What you can do with Microsoft Entra ID (formerly Azure AD)
Every task in plain language. Pick one, and we can help you get access.
4,496 things you can do
Microsoft Entra ID (formerly Azure AD)
Microsoft's cloud-based identity and access management service that helps employees sign in and access resources. Azure AD provides OAuth, OpenID Connect, SAML, and other identity protocols for securing applications and managing user identities.
Cybersecurity Management
Delete the risk prevention configurationUpdate the risk prevention configurationAdd a fraud protection providerDelete a fraud protection providerUpdate a fraud protection providerAdd a web application firewall providerDelete a web application firewall providerUpdate a web application firewall providerVerify a host with a WAF providerRecord a WAF verification resultDelete a WAF verification resultUpdate a WAF verification resultGet the BitLocker information protection rootList BitLocker recovery keysGet a BitLocker recovery keyCount BitLocker recovery keysGet fraud and risk prevention settingsList fraud protection providersGet a fraud protection providerCount fraud protection providersList web application firewall providersGet a web application firewall providerCount web application firewall providersList WAF verification resultsGet a WAF verification resultGet the WAF provider behind a verificationCount WAF verification resultsIdentity & Access Management
Delete the lifecycle workflows containerUpdate the lifecycle workflows containerCreate a custom task extensionDelete a custom task extensionUpdate a custom task extensionUpdate an extension creator's mailbox settingsUpdate an extension last editor's mailbox settingsDelete the lifecycle workflows deleted items containerPermanently delete a deleted workflowUpdate a deleted workflow creator's mailbox settingsUpdate a deleted workflow last editor's mailboxRun a deleted workflow on demand for usersRun a deleted workflow on demand with a scopeCancel an in-progress run of a deleted workflowClear the quarantine on a deleted workflowCreate a new version of a deleted workflowRestore a deleted lifecycle workflowResume a task result in a deleted workflow runUpdate mailbox settings of a run task result's userUpdate mailbox settings of a run's processed userResume a user's task result in a deleted workflow runUpdate mailbox settings of a nested run task userResume a task result found in a task reportUpdate mailbox settings of a task report outcome's userAdd a task to a deleted workflowRemove a task from a deleted workflowUpdate a task in a deleted workflowResume a task's result in a deleted workflowUpdate mailbox settings of a task outcome's userUpdate mailbox settings of a workflow's processed userResume a task result for a workflow user resultUpdate mailbox settings of a nested task outcome's userUpdate a workflow version creator's mailboxUpdate a workflow version last editor's mailboxAdd a task to a deleted workflow versionRemove a task from a deleted workflow versionUpdate a task in a deleted workflow versionResume a versioned task's resultUpdate mailbox settings of a versioned task's userDelete the lifecycle workflow insights resourceUpdate the lifecycle workflow insights resourceUpdate lifecycle workflow tenant settingsCreate a lifecycle workflowDelete a lifecycle workflowUpdate a lifecycle workflowUpdate mailbox settings of a workflow's creatorUpdate mailbox settings of a workflow's last editorRun a workflow on demand for usersRun a workflow on demand with a scopeCancel a queued or in-progress workflow runRelease a quarantined workflowCreate a new version of a workflowRun a workflow in preview modeRestore a deleted workflowResume a paused task in a workflow runUpdate mailbox settings of a run task result's userUpdate mailbox settings of a run's processed userResume a paused task for a user in a runUpdate mailbox settings from a user-level run task resultResume a paused task from a task reportUpdate mailbox settings of a task report result's userAdd a task to a workflowRemove a task from a workflowUpdate a task in a workflowResume a paused result of a workflow taskUpdate mailbox settings of a task result's userUpdate mailbox settings of a workflow's processed userResume a paused task for a workflow's user resultUpdate mailbox settings via a user's workflow task resultUpdate mailbox settings of a version's creatorUpdate mailbox settings of a version's last editorAdd a task to a workflow versionRemove a task from a workflow versionUpdate a task in a workflow versionResume a paused result of a versioned taskUpdate mailbox settings of a versioned task result's userResume a paused result of a template taskUpdate mailbox settings of a template task result's userRemove an owner from a service principal by owner idAdd an owner to a service principalRemove a service principal owner by reference URLAdd an organization entityDelete an organization entityUpdate the organization's settingsUnassign a token issuance policy by its IDAssign a token issuance policy to an appUnassign a token issuance policy by referenceCreate an app management policyDelete an app management policyUpdate an app management policyCreate a claims-mapping policyDelete a claims-mapping policyUpdate a claims-mapping policyCreate a role management policy assignmentDelete a role management policy