Microsoft Entra ID (formerly Azure AD) Devices.directory Object API

The devices.directoryObject API from Microsoft Entra ID (formerly Azure AD) — 50 operation(s) for devices.directoryobject.

Business capability
Identity & Access Management BC-620.20

Operations 54

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /devices/{device-id}/memberOf List a device's direct group and unit memberships · List device memberships #
Ask an LLM
“Which groups and administrative units is this device directly a member of?”
“How do I see the direct memberships of a device in Entra ID without nested ones?”
Tell an agent
List every group and administrative unit that device {device_id} belongs to directly.
Show the direct memberOf entries for device {device_id}, mixing groups and admin units.
GET /devices/{device-id}/memberOf/{directoryObject-id} Get one direct membership of a device · Get memberOf from devices #
Ask an LLM
“Can I fetch a single directory object from a device's direct memberOf list by its id?”
“What does one specific direct membership entry of a device contain?”
Tell an agent
Get membership entry {directory_object_id} from the direct memberOf list of device {device_id}.
Fetch directory object {directory_object_id} that device {device_id} is directly a member of, whatever its type.
GET /devices/{device-id}/memberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a device's direct membership as an admin unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a device's direct membership back typed as an administrative unit?”
“Is this directory object that my device directly belongs to an administrative unit, and what are its details?”
Tell an agent
Get administrative unit {directory_object_id} from device {device_id}'s direct memberships.
Cast direct membership {directory_object_id} of device {device_id} to an administrative unit and return it.
GET /devices/{device-id}/memberOf/{directoryObject-id}/microsoft.graph.group Get a device's direct membership as a group · List device memberships #
Ask an LLM
“Can I read a device's direct membership back typed as a group with its group properties?”
“What group details come back for one group a device is directly in?”
Tell an agent
Get group {directory_object_id} from device {device_id}'s direct memberships.
Cast direct membership {directory_object_id} of device {device_id} to a group and return its properties.
GET /devices/{device-id}/memberOf/$count Count a device's direct memberships · Get the number of the resource #
Ask an LLM
“How many groups and administrative units combined is a device directly a member of?”
“Is there a way to get just the number of direct memberships for a device?”
Tell an agent
Count all direct memberships of device {device_id}, groups and admin units together.
Return only the total of direct memberOf entries for device {device_id}.
GET /devices/{device-id}/memberOf/microsoft.graph.administrativeUnit List admin units a device directly belongs to · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units has this device been placed in directly?”
“Can I filter a device's direct memberships down to administrative units only?”
Tell an agent
List only the administrative units device {device_id} is directly a member of.
Show the admin units that directly contain device {device_id}, leaving out groups.
GET /devices/{device-id}/memberOf/microsoft.graph.administrativeUnit/$count Count admin units a device directly belongs to · Get the number of the resource #
Ask an LLM
“How many administrative units directly contain a given device?”
“Can I get a count of just the admin units in a device's direct memberships?”
Tell an agent
Count the administrative units that device {device_id} is directly a member of.
Tell me the number of admin units directly holding device {device_id}.
GET /devices/{device-id}/memberOf/microsoft.graph.group List groups a device directly belongs to · List device memberships #
Ask an LLM
“What groups is a device directly a member of, excluding administrative units?”
“Can I list a device's direct group memberships with group properties like display name?”
Tell an agent
List only the groups device {device_id} is directly a member of.
Give me the groups where device {device_id} sits as a direct member.
GET /devices/{device-id}/memberOf/microsoft.graph.group/$count Count groups a device directly belongs to · Get the number of the resource #
Ask an LLM
“How many groups is a device directly a member of?”
“Can I get just the number of direct group memberships for one device?”
Tell an agent
Count the groups that device {device_id} is directly a member of.
Tell me how many groups directly hold device {device_id}.
GET /devices/{device-id}/registeredOwners List a device's registered owners · List registeredOwners #
Ask an LLM
“Who are the registered owners of this device, the users who cloud-joined or registered it?”
“How do I find which user owns a personal device registered in Entra ID?”
Tell an agent
List the registered owners of device {device_id} with their full objects.
Show who owns device {device_id} and return their directory details.
DELETE /devices/{device-id}/registeredOwners/{directoryObject-id}/$ref Remove a specific registered owner from a device · Delete registeredOwner #
Ask an LLM
“Can I remove one user as a registered owner of a device by naming the owner's id in the path?”
“What happens to a device when I take a registered owner off it?”
