Azure AD

Azure Active Directory (now Microsoft Entra ID) is Microsoft's cloud-based identity and access management service. It helps organizations manage users, groups, and access to applications and resources across cloud and on-premises environments.

With the Azure AD integration in Studio, you can:

• Manage users: List, create, update, and delete user accounts in your directory
• Manage groups: Create and configure security groups and Microsoft 365 groups
• Control group membership: Add and remove members from groups programmatically
• Query directory data: Search and filter users and groups using OData expressions
• Automate onboarding/offboarding: Create new user accounts with initial passwords and enable/disable accounts as part of HR workflows

In Studio, the Azure AD integration enables your agents to programmatically manage your organization's identity infrastructure. This allows for automation scenarios such as provisioning new employees, updating user profiles in bulk, managing team group memberships, and auditing directory data. By connecting Studio with Azure AD, you can streamline identity lifecycle management and ensure your directory stays in sync with your organization's needs.

Usage Instructions

Integrate Azure Active Directory into your workflows. Create, update, and delete users and groups, manage group memberships, assign and remove licenses, reset passwords, revoke sign-in sessions, read sign-in and directory audit logs, grant and revoke app and directory roles, and read registered devices and conditional access policies. Device writes are not supported.

Actions

List Azure AD Users

List users in Azure AD (Microsoft Entra ID)

Input

Output

Get Azure AD User

Get a user by ID or user principal name from Azure AD

Input

Output

Create Azure AD User

Create a new user in Azure AD (Microsoft Entra ID)

Input

Output

Update Azure AD User

Update user properties in Azure AD (Microsoft Entra ID)

Input

Output

Delete Azure AD User

Delete a user from Azure AD (Microsoft Entra ID). The user is moved to a temporary container and can be restored within 30 days.

Input

Output

List Azure AD Groups

List groups in Azure AD (Microsoft Entra ID)

Input

Output

Get Azure AD Group

Get a group by ID from Azure AD (Microsoft Entra ID)

Input

Output

Create Azure AD Group

Create a new group in Azure AD (Microsoft Entra ID)

Input

Output

Update Azure AD Group

Update group properties in Azure AD (Microsoft Entra ID)

Input

Output

Delete Azure AD Group

Delete a group from Azure AD (Microsoft Entra ID). Microsoft 365 and security groups can be restored within 30 days.

Input

Output

List Azure AD Group Members

List members of a group in Azure AD (Microsoft Entra ID)

Input

Output

Add Azure AD Group Member

Add a member to a group in Azure AD (Microsoft Entra ID)

Input

Output

Remove Azure AD Group Member

Remove a member from a group in Azure AD (Microsoft Entra ID)

Input

Output

Assign Microsoft Entra ID License

Add or remove subscription licenses (SKUs) on a user in Microsoft Entra ID. Removing a license immediately revokes the access it granted to the associated services.

Input

Output

List Microsoft Entra ID User Licenses

List the subscription licenses assigned to a user in Microsoft Entra ID

Input

Output

List Microsoft Entra ID Subscribed SKUs

List the subscription SKUs the tenant owns, including how many license units are prepaid and how many are consumed

Input

Output

Revoke Microsoft Entra ID Sign-In Sessions

Invalidate every refresh token and session cookie issued to a user, forcing them to sign in again on all applications and devices. Revocation can take a few minutes to take effect and does not apply to external users.

Input

Output

Set Microsoft Entra ID User Password

Set a specific password on a user by updating their password profile. Cannot be used for federated users. Requires an administrator role in Microsoft Entra ID.

Input

Output

Reset Microsoft Entra ID User Password

Reset another user's password through their password authentication method. Leave the new password empty to have Microsoft generate one and return it. The user is prompted to change the password at their next sign-in. Cannot be run against your own account.

Input

Output

List Microsoft Entra ID Authentication Methods

List the authentication methods a user has registered, such as passwords, phone numbers, FIDO2 keys, and authenticator apps

Input

Output

List Microsoft Entra ID Sign-Ins

List sign-in events from the Microsoft Entra ID sign-in logs, newest first. Requires a Microsoft Entra ID P1 or P2 license. Apply a date filter to keep large queries from timing out.

Input

Output

List Microsoft Entra ID Directory Audits

List directory audit records showing who changed what in Microsoft Entra ID, such as user creation, group membership changes, and role assignments

Input

Output

List Microsoft Entra ID User App Role Assignments

List the application role assignments granted to a user, including assignments the user inherits from groups they are a direct member of

Input

Output

Grant Microsoft Entra ID App Role To User

Grant a user an application role on a service principal, giving them access to that application

Input

Output

Revoke Microsoft Entra ID App Role From User

Revoke an application role assignment from a user, removing their access to that application. Takes the assignment's own ID, not the app role ID.

Input

Output

List Microsoft Entra ID Service Principals

List the enterprise applications and service principals in the tenant, including the app roles each one exposes

Input

Output

List Microsoft Entra ID Application Assignments

List every user, group, and service principal assigned to an application, by reading the app role assignments on its service principal. Recently granted or removed assignments can take time to appear.

Input

Output

List Microsoft Entra ID Directory Roles

List the administrator roles that are activated in the tenant, such as Global Administrator and User Administrator. Roles that have never been activated are not returned.

Input

Output

List Microsoft Entra ID Directory Role Members

List the principals holding an administrator role. Returns up to 1000 members; this endpoint does not support paging.

Input

Output

Add Microsoft Entra ID Directory Role Member

Grant a user an administrator role in Microsoft Entra ID. This is a privileged change that expands what the user can do across the tenant.

Input

Output

Remove Microsoft Entra ID Directory Role Member

Revoke an administrator role from a user in Microsoft Entra ID. Removes only the role membership; the user account itself is not deleted.

Input

Output

List Microsoft Entra ID Devices

List the devices registered in Microsoft Entra ID

Input

Output

Get Microsoft Entra ID Device

Get a registered device by its object ID from Microsoft Entra ID

Input

Output

List Microsoft Entra ID User Devices

List the devices a user has registered or owns. Devices the caller cannot read are returned with only their ID and the remaining fields null.

Input

Output

List Microsoft Entra ID Conditional Access Policies

List the conditional access policies configured in the tenant, including their state and the conditions and controls they enforce. Read-only.

Input

Output

Get Microsoft Entra ID Conditional Access Policy

Get a single conditional access policy by ID, including the conditions it matches and the controls it enforces. Read-only.

Input

Output