Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Groups.directory Object API

The groups.directoryObject API from Microsoft Entra ID (formerly Azure AD) — 113 operation(s) for groups.directoryobject.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 121

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /groups/{group-id}/acceptedSenders List who may post to a group's conversations · List acceptedSenders #
Ask an LLM
“Who is on the accepted senders list allowed to post in a group's conversations?”
“Can I see the full user and group objects on a group's allowed-senders list, not just their ids?”
Tell an agent
Show the accepted senders for group {group}.
List everyone allowed to post to conversations in group {group}, with their details.
DELETE /groups/{group-id}/acceptedSenders/{directoryObject-id}/$ref Remove one accepted sender from a group · Remove acceptedSender #
Ask an LLM
“How do I take a specific user off a group's accepted senders list by their object id?”
“Can I revoke one person's permission to post to a group's conversations?”
Tell an agent destructive · confirm first
Remove {object} from the accepted senders of group {group}.
Stop directory object {object} from being an allowed sender in group {group}.
GET /groups/{group-id}/acceptedSenders/$count Count a group's accepted senders · Get the number of the resource #
Ask an LLM
“How many users and groups are on a group's accepted senders list?”
“Is there a quick way to get just the number of allowed senders for a group?”
Tell an agent
Count the accepted senders on group {group}.
Tell me how many senders are allowed to post in group {group}.
GET /groups/{group-id}/acceptedSenders/$ref List accepted sender references for a group · List acceptedSenders #
Ask an LLM
“Can I get only the reference links of a group's accepted senders instead of full objects?”
“What ids are on a group's accepted senders list?”
Tell an agent
List the accepted sender references for group {group}.
Give me just the @odata.id links of the allowed senders in group {group}.
POST /groups/{group-id}/acceptedSenders/$ref Allow a user or group to post to a group · Create acceptedSender #
Ask an LLM
“How do I add a user to a group's accepted senders so they can post to its conversations?”
“What happens if I add someone to accepted senders who is already on the rejected senders list?”
Tell an agent
Add {ref} to the accepted senders of group {group}.
Let the user at {ref} post to conversations in group {group}.
DELETE /groups/{group-id}/acceptedSenders/$ref Remove an accepted sender by reference link · Remove acceptedSender #
Ask an LLM
“Can I remove an accepted sender from a group by passing its @id reference in the query?”
“Is there a way to drop an allowed sender using its full directory reference URL?”
Tell an agent destructive · confirm first
Remove the accepted sender with reference {ref_id} from group {group}.
Delete the allowed-sender entry {ref_id} on group {group} using its @id.
GET /groups/{group-id}/createdOnBehalfOf See who a group was created on behalf of · Get createdOnBehalfOf from groups #
Ask an LLM
“Which user or application created a group on someone's behalf?”
“Why is the created-on-behalf-of value empty for a group an administrator made?”
Tell an agent
Show who group {group} was created on behalf of.
Find the user or app that created group {group}.
GET /groups/{group-id}/memberOf List groups and units a group directly belongs to · List group memberships #
Ask an LLM
“Which groups, administrative units and admin roles is a group a direct member of?”
“Does the memberOf list for a group include nested parent groups?”
Tell an agent
List what group {group} is directly a member of.
Show the direct parent groups, admin units and roles of group {group}.
GET /groups/{group-id}/memberOf/{directoryObject-id} Get one parent a group directly belongs to · Get memberOf from groups #
Ask an LLM
“Can I fetch one specific parent group or role that a group directly belongs to?”
“How do I read a single entry from a group's direct memberOf list?”
Tell an agent
Get parent object {object} from the direct memberOf list of group {group}.
Show details of {object}, which group {group} is a direct member of.
GET /groups/{group-id}/memberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a group's direct parent as an admin unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one entry in a group's direct memberships cast as an administrative unit?”
“How do I get the administrative unit details of a unit a group directly belongs to?”
Tell an agent
Get administrative unit {object} that group {group} directly belongs to.
Show direct membership {object} of group {group} as an administrative unit.
GET /groups/{group-id}/memberOf/{directoryObject-id}/microsoft.graph.group Get a group's direct parent as a group · List group memberships #
Ask an LLM
“Can I read one of a group's direct parent entries with full group properties?”
“What does a parent group look like when fetched from a group's direct memberOf as a group type?”
Tell an agent
Get parent group {object} that group {group} is directly nested in.