Tell an agent destructive · confirm first
Remove owner {owner_id} from the registered owners of device {device_id}.
Take user {owner_id} off as registered owner of device {device_id} using the owner-id path.
GET /devices/{device-id}/registeredOwners/{directoryObject-id}/microsoft.graph.appRoleAssignment Get a device owner as an app role assignment · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one of a device's registered owners typed as an app role assignment?”
“What app role assignment details come back for a single device owner entry?”
Tell an agent
Get registered owner {owner_id} of device {device_id} cast as an app role assignment.
Return owner entry {owner_id} on device {device_id} as an appRoleAssignment object.
GET /devices/{device-id}/registeredOwners/{directoryObject-id}/microsoft.graph.endpoint Get a device owner as an endpoint · Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint #
Ask an LLM
“Can I read one registered owner of a device typed as an endpoint object?”
“What endpoint properties does a single device owner entry expose?”
Tell an agent
Get registered owner {owner_id} of device {device_id} cast as an endpoint.
Return owner entry {owner_id} on device {device_id} as an endpoint object.
GET /devices/{device-id}/registeredOwners/{directoryObject-id}/microsoft.graph.servicePrincipal Get a device owner as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a device's registered owner typed as a service principal?”
“Which service principal properties come back for one owner of a device?”
Tell an agent
Get registered owner {owner_id} of device {device_id} cast as a service principal.
Return owner entry {owner_id} on device {device_id} as a servicePrincipal object.
GET /devices/{device-id}/registeredOwners/{directoryObject-id}/microsoft.graph.user Get a device owner as a user · Get the item of type microsoft.graph.directoryObject as microsoft.graph.user #
Ask an LLM
“Can I get a device owner's user profile, like name and email, from the owner entry?”
“What user properties come back for one registered owner of a device?”
Tell an agent
Get registered owner {owner_id} of device {device_id} cast as a user.
Return the user profile of owner {owner_id} on device {device_id}.
GET /devices/{device-id}/registeredOwners/$count Count a device's registered owners · Get the number of the resource #
Ask an LLM
“How many registered owners does a device have in total?”
“Is there a quick way to check whether a device has any owners at all?”
Tell an agent
Count all registered owners of device {device_id}.
Return the total number of owners on device {device_id}, of every type.
GET /devices/{device-id}/registeredOwners/$ref List references to a device's registered owners · List registeredOwners #
Ask an LLM
“Can I get just the reference links (@odata.id) of a device's owners instead of full user objects?”
“What is the lightweight way to list owner ids for a device?”
Tell an agent
List the owner references ($ref links only) for device {device_id}.
Return only the @odata.id of each registered owner of device {device_id}.
POST /devices/{device-id}/registeredOwners/$ref Add a registered owner to a device · Create registeredOwner #
Ask an LLM
“How do I make a user the registered owner of a device?”
“Can I assign an owner to a device by passing the user's @odata.id reference?”
Tell an agent
Add {owner_ref} as a registered owner of device {device_id}.
Make the user at {owner_ref} an owner of device {device_id}.
DELETE /devices/{device-id}/registeredOwners/$ref Remove a device owner by reference id · Delete registeredOwner #
Ask an LLM
“Can I remove a device owner by passing the owner's @id as a query parameter?”
“Which call unlinks a registered owner when I only have its reference URL?”
Tell an agent destructive · confirm first
Unlink owner reference {owner_ref} from device {device_id} via the @id query parameter.
Delete the owner reference {owner_ref} on device {device_id}.
GET /devices/{device-id}/registeredOwners/microsoft.graph.appRoleAssignment List a device's owners that are app role assignments · Get the items of type microsoft.graph.appRoleAssignment in the… #
Ask an LLM
“Which of a device's registered owners are app role assignments?”
“Can I filter a device's owner list to the appRoleAssignment type only?”
Tell an agent
List the registered owners of device {device_id} that are app role assignments.
Show only appRoleAssignment-typed owners on device {device_id}.
GET /devices/{device-id}/registeredOwners/microsoft.graph.appRoleAssignment/$count Count a device's app role assignment owners · Get the number of the resource #
Ask an LLM
“How many of a device's owners are app role assignments?”
“Can I count just the appRoleAssignment entries among a device's owners?”
Tell an agent
Count the app role assignment owners of device {device_id}.
Tell me the number of appRoleAssignment-typed owners on device {device_id}.
