Questions tagged [azure-ad-graph-api]

Use this tag for Azure AD Graph API (see link [1] in details below) related questions (not Microsoft Graph). The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects

Graph API supports the following common operations for a user object:

  • Create a new user in a directory
  • Get a user’s detailed properties, such as their groups
  • Update a user’s properties, such as their location and phone number, or change their password
  • Check a user’s group membership for role-based access
  • Disable a user’s account or delete it entirely

In addition to user objects, you can perform similar operations on other objects such as groups and applications.

Useful Links:

  1. Documentation
  2. MSDN: Azure AD Graph API Reference
  3. Microsoft Graph or Azure AD Graph
1920 questions
8
votes
2 answers

Azure AD add keys via Azure CLI

I'm trying to add a key in my Azure AD application using Azure CLI. But looking throught the Azure CLI API it seems that there is no such command. For exmaple: I'm trying to automate the task from the link below via Azure…
8
votes
1 answer

Azure Graph API C# Client - Unable to get user's Manager object

User's manager object is always null when i try to retrieve a user. But i get "objectId", which is the corresponding manager(user) GUID. I can use this GUID to get Manager from API calls or from https://graphexplorer.cloudapp.net but not from Graph…
Ranadheer Reddy
  • 4,202
  • 12
  • 55
  • 77
8
votes
1 answer

Access Azure Graph API on behalf of application rather than user

Following on from my previous question: Group claims with Azure AD and OAuth2 implicit grant in ADAL JS, I've have things set up so users can authenticate using Azure/ADAL JS and then I use the their token to access the Azure Graph API on behalf of…
7
votes
4 answers

"AADSTS900144: The request body must contain the following parameter: 'grant_type'.?

I built an app in my Azure ad b2c tenant and configured it as shown, but why can't I request an access token in postman? app registration API permissions postman screenshot Here are the links to the two documents I follow: Register a Microsoft Graph…
7
votes
3 answers

Error - Intent filter for: BrowserTabActivity is missing. While using AzureAD MSAL Lilbary

Integrating AzureAD SSO to my android app. I have registered an app on Azure portal & get the auth_config.json file against the same. Implemented the sample code step-by-step as mentioned in docs. But getting the below…
7
votes
2 answers

unique_name claim - which user attribute?

The id_token contains a claim whose name is unique_name. Its value appears to be the same as that of the upn claim. Which User entity attribute provides the value for this claim?
Marc
  • 953
  • 7
  • 17
7
votes
4 answers

How to get Microsoft Graph API Access token from Node Script?

I'd like to use this library to interact with the graph API for my AD - https://github.com/microsoftgraph/microsoft-graph-docs/blob/master/concepts/nodejs.md However, all of the existing javascript libraries I've found to return access tokens expect…
Abarnett
  • 317
  • 1
  • 5
  • 17
7
votes
2 answers

Azure AD B2C Token Issue

As an enterprise, we would like to use Azure AD B2C and we have internal and external users. Azure AD helps us manage our Azure users, corporate users and we can even add users with x@.onmicrosoft.com emails. When we wanted to use Azure AD B2C for…
7
votes
1 answer

B2C Custom Attributes not showing when created using Graph API directory schema API

Using the extension API documented here: https://msdn.microsoft.com/en-us/library/azure/ad/graph/howto/azure-ad-graph-api-directory-schema-extensions in conjuction with the B2C Graph Client…
7
votes
2 answers

Resource not found for the segment 'me'

i'm using Graph API to retrieve profile information of user who's currently logged in from the Azure AD, unfortunately i'm receiving the following error message :…
7
votes
2 answers

Programmatically assign users to Azure AD Application using Graph API

I am trying to write a script to assign users to an Azure AD application (servicePrincipal) using Graph API. I am testing this in my sandbox, where I have defined the app and assigned users to it. However, when I query the servicePrincipal, I don't…
babakh
  • 73
  • 1
  • 3
7
votes
3 answers

Minimum set of permissions required for checkMemberGroups Graph API in Azure

What is the minimum set of permissions require in AAD App to access graph API -checkMemberGroups ? Here are the list of permissions I tried with. Can this set be reduced any further? And am I missing any mandatory permissions? Delegated Permissions…
namrata
  • 2,235
  • 5
  • 28
  • 35
7
votes
0 answers

Filtering 'shared mailbox users' with Graph API on Office 365 tenants

I am listing the users in the Office 365 tenant using Graph API version 1.6 following this documentation. I would like to filter the Office 365 shared mailboxes that are referenced as users and then returned when requesting /users/. (ex.…
Benoit Patra
  • 4,355
  • 5
  • 30
  • 53
7
votes
1 answer

Sending Bearer Tokens to Web API via Postman

Update I have been able to get a Bearer token using instructions from this thread Here are the instructions in Postman: Url: https://login.windows.net/[tenantname].onmicrosoft.com/oauth2/token Type: POST Headers: none Body: form-data grant_type:…
Shailen Sukul
  • 491
  • 1
  • 7
  • 24
7
votes
4 answers

Get a list of groups that Azure AD user belongs to in claims

I am authenticating users of my web api against Azure Active Directory. Now I want to get a list of groups that this user belongs. I changed application manifest to include "groupMembershipClaims": "All", but all this does is to add claim…
jlp
  • 9,800
  • 16
  • 53
  • 74