Show direct membership {object} of group {group} cast as a group.
GET /groups/{group-id}/memberOf/$count Count what a group directly belongs to · Get the number of the resource #
Ask an LLM
“How many groups, units and roles is a group directly a member of?”
“Is there a count endpoint for a group's direct memberOf list?”
Tell an agent
Count the direct memberships of group {group}.
Tell me how many things group {group} directly belongs to.
GET /groups/{group-id}/memberOf/microsoft.graph.administrativeUnit List admin units a group directly belongs to · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units is a group directly a member of?”
“Can I filter a group's direct memberships down to administrative units only?”
Tell an agent
List the administrative units group {group} directly belongs to.
Show only admin units in the direct memberOf of group {group}.
GET /groups/{group-id}/memberOf/microsoft.graph.administrativeUnit/$count Count admin units a group directly belongs to · Get the number of the resource #
Ask an LLM
“How many administrative units is a group directly part of?”
“Can I count just the admin units in a group's direct memberships?”
Tell an agent
Count the administrative units group {group} directly belongs to.
Tell me the number of admin units that directly contain group {group}.
GET /groups/{group-id}/memberOf/microsoft.graph.group List groups a group is directly nested in · List group memberships #
Ask an LLM
“Which parent groups is a group directly nested inside?”
“Can I list a group's direct memberships restricted to groups only, skipping roles and admin units?”
Tell an agent
List the parent groups that directly contain group {group}.
Show only groups in the direct memberOf of group {group}.
GET /groups/{group-id}/memberOf/microsoft.graph.group/$count Count groups a group is directly nested in · Get the number of the resource #
Ask an LLM
“How many parent groups directly contain a given group?”
“Can I count only groups in a group's direct memberOf?”
Tell an agent
Count the parent groups that directly contain group {group}.
Tell me how many groups group {group} is directly nested in.
GET /groups/{group-id}/members List a group's direct members · List group members #
Ask an LLM
“Who are the direct members of a group, including users, devices and contacts?”
“Does listing a group's members include people in nested subgroups?”
Tell an agent
List the direct members of group {group}.
Show the first {top} direct members of group {group}.
DELETE /groups/{group-id}/members/{directoryObject-id}/$ref Remove a member from a group · Remove member #
Ask an LLM
“How do I remove someone from a group by their object id?”
“Can I remove members from a group that uses dynamic membership?”
Tell an agent destructive · confirm first
Remove member {object} from group {group}.
Take directory object {object} out of the members of group {group}.
GET /groups/{group-id}/members/{directoryObject-id}/microsoft.graph.application Get a group member as an application · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an app that is a direct member of a group with its application properties?”
“How do I fetch one group member cast as an application?”
Tell an agent
Get application member {object} of group {group}.
Show direct member {object} of group {group} as an application.
GET /groups/{group-id}/members/{directoryObject-id}/microsoft.graph.device Get a group member as a device · Get the item of type microsoft.graph.directoryObject as microsoft.graph.device #
Ask an LLM
“Can I read a device that is a direct member of a group with its device details?”
“How do I fetch one direct group member cast as a device?”
Tell an agent
Get device member {object} of group {group}.
Show direct member {object} of group {group} as a device.
GET /groups/{group-id}/members/{directoryObject-id}/microsoft.graph.group Get a nested subgroup member of a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Can I read a subgroup that sits directly inside a group, with its group properties?”
“How do I fetch one direct member of a group cast as a group?”
Tell an agent
Get subgroup member {object} of group {group}.
Look up the nested group {object} sitting directly in group {group}.
GET /groups/{group-id}/members/{directoryObject-id}/microsoft.graph.orgContact Get a group member as an organizational contact · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an organizational contact that is a direct member of a group?”
“How do I fetch one direct group member cast as an org contact?”
Tell an agent
Get organizational contact member {object} of group {group}.
Show direct member {object} of group {group} as an org contact.
GET /groups/{group-id}/members/{directoryObject-id}/microsoft.graph.servicePrincipal Get a group member as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a service principal that is a direct member of a group?”
“How do I fetch one direct group member cast as a service principal?”
Tell an agent
Get service principal member {object} of group {group}.
Show direct member {object} of group {group} as a service principal.
GET /groups/{group-id}/members/{directoryObject-id}/microsoft.graph.user Get a group member as a user · List group members #
Ask an LLM
“Can I read a user who is a direct member of a group with their user profile fields?”
