Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Applications.directory Object API

The applications.directoryObject API from Microsoft Entra ID (formerly Azure AD) — 17 operation(s) for applications.directoryobject.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 19

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /applications/{application-id}/createdOnBehalfOf See who an app registration was created on behalf of · Get createdOnBehalfOf from applications #
Ask an LLM
“Which user or object was an Entra app registration created on behalf of?”
“Can I find the directory object that an application was originally registered for?”
Tell an agent
Show who application {application} was created on behalf of.
Get the createdOnBehalfOf object for app registration {application}.
GET /applications/{application-id}/owners List an application's owners · List owners of an application #
Ask an LLM
“Who owns a particular app registration in Microsoft Entra ID?”
“How do I get the full owner objects for an application?”
Tell an agent
List the owners of application {application}.
Show me every owner object, with details, for app registration {application}.
DELETE /applications/{application-id}/owners/{directoryObject-id}/$ref Remove a specific owner from an application · Remove application owner #
Ask an LLM
“Can I take a named owner off an app registration by that owner's object ID in the path?”
“What happens if I remove an application owner and leave only one?”
Tell an agent destructive · confirm first
Remove owner {owner} from application {application}.
Take directory object {owner} off the owner list of app {application}.
GET /applications/{application-id}/owners/{directoryObject-id}/microsoft.graph.appRoleAssignment Get an app owner cast as an app role assignment · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one application owner specifically as an app role assignment object?”
“Is a given owner of my app an appRoleAssignment, and what does it look like?”
Tell an agent
Get owner {owner} of application {application} as an app role assignment.
Read app {application} owner {owner} typed as appRoleAssignment.
GET /applications/{application-id}/owners/{directoryObject-id}/microsoft.graph.endpoint Get an app owner cast as an endpoint · Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint #
Ask an LLM
“Can I fetch a single application owner typed as an endpoint object?”
“What does an endpoint-type owner of an app registration contain?”
Tell an agent
Get owner {owner} of application {application} as an endpoint.
Read app {application} owner {owner} typed as endpoint.
GET /applications/{application-id}/owners/{directoryObject-id}/microsoft.graph.servicePrincipal Get an app owner that is a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one of my app's owners as a service principal rather than a generic object?”
“Which service principal details come back for an owner of an application?”
Tell an agent
Get owner {owner} of application {application} as a service principal.
Show service principal owner {owner} of app {application}.
GET /applications/{application-id}/owners/{directoryObject-id}/microsoft.graph.user Get an app owner that is a user · Get the item of type microsoft.graph.directoryObject as microsoft.graph.user #
Ask an LLM
“Can I read one of my app's owners as a full user profile?”
“What user details can I get for a specific person who owns an application?”
Tell an agent
Get owner {owner} of application {application} as a user.
Show the user profile of owner {owner} on app {application}.
GET /applications/{application-id}/owners/$count Count an application's owners · Get the number of the resource #
Ask an LLM
“How many owners does an app registration have in total?”
“Can I check whether an application has at least two owners?”
Tell an agent
Count all owners of application {application}.
Tell me the total owner count for app {application}.
GET /applications/{application-id}/owners/$ref List references to an application's owners · List owners of an application #
Ask an LLM
“Can I get just the reference links to an app's owners instead of the full objects?”
“Which owner IDs are linked to an application, as $ref entries?”
Tell an agent
List the owner references for application {application}.
Give me only the owner $ref links on app {application}.
POST /applications/{application-id}/owners/$ref Add an owner to an application · Add owner #
Ask an LLM
“How do I make a user an owner of an app registration?”
“Can a service principal be added as an owner of an application?”
Tell an agent
Add {owner_ref} as an owner of application {application}.
Make the directory object at {owner_ref} a co-owner of app {application}.
DELETE /applications/{application-id}/owners/$ref Remove an app owner by reference ID · Remove application owner #
Ask an LLM
“Can I remove an application owner by passing the owner's reference as an @id query value?”
“Is there a way to delete an owner link from an app using its $ref URL?”
Tell an agent destructive · confirm first
Remove the owner referenced by {owner_ref} from application {application}.
Delete owner link {owner_ref} on app {application} via its @id reference.
GET /applications/{application-id}/owners/microsoft.graph.appRoleAssignment List an app's owners that are app role assignments · Get the items of type microsoft.graph.appRoleAssignment in the… #
Ask an LLM
“Which of an application's owners are app role assignment objects?”
“Can I filter an app's owner list down to appRoleAssignment types only?”
Tell an agent
List the app role assignment owners of application {application}.
Show only appRoleAssignment-typed owners of app {application}.
GET /applications/{application-id}/owners/microsoft.graph.appRoleAssignment/$count Count an app's app-role-assignment owners · Get the number of the resource #
Ask an LLM
“How many owners of an application are app role assignments?”
“Can I count the appRoleAssignment-type owners on an app registration?”
Tell an agent
Count the app role assignment owners of application {application}.
Tell me how many appRoleAssignment owners app {application} has.
GET /applications/{application-id}/owners/microsoft.graph.endpoint List an app's owners that are endpoints · Get the items of type microsoft.graph.endpoint in the… #
Ask an LLM
“Which owners of an application are endpoint objects?”
“Can I narrow an app's owner list to endpoint types?”
Tell an agent
List the endpoint owners of application {application}.
Show only endpoint-typed owners of app {application}.
GET /applications/{application-id}/owners/microsoft.graph.endpoint/$count Count an app's endpoint owners · Get the number of the resource #
Ask an LLM
“How many endpoint-type owners does an application have?”
“Can I get a count of endpoint objects among an app's owners?”
Tell an agent
Count the endpoint owners of application {application}.
Tell me how many endpoint owners app {application} has.
GET /applications/{application-id}/owners/microsoft.graph.servicePrincipal List an app's owners that are service principals · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals are listed as owners of my application?”
“Can I see only the non-human owners of an app registration?”
Tell an agent
List the service principal owners of application {application}.
Show which service principals own app {application}.
GET /applications/{application-id}/owners/microsoft.graph.servicePrincipal/$count Count an app's service principal owners · Get the number of the resource #
Ask an LLM
“How many service principals own a given application?”
“Can I count the service principal owners of an app registration?”
Tell an agent
Count the service principal owners of application {application}.
Tell me how many service principals own app {application}.
GET /applications/{application-id}/owners/microsoft.graph.user List an app's owners that are users · Get the items of type microsoft.graph.user in the… #
Ask an LLM
“Which people are owners of a given app registration?”
“Can I list only the user accounts that own an application?”
Tell an agent
List the user owners of application {application}.
Show which people own app {application}.
GET /applications/{application-id}/owners/microsoft.graph.user/$count Count an app's user owners · Get the number of the resource #
Ask an LLM
“How many people own a given application?”
“Can I count just the user owners of an app registration?”
Tell an agent
Count the user owners of application {application}.
Tell me how many people own app {application}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-applications-directoryobject-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-applications-directoryobject-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-applications-directoryobject-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Applications.directory Object API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (841 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-applications-directoryobject-api-openapi.yml