What you can do with Microsoft Entra
Every task in plain language. Pick one, and we can help you get access.
14 things you can do
Microsoft Entra
Microsoft Entra (formerly Azure Active Directory) is Microsoft's family of identity and network access products, providing authentication, authorization, directory, identity governance, external identities, verifiable credentials and secure access services. Its APIs are exposed mainly through Microsoft Graph, the Microsoft identity platform (OAuth 2.0 / OpenID Connect) and a hosted MCP server for
14 multi-step recipesRecipes: multi-step jobs
Audit User MembershipsResolve a user by UPN, get the user, then list memberOf.Create Group With Member
Create a group, add one member, then verify the members list.Create Microsoft 365 Group With Member
Create a Unified group, add a member, then get the group.Decommission Application
Resolve the service principal by appId, delete it, then delete the app.Deprovision User
Disable a user account then delete it (soft-delete to deletedItems).Find And Update Application
Filter applications by appId, patch the match, then re-read it.Find And Update Group
Filter groups by displayName, patch the match, then re-read it.Find And Update User
Filter users by UPN, patch the match, then re-read the user.Grant App Role Assignment
Grant an app role to a service principal, then verify assignments.Offboard User From Group
Resolve a user by UPN, remove from a group, then list members.Onboard User To Group
Create a user, add it to a group, then verify its memberships.Provision User
Create a user then fetch the resulting object by its new id.Register Application With Service Principal
Register an application, then create its service principal by appId.Rotate Application Secret
Add a new client secret then revoke the prior secret by keyId.