assignmentUpdate a role management policy assignmentDelete a user's authentication rootUpdate a user's authentication rootRegister an email authentication methodRemove a user's email authentication methodChange a user's authentication email addressRegister an external MFA method for a userRemove a user's external MFA methodUpdate a user's external MFA methodRemove a user's FIDO2 security keyAdd a generic authentication method entryUpdate a generic authentication method entryReset a user's password as an adminRemove a Microsoft Authenticator registrationCreate a long-running authentication operationDelete a long-running authentication operationUpdate a long-running authentication operationAdd a password authentication methodAdd a phone authentication methodRemove a phone authentication methodChange a user's authentication phone numberTurn off SMS sign-in for a phoneTurn on SMS sign-in for a phoneRemove a macOS platform credentialRemove a software OATH TOTP appIssue a Temporary Access Pass to a userRevoke a user's Temporary Access PassRemove a Windows Hello for Business keyAdd a group to an expiration policyRemove a group from an expiration policyDelete the authentication flows policyTurn self-service sign-up on or offUnassign a token lifetime policy by idAssign a token lifetime policy to a service principalUnassign a token lifetime policy by reference queryAdd an identity provider (deprecated endpoint)Delete an identity provider (deprecated endpoint)Update an identity provider (deprecated endpoint)Delete the access review containerUpdate the access review containerCreate a new access review seriesReplace an access review schedule definitionDelete an access review seriesAdd an instance to an access review seriesDelete an access review instanceChange reviewers on a running access reviewAdd a contacted reviewer record to a reviewRemove a contacted reviewer from a reviewUpdate a contacted reviewer recordAdd a decision item to a review instanceDelete a decision from a review instanceRecord a decision on a review instance itemAdd an insight to a review decisionDelete an insight from a review decisionUpdate an insight on a review decisionAccept all recommendations on a reviewApply completed access review decisionsRecord review decisions in bulkReset all decisions on a review instanceRemind reviewers of an active access reviewStop an active access review instanceAdd a stage to a review instanceDelete a stage from a review instanceChange reviewers on an access review stageAdd a decision item to a review stageDelete a decision from a review stageApprove or deny an item in a review stageAdd an insight to a stage decisionDelete an insight from a stage decisionUpdate an insight on a stage decisionStop an in-progress access review stageStop an access review seriesCreate an access review history reportDelete an access review history reportUpdate an access review history reportAdd a run to a review history reportDelete a run of a review history reportUpdate a run of a review history reportGenerate a download link for review historyDelete the security defaults enforcement policyTurn security defaults on or offCreate an authentication events flowDelete an authentication events flowUpdate an authentication events flowLink an application to a user flowUnlink an application from a user flowUpdate an application link on a user flowLink an app via the self-service sign-up castUnlink an app via the self-service sign-up castUpdate an app link via the self-service sign-up castRemove an attribute from a sign-up flow by IDAdd an attribute to a sign-up flowRemove an attribute from a sign-up flow by referenceRemove an identity provider from a sign-up flow by IDAdd an identity provider to a sign-up flowRemove an identity provider from a sign-up flow by referenceCreate an authentication event listenerDelete an authentication event listenerUpdate an authentication event listenerAdd a key credential to a service principalAdd a client secret to a service principalCreate a token signing certificate for a service principalRemove a key credential from a service principalRemove a client secret from a service principalRestore a deleted service principalAdd a directory role templateDelete a directory role templateUpdate a directory role templateCreate a lifecycle policy under a groupDelete a lifecycle policy via a groupUpdate a group's lifecycle policyAdd a group to a lifecycle policyRemove a group from a lifecycle policyRemove a specific owner from an applicationAdd an owner to an applicationRemove an app owner by reference IDActivate a directory role from a templateDelete a directory role by object IDUpdate a directory role by object IDDelete a directory role by its role template IDUpdate a directory role by its role template IDCreate an API connectorDelete an API connectorUpdate an API connectorUpload a client certificate to an API connectorDelete the app consent approval containerUpdate the app consent approval containerCreate an app consent requestDelete an app consent requestUpdate an app consent requestAdd a user's request to an app consent requestDelete a user's consent requestUpdate a user's consent requestDelete the approval on a user consent requestUpdate the approval on a user consent requestAdd a stage to a consent approvalDelete a stage from a consent approvalRecord a decision on a