Connectors
Identity & Access Management
Microsoft Entra ID
Identity platform: users, groups, applications, and directory role management
- Signs in with
- OAuth 2.0 sign-in
- Runs on
- Cloud or On-Prem Worker
- Operations
- 113
- Ready-made triggers
- 14
Connect Microsoft Entra ID
- In Neblex open Connect › Connections and click Connect a Service.
- Choose Microsoft Entra ID and whether the connection is shared across the workspace or used in one project.
- Click Authorize and approve access in the window that opens. The connection is created.
For services offered under Connect a Service you only sign in and approve access. Otherwise use Connect with OAuth2 with your own OAuth app. See Authorize with OAuth.
There are no fields to fill in: you sign in to Microsoft Entra ID and approve access.
Triggers
Start a flow when something changes in Microsoft Entra ID: add a Poll for changes trigger, choose Microsoft Entra ID and pick the event.
| Event | What it does | How |
|---|---|---|
| New or updated directoryobjects directoryobject | Fires for each directoryobjects directoryobject that appears or changes since the last check. | Checks for changes |
| New or updated groups directoryobject | Fires for each groups directoryobject that appears or changes since the last check. | Checks for changes |
| New or updated groups group | Fires for each groups group that appears or changes since the last check. | Checks for changes |
| New or updated organization organization | Fires for each organization organization that appears or changes since the last check. | Checks for changes |
| New or updated users directoryobject | Fires for each users directoryobject that appears or changes since the last check. | Checks for changes |
| New or updated users licensedetail | Fires for each users licensedetail that appears or changes since the last check. | Checks for changes |
| New or updated users user | Fires for each users user that appears or changes since the last check. | Checks for changes |
| New directoryobjects directoryobject | Fires for each directoryobjects directoryobject that appears since the last check. | Checks for changes |
| New groups directoryobject | Fires for each groups directoryobject that appears since the last check. | Checks for changes |
| New groups group | Fires for each groups group created since the last check. | Checks for changes by createdDateTime |
| New organization organization | Fires for each organization organization created since the last check. | Checks for changes by createdDateTime |
| New users directoryobject | Fires for each users directoryobject that appears since the last check. | Checks for changes |
| New users licensedetail | Fires for each users licensedetail that appears since the last check. | Checks for changes |
| New users user | Fires for each users user created since the last check. | Checks for changes by createdDateTime |
Use it in a flow
- Open a flow, open the node library and search for Microsoft Entra ID.
- Drag it onto the canvas and choose an Operation and your connection.
- Map the operation's fields from earlier steps, or click Map with Matt.
- Use Test this step to see what it returns, then save.
Operations
113 operations in 17 groups. Each one is a step you can add to a flow.
DirectoryObjects DirectoryObject6
Add new entity to directoryObjectsdirectoryObjects_directoryObject_CreateDirectoryObject | POST | |
Delete directoryObjectdirectoryObjects_directoryObject_DeleteDirectoryObject | DELETE | Delete a directory object, for example, a group, user, application, or service principal. |
Get directoryObjectdirectoryObjects_directoryObject_GetDirectoryObject | GET | Retrieve the properties and relationships of a directoryObject object. |
Get entities from directoryObjectsdirectoryObjects_directoryObject_ListDirectoryObject | GET | |
Get the number of the resourcedirectoryObjects_GetCount_3210 | GET | |
Update entity in directoryObjectsdirectoryObjects_directoryObject_UpdateDirectoryObject | PATCH |
DirectoryObjects DirectoryObject Action3
Invoke action getAvailableExtensionPropertiesdirectoryObjects_getAvailableExtensionProperties | POST | Return all directory extension definitions that are registered in a directory, including through multitenant apps. |
Invoke action getByIdsdirectoryObjects_getByIds | POST | Return the directory objects specified in a list of IDs. |
Invoke action validatePropertiesdirectoryObjects_validateProperties | POST | Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. |
DirectoryObjects DirectoryObject Function1
Invoke function deltadirectoryObjects_delta | GET | Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. |
Groups DirectoryObject27
Add membersgroups_CreateRefMembers | POST | Add a member to a security or Microsoft 365 group. |
Add ownersgroups_CreateRefOwners | POST | Add a user or service principal to a Microsoft 365 or security group's owners. |
Get memberOf from groupsgroups_GetMemberOf | GET | Groups that this group is a member of. |
Get the items of type microsoft.graph.administrativeUnit in thegroups_ListMemberOf_AsAdministrativeUnit | GET | |
Get the items of type microsoft.graph.application in thegroups_ListMembers_AsApplication | GET | |
Get the items of type microsoft.graph.application in thegroups_ListOwners_AsApplication | GET | |
Get the items of type microsoft.graph.device in thegroups_ListMembers_AsDevice | GET | |
Get the items of type microsoft.graph.device in thegroups_ListOwners_AsDevice | GET | |