GET /devices/{device-id}/registeredOwners/microsoft.graph.endpoint List a device's owners that are endpoints · Get the items of type microsoft.graph.endpoint in the… #
Ask an LLM
“Which of a device's registered owners are endpoint objects?”
“Can I filter a device's owner list to the endpoint type?”
Tell an agent
List the registered owners of device {device_id} that are endpoints.
Show only endpoint-typed owners on device {device_id}.
GET /devices/{device-id}/registeredOwners/microsoft.graph.endpoint/$count Count a device's endpoint owners · Get the number of the resource #
Ask an LLM
“How many of a device's owners are endpoint objects?”
“Can I count only the endpoint entries among a device's registered owners?”
Tell an agent
Count the endpoint owners of device {device_id}.
Tell me the number of endpoint-typed owners on device {device_id}.
GET /devices/{device-id}/registeredOwners/microsoft.graph.servicePrincipal List a device's owners that are service principals · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Are any service principals registered as owners of this device?”
“Can I list only the service principal owners of a device?”
Tell an agent
List the registered owners of device {device_id} that are service principals.
Show only servicePrincipal-typed owners on device {device_id}.
GET /devices/{device-id}/registeredOwners/microsoft.graph.servicePrincipal/$count Count a device's service principal owners · Get the number of the resource #
Ask an LLM
“How many service principals are owners of a device?”
“Can I count only the service principal entries among a device's owners?”
Tell an agent
Count the service principal owners of device {device_id}.
Tell me the number of servicePrincipal-typed owners on device {device_id}.
GET /devices/{device-id}/registeredOwners/microsoft.graph.user List a device's owners that are users · Get the items of type microsoft.graph.user in the… #
Ask an LLM
“Which people own this device, with their user profiles?”
“Can I filter a device's owners to user accounts only?”
Tell an agent
List the registered owners of device {device_id} that are users.
Show only user-typed owners on device {device_id} with names and emails.
GET /devices/{device-id}/registeredOwners/microsoft.graph.user/$count Count a device's user owners · Get the number of the resource #
Ask an LLM
“How many user accounts are registered owners of a device?”
“Can I count only the people among a device's owners?”
Tell an agent
Count the user owners of device {device_id}.
Tell me the number of user-typed owners on device {device_id}.
GET /devices/{device-id}/registeredUsers List a device's registered users · List registeredUsers #
Ask an LLM
“Who are the registered users of a device, as opposed to its owners?”
“Which users are signed up on a cloud-joined or personal device?”
Tell an agent
List the registered users of device {device_id} with their full objects.
Show everyone registered as a user of device {device_id}.
DELETE /devices/{device-id}/registeredUsers/{directoryObject-id}/$ref Remove a specific registered user from a device · Delete registeredUser #
Ask an LLM
“Can I remove one registered user from a device by putting the user's id in the path?”
“What happens when a user is removed as a registered user of a device?”
Tell an agent destructive · confirm first
Remove registered user {user_object_id} from device {device_id}.
Take {user_object_id} off the registered users of device {device_id} using the user-id path.
GET /devices/{device-id}/registeredUsers/{directoryObject-id}/microsoft.graph.appRoleAssignment Get a device's registered user as app role assignment · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one registered-user entry of a device typed as an app role assignment?”
“What appRoleAssignment details come back for a single registered user of a device?”
Tell an agent
Get registered user {user_object_id} of device {device_id} cast as an app role assignment.
Return registered-user entry {user_object_id} on device {device_id} as an appRoleAssignment.
GET /devices/{device-id}/registeredUsers/{directoryObject-id}/microsoft.graph.endpoint Get a device's registered user as an endpoint · Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint #
Ask an LLM
“Can I read one registered-user entry of a device typed as an endpoint?”
“What endpoint properties does a single registered user of a device expose?”
Tell an agent
Get registered user {user_object_id} of device {device_id} cast as an endpoint.
Return registered-user entry {user_object_id} on device {device_id} as an endpoint object.
GET /devices/{device-id}/registeredUsers/{directoryObject-id}/microsoft.graph.servicePrincipal Get a device's registered user as service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a device's registered-user entry typed as a service principal?”
“Which service principal fields come back for one registered user of a device?”
Tell an agent
Get registered user {user_object_id} of device {device_id} cast as a service principal.
Return registered-user entry {user_object_id} on device {device_id} as a servicePrincipal.
GET /devices/{device-id}/registeredUsers/{directoryObject-id}/microsoft.graph.user Get a device's registered user profile · Get the item of type microsoft.graph.directoryObject as microsoft.graph.user #
Ask an LLM
“Can I get the user profile of one person registered on a device?”