consent approval stageInvite an external guest userCreate a token issuance policyDelete a token issuance policyUpdate a token issuance policyFederate a domain with an identity providerRemove federation from a domainUpdate a domain's federation settingsRegister a new applicationDelete an app registration by object IDUpdate or create an app registration by object IDUpload an application's logoRemove an application's logoDelete an app registration by its client (app) IDUpdate or create an app registration by client IDDelete an app registration by its unique nameUpsert an app registration by its unique nameCreate a new user accountDelete a user accountUpdate an existing user's profileDelete the privileged access rootUpdate the privileged access rootDelete the PIM for Groups containerUpdate the PIM for Groups containerCreate a PIM group assignment approvalDelete a PIM group assignment approvalUpdate a PIM group assignment approvalAdd a stage to an assignment approvalDelete a stage from an assignment approvalReview a stage of an assignment approvalCreate an active assignment instanceDelete an active assignment instanceUpdate an active assignment instanceRequest a PIM group assignmentDelete a PIM group assignment requestUpdate a PIM group assignment requestCancel a PIM group assignment requestCreate a PIM group assignment scheduleDelete a PIM group assignment scheduleUpdate a PIM group assignment scheduleCreate a group eligibility instanceDelete a group eligibility instanceUpdate a group eligibility instanceRequest PIM group eligibilityDelete a PIM group eligibility requestUpdate a PIM group eligibility requestCancel a PIM group eligibility requestCreate a PIM group eligibility scheduleDelete a PIM group eligibility scheduleUpdate a PIM group eligibility scheduleAdd a certificate key credential to an appAdd a client secret to an appRemove a certificate key credential from an appRemove a client secret from an appRestore a deleted app registrationSet the verified publisher on an appRemove the verified publisher from an appUnassign a specific app management policy by pathAssign an app management policy to an appUnassign an app management policy by referenceCreate a B2X self-service sign-up user flowDelete a B2X user flowUpdate a B2X user flowDelete the post-attribute-collection connectorUpdate the post-attribute-collection connectorLink an API connector to post-attribute collectionUnlink the post-attribute-collection connectorUpload a client certificate to the attribute connectorDelete the post-federation-signup connectorUpdate the post-federation-signup connectorLink an API connector to post-federation signupUnlink the post-federation-signup connectorUpload a client certificate to the federation connectorAdd a language to a user flowRemove a language from a user flowUpdate a language configurationCreate a default page for a user flow languageDelete a default page recordUpdate a default page recordReplace the content of a default pageDelete the content of a default pageCreate an override page for a user flow languageDelete an override pageUpdate an override page recordUpload customized content for an override pageDelete the content of an override pageAdd a user attribute to a user flowRemove an attribute from a user flowUpdate an attribute assignmentReorder the attributes a user flow collectsDetach one identity provider from a user flowLink an identity provider to a user flowUnlink an identity provider by referenceConfigure a new identity providerDelete an identity providerUpdate an identity providerGrant a user, group or app a role on a resource appRevoke a user, group or app's role on a resource appUpdate a role grant on a resource appGrant an application permission to a client appRevoke an application permission from a client appUpdate an app role held by a service principalUpdate the tenant's identity configuration containerGrant delegated permissions to a client appRevoke a delegated permission grantChange the scopes on a delegated grantCreate a custom authentication extensionDelete a custom authentication extensionUpdate a custom authentication extensionRemove one accepted sender from a groupAllow a user or group to post to a groupRemove an accepted sender by reference linkRemove a member from a groupAdd a member to a groupRemove a group member by reference linkRemove an owner from a groupAdd an owner to a groupRemove a group owner by reference linkUnblock one rejected sender from a groupBlock a user or group from posting to a groupUnblock a rejected sender by reference linkRemove a member from a directory role by idAdd a member to a directory roleRemove a role member by reference queryGrant an app a resource-specific permission on a groupRevoke an app's permission grant on a groupChange an existing permission grant on a groupCreate a conditional access policyDelete a conditional access policyUpdate a conditional access policyRestore a deleted conditional access policyDelete a user by object idUpdate a user by object idDelete a user by sign-in nameUpdate a user by sign-in nameDefine a custom security attributeDelete a custom security attribute definitionUpdate a custom security attribute definitionAdd an allowed value to an attributeDelete an allowed value from an attributeActivate or deactivate an allowed valueShowing 400 of 4,496. Search above to find the rest.