Get the items of type microsoft.graph.group in thegroups_ListMembers_AsGroup | GET | |
Get the items of type microsoft.graph.group in thegroups_ListOwners_AsGroup | GET | |
Get the items of type microsoft.graph.orgContact in thegroups_ListMembers_AsOrgContact | GET | |
Get the items of type microsoft.graph.orgContact in thegroups_ListOwners_AsOrgContact | GET | |
Get the items of type microsoft.graph.servicePrincipal in thegroups_ListMembers_AsServicePrincipal | GET | |
Get the items of type microsoft.graph.servicePrincipal in thegroups_ListOwners_AsServicePrincipal | GET | |
Get the items of type microsoft.graph.user in thegroups_ListOwners_AsUser | GET | |
Get the number of the resourcegroups_memberOf_GetCount_e9c5 | GET | |
Get the number of the resourcegroups_members_GetCount_e1e6 | GET | |
Get the number of the resourcegroups_owners_GetCount_9fe3 | GET | |
List group membersgroups_ListMembers | GET | Get a list of the group's direct members. |
List group membersgroups_ListMembers_AsUser | GET | Get a list of the group's direct members. |
List group membersgroups_ListRefMembers | GET | Get a list of the group's direct members. |
List group membershipsgroups_ListMemberOf | GET | Get security groups, administrative units, and admin roles that the security group is a direct member of, or administrative units and admin roles that the Microsoft 365 group is a direct... |
List group membershipsgroups_ListMemberOf_AsGroup | GET | Get security groups, administrative units, and admin roles that the security group is a direct member of, or administrative units and admin roles that the Microsoft 365 group is a direct... |
List group ownersgroups_ListOwners | GET | Retrieve a list of the group's owners. |
List group ownersgroups_ListRefOwners | GET | Retrieve a list of the group's owners. |
Remove group ownergroups_DeleteRefOwners | DELETE | Remove an owner from a Microsoft 365 group or a security group through the owners navigation property. |
Remove membergroups_DeleteRefMembers | DELETE | Remove a member from a group via the members navigation property. |
Groups Group9
Create groupgroups_group_CreateGroup | POST | Create a new group as specified in the request body. |
Delete groupgroups_group_DeleteGroup | DELETE | Delete a group. |
Delete groupgroups_group_DeleteGroupByUniqueName | DELETE | Delete a group. |
Get groupgroups_group_GetGroup | GET | Get the properties and relationships of a group object. |
Get groupgroups_group_GetGroupByUniqueName | GET | Get the properties and relationships of a group object. |
Get the number of the resourcegroups_GetCount_044a | GET | |
List groupsgroups_group_ListGroup | GET | List all the groups available in an organization, excluding dynamic distribution groups. |
Upsert groupgroups_group_UpdateGroup | PATCH | Create a new group object if it doesn't exist, or update the properties of an existing group object. |
Upsert groupgroups_group_UpdateGroupByUniqueName | PATCH | Create a new group object if it doesn't exist, or update the properties of an existing group object. |
Groups Group Action5
Invoke action checkMemberGroupsgroups_group_checkMemberGroups | POST | Check for membership in a specified list of group IDs, and return from that list the IDs of groups where a specified object is a member. |
Invoke action getAvailableExtensionPropertiesgroups_getAvailableExtensionProperties | POST | Return all directory extension definitions that are registered in a directory, including through multitenant apps. |
Invoke action getByIdsgroups_getByIds | POST | Return the directory objects specified in a list of IDs. |
Invoke action restoregroups_group_restore | POST | Restore a recently deleted directory object from deleted items. |
Invoke action validatePropertiesgroups_validateProperties | POST | Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. |
Groups Group Function1
Invoke function deltagroups_delta | GET | Get newly created, updated, or deleted groups, including group membership changes, without having to perform a full read of the entire group collection. |
Groups ProfilePhoto6
Delete media content for the navigation property photo in groupsgroups_DeletePhotoContent | DELETE | |
Delete navigation property photo for groupsgroups_DeletePhoto | DELETE | |
Get media content for the navigation property photo from groupsgroups_GetPhotoContent | GET | |
Get photo from groupsgroups_GetPhoto | GET | |
Update media content for the navigation property photo in groupsgroups_UpdatePhotoContent | PUT | |
Update the navigation property photo in groupsgroups_UpdatePhoto | PATCH |
Organization Organization6
Add new entity to organizationorganization_organization_CreateOrganization | POST | |
Delete entity from organizationorganization_organization_DeleteOrganization | DELETE | |
Get organizationorganization_organization_GetOrganization | GET | Get the properties and relationships of the currently authenticated organization. |
Get the number of the resourceorganization_GetCount_9453 | GET | |
List organizationsorganization_organization_ListOrganization | GET | Retrieve a list of organization objects. |
Update organizationorganization_organization_UpdateOrganization | PATCH | Update the properties of the currently authenticated organization. |
Organization Organization Action3
Invoke action getAvailableExtensionPropertiesorganization_getAvailableExtensionProperties | POST | Return all directory extension definitions that are registered in a directory, including through multitenant apps. |
