Action

Description

Required scopes

List Users

Retrieve a list of all users in the Microsoft Entra ID directory

Get User

Retrieve the properties and relationships of a specific user by ID or userPrincipalName

Create User

Create a new user in Microsoft Entra ID directory

Update User

Update the properties of a user in Microsoft Entra ID

Delete User

Delete a user from Microsoft Entra ID directory

List Groups

Retrieve a list of all groups in the Microsoft Entra ID directory

Get Group

Retrieve the properties of a specific group by ID

Create Group

Create a new group in Microsoft Entra ID

Update Group

Update the properties of a group in Microsoft Entra ID

Delete Group

Delete a group from Microsoft Entra ID

List Group Members

Retrieve the members of a group

Add Group Member

Add a member to a group

Remove Group Member

Remove a member from a group

List Organizations

Retrieve a list of organizations (tenants) associated with the authenticated user

Get Organization

Retrieve the properties of a specific organization (tenant) by ID

Update Organization

Update the properties of a specific organization (tenant)

List Applications

Retrieve a list of application registrations in Microsoft Entra ID

Get Application

Retrieve the properties of a specific application by ID

Create Application

Create a new application registration in Microsoft Entra ID

Update Application

Update the properties of an application in Microsoft Entra ID

Delete Application

Delete an application from Microsoft Entra ID

List Directory Roles

Retrieve a list of activated directory roles in Microsoft Entra ID

Get Directory Role

Retrieve the properties of a specific directory role by ID

List Directory Role Members

Retrieve the members of a directory role

Add Directory Role Member

Add a member to a directory role

Remove Directory Role Member

Remove a member from a directory role

List Role Templates

Retrieve a list of all directory role templates in Microsoft Entra ID

List Service Principals

Retrieve a list of service principals (enterprise applications) in Microsoft Entra ID

Get Service Principal

Retrieve the properties of a specific service principal by ID

Create Service Principal

Create a new service principal for an application in Microsoft Entra ID

Update Service Principal

Update the properties of a service principal in Microsoft Entra ID

Delete Service Principal

Delete a service principal from Microsoft Entra ID

List Service Principal App Role Assignments

Retrieve app role assignments granted to a service principal

Add App Role Assignment To Service Principal

Grant an app role to a service principal

Remove App Role Assignment From Service Principal

Remove an app role assignment from a service principal

List Conditional Access Policies

Retrieve a list of all conditional access policies in Microsoft Entra ID

Get Conditional Access Policy

Retrieve the properties of a specific conditional access policy by ID

Create Conditional Access Policy

Create a new conditional access policy in Microsoft Entra ID

Update Conditional Access Policy

Update the properties of a conditional access policy in Microsoft Entra ID

Delete Conditional Access Policy

Delete a conditional access policy from Microsoft Entra ID

List Named Locations

Retrieve a list of named locations used in conditional access policies

Get Named Location

Retrieve the properties of a specific named location by ID

Create IP Named Location

Create a new IP-based named location for conditional access

Create Country Named Location

Create a new country-based named location for conditional access

Delete Named Location

Delete a named location from Microsoft Entra ID

List Domains

Retrieve a list of domains associated with the Microsoft Entra ID tenant

Get Domain

Retrieve the properties of a specific domain by domain name

Create Domain

Add a new domain to Microsoft Entra ID

Delete Domain

Delete a domain from Microsoft Entra ID

Verify Domain

Verify a domain in Microsoft Entra ID

List Domain Verification DNS Records

Retrieve DNS records required to verify domain ownership

List Domain Service Configuration Records

Retrieve DNS records needed for services using the domain

List Devices

Retrieve a list of devices registered in Microsoft Entra ID

Get Device

Retrieve the properties of a specific device by ID

Update Device

Update the properties of a device in Microsoft Entra ID

Delete Device

Delete a device from Microsoft Entra ID

List Device Registered Owners

Retrieve the registered owners of a device

List Device Registered Users

Retrieve the registered users of a device

List Device Group Memberships

Retrieve the groups that a device is a member of

List OAuth2 Permission Grants

Retrieve a list of delegated permission grants in Microsoft Entra ID

Get OAuth2 Permission Grant

Retrieve a specific OAuth2 permission grant by ID

Create OAuth2 Permission Grant

Create a new OAuth2 permission grant (delegated permission consent)

Update OAuth2 Permission Grant

Update an existing OAuth2 permission grant

Delete OAuth2 Permission Grant

Delete an OAuth2 permission grant (revoke delegated permission consent)

List User App Role Assignments

Retrieve app role assignments for a specific user

Assign App Role To User

Assign an app role to a user

Remove App Role From User

Remove an app role assignment from a user