“What user properties come back for a single registered user of a device?”
Tell an agent
Fetch the person behind registered-user entry {user_object_id} on device {device_id}.
Return the user profile of registered user {user_object_id} on device {device_id}.
GET /devices/{device-id}/registeredUsers/$count Count a device's registered users · Get the number of the resource #
Ask an LLM
“How many registered users does a device have in total?”
“Is there a quick way to check whether anyone is registered as a user on a device?”
Tell an agent
Count all registered users of device {device_id}.
Return the total number of registered users on device {device_id}, of every type.
GET /devices/{device-id}/registeredUsers/$ref List references to a device's registered users · List registeredUsers #
Ask an LLM
“Can I get only the @odata.id links of a device's registered users instead of full objects?”
“What is the lightweight way to list registered-user ids for a device?”
Tell an agent
List the registered-user references ($ref links only) for device {device_id}.
Return only the @odata.id of each registered user of device {device_id}.
POST /devices/{device-id}/registeredUsers/$ref Add a registered user to a device · Create registeredUser #
Ask an LLM
“How do I register a user on a device in Entra ID?”
“Can I add a registered user to a device by passing the user's @odata.id reference?”
Tell an agent
Add {user_ref} as a registered user of device {device_id}.
Register the user at {user_ref} on device {device_id}.
DELETE /devices/{device-id}/registeredUsers/$ref Remove a registered user from a device by reference · Delete registeredUser #
Ask an LLM
“Can I remove a device's registered user by passing its @id as a query parameter?”
“Which call unlinks a registered user when I only have the reference URL?”
Tell an agent destructive · confirm first
Unlink registered-user reference {user_ref} from device {device_id} via the @id query parameter.
Delete the registered-user reference {user_ref} on device {device_id}.
GET /devices/{device-id}/registeredUsers/microsoft.graph.appRoleAssignment List a device's registered users as app role grants · Get the items of type microsoft.graph.appRoleAssignment in the… #
Ask an LLM
“Which of a device's registered users are app role assignments?”
“Can I filter a device's registered-user list to the appRoleAssignment type only?”
Tell an agent
List the registered users of device {device_id} that are app role assignments.
Show only appRoleAssignment-typed registered users on device {device_id}.
GET /devices/{device-id}/registeredUsers/microsoft.graph.appRoleAssignment/$count Count a device's app role assignment registered users · Get the number of the resource #
Ask an LLM
“How many of a device's registered users are app role assignments?”
“Can I count just the appRoleAssignment entries among a device's registered users?”
Tell an agent
Count the app role assignment registered users of device {device_id}.
Tell me the number of appRoleAssignment-typed registered users on device {device_id}.
GET /devices/{device-id}/registeredUsers/microsoft.graph.endpoint List a device's registered users that are endpoints · Get the items of type microsoft.graph.endpoint in the… #
Ask an LLM
“Which of a device's registered users are endpoint objects?”
“Can I filter a device's registered-user list to the endpoint type?”
Tell an agent
List the registered users of device {device_id} that are endpoints.
Show only endpoint-typed registered users on device {device_id}.
GET /devices/{device-id}/registeredUsers/microsoft.graph.endpoint/$count Count a device's endpoint registered users · Get the number of the resource #
Ask an LLM
“How many of a device's registered users are endpoint objects?”
“Is there a tally of endpoint objects registered as users on one device?”
Tell an agent
Count the endpoint registered users of device {device_id}.
Tell me the number of endpoint-typed registered users on device {device_id}.
GET /devices/{device-id}/registeredUsers/microsoft.graph.servicePrincipal List a device's registered service principals · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Are any service principals registered as users of this device?”
“Can I list only the service principal registered users of a device?”
Tell an agent
List the registered users of device {device_id} that are service principals.
Show only servicePrincipal-typed registered users on device {device_id}.
GET /devices/{device-id}/registeredUsers/microsoft.graph.servicePrincipal/$count Count a device's registered service principals · Get the number of the resource #
Ask an LLM
“How many service principals are registered users of a device?”
“Can I count only the service principal entries among a device's registered users?”
Tell an agent
Count the service principal registered users of device {device_id}.
Tell me the number of servicePrincipal-typed registered users on device {device_id}.
GET /devices/{device-id}/registeredUsers/microsoft.graph.user List people registered on a device · Get the items of type microsoft.graph.user in the… #
Ask an LLM
“Which people are registered users of this device, with their user profiles?”