Invoke action getByIdsorganization_getByIds | POST | Return the directory objects specified in a list of IDs. |
Invoke action validatePropertiesorganization_validateProperties | POST | Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. |
Organization Organization Function1
Invoke function deltaorganization_delta | GET | Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. |
Users DirectoryObject15
Assign managerusers_UpdateRefManager | PUT | Assign a user's manager. |
Get directReports from usersusers_GetDirectReports | GET | The users and contacts that report to the user. |
Get memberOf from usersusers_GetMemberOf | GET | The groups and directory roles that the user is a member of. |
Get the items of type microsoft.graph.administrativeUnit in theusers_ListMemberOf_AsAdministrativeUnit | GET | |
Get the items of type microsoft.graph.directoryRole in theusers_ListMemberOf_AsDirectoryRole | GET | |
Get the items of type microsoft.graph.orgContact in theusers_ListDirectReports_AsOrgContact | GET | |
Get the items of type microsoft.graph.user in theusers_ListDirectReports_AsUser | GET | |
Get the number of the resourceusers_directReports_GetCount_0678 | GET | |
Get the number of the resourceusers_memberOf_GetCount_fc20 | GET | |
List a user's direct membershipsusers_ListMemberOf_AsGroup | GET | Get groups, directory roles, and administrative units that the user is a direct member of. |
List agentUser direct membershipsusers_ListMemberOf | GET | Get groups, directory roles, and administrative units that the agentUser is a direct member of. |
List directReports (for agentUser)users_ListDirectReports | GET | Get an agentUser's direct reports. |
List manager (for agentUser)users_GetManager | GET | Returns the user or organizational contact assigned as the agentUser's manager. |
List manager (for agentUser)users_GetRefManager | GET | Returns the user or organizational contact assigned as the agentUser's manager. |
Remove manager (for agentUser)users_DeleteRefManager | DELETE | Remove an agentUser's manager. |
Users LicenseDetail7
Create new navigation property to licenseDetails for usersusers_CreateLicenseDetails | POST | |
Delete navigation property licenseDetails for usersusers_DeleteLicenseDetails | DELETE | |
Get licenseDetails from usersusers_GetLicenseDetails | GET | A collection of this user's license details. |
Get licenseDetails from usersusers_ListLicenseDetails | GET | A collection of this user's license details. |
Get the number of the resourceusers_licenseDetails_GetCount_a83d | GET | |
Invoke function getTeamsLicensingDetailsusers_user_licenseDetails_getTeamsLicensingDetails | GET | Get the license status of a user in Microsoft Teams. |
Update the navigation property licenseDetails in usersusers_UpdateLicenseDetails | PATCH |
Users ProfilePhoto6
Delete media content for the navigation property photo in usersusers_DeletePhotoContent | DELETE | |
Delete navigation property photo for usersusers_DeletePhoto | DELETE | |
Get media content for the navigation property photo from usersusers_GetPhotoContent | GET | |
Get photo from usersusers_GetPhoto | GET | |
Update media content for the navigation property photo in usersusers_UpdatePhotoContent | PUT | |
Update the navigation property photo in usersusers_UpdatePhoto | PATCH |
Users User9
Create Userusers_user_CreateUser | POST | Create a new user. |
Delete a userusers_user_DeleteUser | DELETE | Delete a user object. |
Delete a userusers_user_DeleteUserByUserPrincipalName | DELETE | Delete a user object. |
Get a userusers_user_GetUser | GET | Retrieve the properties and relationships of user object. |
Get a userusers_user_GetUserByUserPrincipalName | GET | Retrieve the properties and relationships of user object. |
Get the number of the resourceusers_GetCount_ee47 | GET | |
List usersusers_user_ListUser | GET | Retrieve a list of user objects. |
Update userusers_user_UpdateUser | PATCH | Update the properties of a user object. |
Update userusers_user_UpdateUserByUserPrincipalName | PATCH | Update the properties of a user object. |
Users User Action7
Invoke action checkMemberGroupsusers_user_checkMemberGroups | POST | Check for membership in a specified list of group IDs, and return from that list the IDs of groups where a specified object is a member. |
Invoke action getAvailableExtensionPropertiesusers_getAvailableExtensionProperties | POST | Return all directory extension definitions that are registered in a directory, including through multitenant apps. |
Invoke action getByIdsusers_getByIds | POST | Return the directory objects specified in a list of IDs. |
Invoke action getMemberGroupsusers_user_getMemberGroups | POST | Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. |
Invoke action restoreusers_user_restore | POST | Restore a recently deleted directory object from deleted items. |
Invoke action revokeSignInSessionsusers_user_revokeSignInSessions | POST | Invalidates all the refresh tokens issued to applications for a user (and session cookies in a user's browser), by resetting the signInSessionsValidFromDateTime user property to the... |
Invoke action validatePropertiesusers_validateProperties | POST | Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. |
Users User Function1
Invoke function deltausers_delta | GET | Get newly created, updated, or deleted users without having to perform a full read of the entire user collection. |