Integration · Microsoft Entra ID
Connect Microsoft Entra ID to meinGPT
Look up users, groups, memberships, managers, and licence assignments without changing the directory.
The native Entra ID connector is a permanent read-only connection for directory questions. It can find users and groups, show profiles, managers, group membership, and licence assignments. Optional sign-in activity requires AuditLog.Read.All and the necessary Microsoft Entra licence.
An authorised user connects Microsoft Entra ID through OAuth. The assistant searches Microsoft Graph only when asked and returns directory information that the connected account is allowed to read. No function changes users, groups, memberships, licences, or authentication settings.
- Source
- Microsoft Entra ID
- Capability
- Read users, groups, memberships, managers, licence assignments, and optionally sign-in activity
- Connection
- Delegated Microsoft OAuth; read-only directory permissions with optional AuditLog.Read.All
- Data residency
- Directory data is read for a concrete request. The connector does not create, update, or delete Entra objects.
Source, permissions, and data residency are documented separately for each connector.
Typical workflows
- Resolve users and responsibilities
- Review group membership
- Check licence and sign-in context
What the integration makes possible
01
Resolve users and responsibilities
Find a person, their manager, department, and selected profile fields for an IT or support request.
02
Review group membership
List direct or transitive memberships and compare them with the group required for an application.
03
Check licence and sign-in context
Read assigned licences and, where separately authorised, recent sign-in activity for troubleshooting.
Clarify before starting
- 01Directory read permissions are approved by the tenant administrator.
- 02The audience for directory and sign-in data is defined.
- 03AuditLog.Read.All is enabled only if sign-in activity is required.
Review the prompt and result openly
Find Alex Example in Entra ID. Show department, manager, assigned licences, and memberships relevant to the Finance applications. Do not make changes.
Result
**Alex Example** - Finance Operations. Manager: Jamie Example. Relevant groups: Finance-All and ERP-Users. Assigned licences are listed separately. No directory object was changed.
Does this connection fit your use case?
We clarify the source, permissions, and connection required for the concrete use case. If the existing integration fits, you can move straight to setup afterwards.
Security and operations
Use the smallest delegated read permissions required for the intended support case. Treat group membership, licence, and sign-in information as administrative data and restrict the assistant accordingly.
Known limitations
- 01The connector is read-only and cannot provision or deactivate users.
- 02Sign-in activity requires AuditLog.Read.All and an eligible Entra licence.
- 03Returned fields remain limited by Microsoft permissions and directory configuration.
Frequently asked questions
No. The connector is intentionally read-only. Provisioning remains in Entra ID or the established identity-management process.