capabilities.work

Audit User Memberships

A 3-step recipe with Microsoft Entra. We can help you get access.

Recipe · 3 steps

Audit User Memberships

with Microsoft Entra · Identity & Access Management

Resolve a user by UPN, get the user, then list memberOf.

  1. Filter the users collection on userPrincipalName to resolve the user's object id.
  2. Retrieve the full user object for the audit record.
  3. List the groups, directory roles, and administrative units the user is a direct member of.
What you'll need to have ready
  • accessToken: OAuth 2.0 bearer token with User.Read.All and Directory.Read.All.
  • userPrincipalName: UPN of the user to audit (e.g. user@contoso.com).
For your developer

Arazzo workflow microsoft-entra:audit-user-memberships, 3 operations: listUsers → getUser → listUserMemberOf. Specs on APIs.io.