Connect your own Microsoft Entra ID (Azure AD) tenant through Microsoft Graph v1.0, using an App Registration (client credentials). Manage the full identity lifecycle: create/update/delete Users, manage Groups and membership, review Applications and Service Principals, inspect Directory Role assignments, review (read-only) Conditional Access Policies, and audit Sign-In logs, Directory Audit events, and Identity Protection risky users/risk detections -- all from chat.
Every capability exposed by Microsoft Entra ID, metered per action and guarded by the two-step safety protocol.
connect_entrawriteConnect a Microsoft Entra ID tenant via an Azure AD App Registration (client credentials), after verifying connectivity.
disconnect_entrawriteDisconnect a Microsoft Entra ID tenant: deletes only the saved credentials. Nothing in Entra ID itself is changed.
list_connectionsreadList the connected Microsoft Entra ID tenants.
list_usersreadList users in the connected Entra ID tenant, optionally filtered by a search string.
get_userreadRead one Entra ID user in full.
create_userwriteCreate a new Entra ID user with a required initial password.
update_userwriteUpdate selected fields of an existing Entra ID user (display name and/or enabled state). Only given fields change.
delete_userwritePermanently delete an Entra ID user. Entra ID keeps a 30-day recovery window internally, but this connector cannot restore it.
list_groupsreadList groups in the connected Entra ID tenant.
get_groupreadRead one Entra ID group in full.
create_groupwriteCreate a new Entra ID security or Microsoft 365 group.
add_user_to_groupwriteAdd a user to an Entra ID group.
remove_user_from_groupwriteRemove a user from an Entra ID group.
list_applicationsreadList App Registrations (Applications) in the connected Entra ID tenant.
get_applicationreadRead one Entra ID App Registration in full.
list_service_principalsreadList Service Principals (the tenant-local instance of an application) in the connected Entra ID tenant.
get_service_principalreadRead one Entra ID Service Principal in full.
list_directory_rolesreadList activated Directory Roles in the connected Entra ID tenant (e.g. Global Administrator, User Administrator).
list_directory_role_membersreadList the members (users/service principals) assigned to one Entra ID Directory Role.
add_directory_role_memberwriteAdd a user to an Entra ID Directory Role (grants admin privilege -- use carefully).
remove_directory_role_memberwriteRemove a user from an Entra ID Directory Role.
list_conditional_access_policiesreadList Conditional Access Policies configured on the connected Entra ID tenant (read-only -- writing/editing CA policies is out of scope, they can lock out an entire org if misconfigured).
get_conditional_access_policyreadRead one Conditional Access Policy in full (read-only).
list_sign_insreadList Entra ID sign-in log events, optionally filtered to one user.
list_directory_auditsreadList Entra ID directory audit log events (who changed what, e.g. user/group/app/role changes).
list_risky_usersreadList users flagged by Identity Protection as risky. Requires Entra ID P2 license on the tenant -- returns requires_p2_license=true with an empty list if unavailable, not an error.
list_risk_detectionsreadList Identity Protection risk detection events. Requires Entra ID P2 license on the tenant -- returns requires_p2_license=true with an empty list if unavailable, not an error.
audit_tenantreadBuild one aggregated health report for the connected Entra ID tenant: total/disabled users, application count, and a naive stale-privileged-role-assignment signal.
More extensions in Authentication & Access ready to enable in one click.
Enable Microsoft Entra ID in your Imperal workspace in one click - 10,000 free starter credits included.