“How do I fetch one direct group member cast as a user?”
Tell an agent
Get user member {object} of group {group}.
Show the user profile of direct member {object} in group {group}.
GET /groups/{group-id}/members/$count Count a group's direct members · Get the number of the resource #
Ask an LLM
“How many direct members does a group have?”
“Can I count a group's direct members matching a filter?”
Tell an agent
Count the direct members of group {group}.
Tell me how many members are directly in group {group}.
GET /groups/{group-id}/members/$ref List member references for a group · List group members #
Ask an LLM
“Can I get just the reference ids of a group's direct members without their full objects?”
“What @odata.id links make up a group's member list?”
Tell an agent
List the member references of group {group}.
Give me only the ids of the direct members in group {group}.
POST /groups/{group-id}/members/$ref Add a member to a group · Add members #
Ask an LLM
“How do I add a user to a security or Microsoft 365 group?”
“What is the limit on how many members I can add to a group in one request?”
Tell an agent
Add {ref} as a member of group {group}.
Put the directory object at {ref} into group {group}.
DELETE /groups/{group-id}/members/$ref Remove a group member by reference link · Remove member #
Ask an LLM
“Can I remove a group member by passing its @id reference in the query string?”
“Is there a way to remove someone from a group using the full directory reference URL?”
Tell an agent destructive · confirm first
Remove the member with reference {ref_id} from group {group}.
Delete membership {ref_id} from group {group} using its @id.
GET /groups/{group-id}/members/microsoft.graph.application List applications that are group members · Get the items of type microsoft.graph.application in the… #
Ask an LLM
“Which applications are direct members of a group?”
“Can I filter a group's direct members to apps only?”
Tell an agent
List the application members of group {group}.
Show only apps among the direct members of group {group}.
GET /groups/{group-id}/members/microsoft.graph.application/$count Count applications that are group members · Get the number of the resource #
Ask an LLM
“How many applications are direct members of a group?”
“Can I count only the app members of a group?”
Tell an agent
Count the application members of group {group}.
Tell me how many apps are directly in group {group}.
GET /groups/{group-id}/members/microsoft.graph.device List devices that are group members · Get the items of type microsoft.graph.device in the… #
Ask an LLM
“Which devices are direct members of a group?”
“Can I list a group's direct members restricted to devices?”
Tell an agent
List the device members of group {group}.
Show only devices among the direct members of group {group}.
GET /groups/{group-id}/members/microsoft.graph.device/$count Count devices that are group members · Get the number of the resource #
Ask an LLM
“How many devices are direct members of a group?”
“Can I count only the device members of a group?”
Tell an agent
Count the device members of group {group}.
Tell me how many devices are directly in group {group}.
GET /groups/{group-id}/members/microsoft.graph.group List subgroups directly inside a group · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which groups are nested directly inside a group?”
“Can I list a group's direct members limited to subgroups?”
Tell an agent
List the subgroups directly inside group {group}.
Show only groups among the direct members of group {group}.
GET /groups/{group-id}/members/microsoft.graph.group/$count Count subgroups directly inside a group · Get the number of the resource #
Ask an LLM
“How many subgroups are nested directly in a group?”
“Can I count only the group-type direct members of a group?”
Tell an agent
Count the subgroups directly inside group {group}.
Tell me how many groups are direct members of group {group}.
GET /groups/{group-id}/members/microsoft.graph.orgContact List org contacts that are group members · Get the items of type microsoft.graph.orgContact in the… #
Ask an LLM
“Which organizational contacts are direct members of a group?”
“Can I list a group's direct members restricted to external contacts?”
Tell an agent
List the organizational contact members of group {group}.
Show only org contacts among the direct members of group {group}.
GET /groups/{group-id}/members/microsoft.graph.orgContact/$count Count org contacts that are group members · Get the number of the resource #
Ask an LLM
“How many organizational contacts are direct members of a group?”
“Can I count only the org contact members of a group?”
Tell an agent
Count the organizational contact members of group {group}.
Tell me how many org contacts are directly in group {group}.
GET /groups/{group-id}/members/microsoft.graph.servicePrincipal List service principals that are group members · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals are direct members of a group?”
“Can I list a group's direct members limited to service principals?”
Tell an agent
List the service principal members of group {group}.