“Can I filter a device's registered users to actual user accounts?”
Tell an agent
List the registered users of device {device_id} that are user accounts.
Show only user-typed registered users on device {device_id} with names and emails.
GET /devices/{device-id}/registeredUsers/microsoft.graph.user/$count Count people registered on a device · Get the number of the resource #
Ask an LLM
“How many user accounts are registered users of a device?”
“Can I count only the people among a device's registered users?”
Tell an agent
Count the user-account registered users of device {device_id}.
Tell me the number of user-typed registered users on device {device_id}.
GET /devices/{device-id}/transitiveMemberOf List all memberships of a device including nested · List device transitive memberships #
Ask an LLM
“Which groups and administrative units does a device belong to, including through nested groups?”
“How do I get a device's full transitive membership, not just direct parents?”
Tell an agent
List every group and admin unit device {device_id} belongs to, directly or through nesting.
Show the transitive memberOf chain for device {device_id}.
GET /devices/{device-id}/transitiveMemberOf/{directoryObject-id} Get one transitive membership of a device · Get transitiveMemberOf from devices #
Ask an LLM
“Can I fetch one object from a device's transitive (nested) memberships by id?”
“Is a device inherited into this particular group or unit through nesting, and what is it?”
Tell an agent
Get entry {directory_object_id} from the transitive memberships of device {device_id}.
Fetch nested membership {directory_object_id} of device {device_id}, whatever its type.
GET /devices/{device-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a device's transitive membership as an admin unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one of a device's nested memberships typed as an administrative unit?”
“What admin unit details come back for a unit a device inherits membership in?”
Tell an agent
Get administrative unit {directory_object_id} from device {device_id}'s transitive memberships.
Cast nested membership {directory_object_id} of device {device_id} to an administrative unit.
GET /devices/{device-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.group Get a device's transitive membership as a group · List device transitive memberships #
Ask an LLM
“Can I read one of a device's nested memberships typed as a group?”
“What group details come back for a group a device is in through nesting?”
Tell an agent
Get group {directory_object_id} from device {device_id}'s transitive memberships.
Cast nested membership {directory_object_id} of device {device_id} to a group and return it.
GET /devices/{device-id}/transitiveMemberOf/$count Count all memberships of a device including nested · Get the number of the resource #
Ask an LLM
“How many groups and units does a device belong to once nested memberships are counted?”
“Can I get the total transitive membership count for a device?”
Tell an agent
Count all transitive memberships of device {device_id}, groups and admin units together.
Return the number of nested and direct memberOf entries for device {device_id}.
GET /devices/{device-id}/transitiveMemberOf/microsoft.graph.administrativeUnit List admin units a device belongs to via nesting · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units include a device, counting nested memberships?”
“Can I list a device's transitive memberships filtered to administrative units?”
Tell an agent
List the administrative units device {device_id} belongs to, including through nesting.
Show transitive admin unit memberships of device {device_id}, leaving out groups.
GET /devices/{device-id}/transitiveMemberOf/microsoft.graph.administrativeUnit/$count Count admin units a device belongs to via nesting · Get the number of the resource #
Ask an LLM
“How many administrative units include a device once nested memberships are counted?”
“Can I count only the admin units in a device's transitive memberships?”
Tell an agent
Count the administrative units device {device_id} belongs to transitively.
Tell me how many admin units hold device {device_id}, nested ones included.
GET /devices/{device-id}/transitiveMemberOf/microsoft.graph.group List groups a device belongs to via nesting · List device transitive memberships #
Ask an LLM
“What groups is a device in when nested group memberships are expanded?”
“Can I list a device's transitive memberships filtered to groups only?”
Tell an agent
List the groups device {device_id} belongs to, including through nested groups.
Show transitive group memberships of device {device_id}, leaving out admin units.
GET /devices/{device-id}/transitiveMemberOf/microsoft.graph.group/$count Count groups a device belongs to via nesting · Get the number of the resource #
Ask an LLM
“How many groups is a device in once nested group memberships are counted?”
“Can I count only the groups in a device's transitive memberships?”
Tell an agent
Count the groups device {device_id} belongs to transitively.
Tell me how many groups hold device {device_id}, nested ones included.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-devices-directoryobject-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-devices-directoryobject-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Identity.DirectoryManagement Devices.directory Object API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (907 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-devices-directoryobject-api-openapi.yml