Microsoft Entra ID

Read users, groups and organizational structure from Microsoft Entra ID (Azure AD), directly in your assistant

The Microsoft Entra ID connector links your assistant to your organization's directory (Microsoft Entra ID, formerly Azure Active Directory) via Microsoft Graph. You can search users and groups, retrieve profiles including manager and licenses, and inspect group memberships.

Note

This connector is permanently read-only. It can only read directory data, never create, modify or delete it.

Overview

Every call runs in the context of the signed-in user (delegated OAuth access). Your Entra ID permissions still apply: you only see what your account is allowed to see. With this integration you can:

  • Search or list users by name or email (id, display name, email, job title, department, account status)
  • Retrieve a full user profile, including manager, assigned licenses and direct group memberships (optionally nested memberships too)
  • Search groups by name (id, display name, description, group types)
  • List the members of a group (users and nested groups)
  • Retrieve a user's recent sign-ins (optional method, must be enabled separately)

Prerequisites

  • A Microsoft Entra ID account with directory read access
  • Admin consent: The scopes used (User.Read.All, Group.Read.All, GroupMember.Read.All) are admin-level directory permissions. In most organizations an Entra ID administrator must grant one-time admin consent to the application before you can connect.
  • For sign-ins: This method additionally uses AuditLog.Read.All and requires Entra ID P1 or P2 licensing on your tenant. Without that license the method returns a clear error instead of data.

Setup

Enable the connector: In the assistant editor, select Microsoft Entra ID under connectors and save the assistant.

Connect: Under "Connections" (or on the first tool call in chat), click "Connect". A Microsoft authorization window opens.

Confirm access: Sign in with your Microsoft account and approve the requested permissions. If admin consent has not yet been granted, contact an Entra ID administrator.

Done: After authorization, Microsoft Entra ID shows as connected under "Connections" and is available in chat.

Available functions

  • Search users: Find or list directory users by name or email
  • Get user: Full profile with manager, licenses and group memberships
  • Search groups: Find groups by name
  • List group members: Direct members of a group (users and nested groups)
  • Get sign-ins: A user's recent sign-in events (Entra ID P1/P2 only)

Limits

  • Large directories are never fully loaded: each function returns a bounded page of results with a fixed cap and signals when more results exist.
  • The connector is strictly read-only. Directory changes are not possible.
Was this page helpful?