the tagging is driven by multiple behavioral and topology signals rather than a single detection. To understand context, administrators can review the device’s role and related identity activity using Defender investigations and advanced hunting, but the specific tagging logic is not directly visible.