Show only service principals among the direct members of group {group}.
GET /groups/{group-id}/members/microsoft.graph.servicePrincipal/$count Count service principals that are group members · Get the number of the resource #
Ask an LLM
“How many service principals are direct members of a group?”
“Can I count only the service principal members of a group?”
Tell an agent
Count the service principal members of group {group}.
Tell me how many service principals are directly in group {group}.
GET /groups/{group-id}/members/microsoft.graph.user List users who are direct group members · List group members #
Ask an LLM
“Which users are direct members of a group, leaving out devices and apps?”
“Can I search a group's direct user members by display name?”
Tell an agent
List the user members of group {group}.
Show only people among the direct members of group {group}.
GET /groups/{group-id}/members/microsoft.graph.user/$count Count users who are direct group members · Get the number of the resource #
Ask an LLM
“How many users are direct members of a group?”
“Can I count only the people who are directly in a group?”
Tell an agent
Count the user members of group {group}.
Tell me how many users are directly in group {group}.
GET /groups/{group-id}/membersWithLicenseErrors List group members with license assignment errors · Get membersWithLicenseErrors from groups #
Ask an LLM
“Which members of a group failed to get their group-based license assigned?”
“Can I find members whose licenses from a group assignment are in an error state?”
Tell an agent
List the members of group {group} that have license errors.
Show who in group {group} failed group-based license assignment.
GET /groups/{group-id}/membersWithLicenseErrors/{directoryObject-id} Get one group member with a license error · Get membersWithLicenseErrors from groups #
Ask an LLM
“Can I look up one specific member that has a license error from a group's license assignment?”
“How do I read a single entry from a group's license-error member list?”
Tell an agent
Get license-error member {object} of group {group}.
Show details of {object}, which has a license assignment error in group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/{directoryObject-id}/microsoft.graph.application Get a license-error member as an application · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an entry from a group's license-error members cast as an application?”
“How do I get app properties for one member flagged with a license error?”
Tell an agent
Get license-error member {object} of group {group} as an application.
Show app {object} from the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/{directoryObject-id}/microsoft.graph.device Get a license-error member as a device · Get the item of type microsoft.graph.directoryObject as microsoft.graph.device #
Ask an LLM
“Which device properties come back for a license-error member of a group read as a device?”
“Is there a way to view the hardware details of a device flagged in a group's license errors?”
Tell an agent
Get license-error member {object} of group {group} as a device.
Show device {object} from the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/{directoryObject-id}/microsoft.graph.group Get a license-error member as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Can I read a subgroup from a group's license-error members with its group properties?”
“How do I fetch one license-error member of a group cast as a group?”
Tell an agent
Read subgroup {object} flagged with license errors in group {group}.
Show subgroup {object} from the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/{directoryObject-id}/microsoft.graph.orgContact Get a license-error member as an org contact · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an organizational contact listed among a group's license-error members?”
“How do I fetch one license-error member cast as an org contact?”
Tell an agent
Get license-error member {object} of group {group} as an org contact.
Show organizational contact {object} from the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/{directoryObject-id}/microsoft.graph.servicePrincipal Get a license-error member as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a service principal listed among a group's license-error members?”
“How do I fetch one license-error member cast as a service principal?”
Tell an agent
Get license-error member {object} of group {group} as a service principal.
Show service principal {object} from the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/{directoryObject-id}/microsoft.graph.user Get a license-error member as a user · Get the item of type microsoft.graph.directoryObject as microsoft.graph.user #
Ask an LLM
“Can I see the user profile of one person whose group license assignment failed?”
“Which user fields are returned for a person flagged in a group's license errors?”
Tell an agent
Fetch the user profile of {object}, a license-error member of group {group}.
Show user {object} whose license from group {group} is in error.
GET /groups/{group-id}/membersWithLicenseErrors/$count Count group members with license errors · Get the number of the resource #
Ask an LLM
“How many members of a group have license assignment errors?”
“Is there a quick count of failed group-based license assignments for a group?”
Tell an agent
Count the license-error members of group {group}.
Tell me how many members of group {group} have license errors.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.application List applications with group license errors · Get the items of type microsoft.graph.application in the… #
Ask an LLM
“Which applications among a group's members have license errors?”
“Can I filter a group's license-error members to apps only?”
Tell an agent
List the applications with license errors in group {group}.
Show only apps among the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.application/$count Count applications with group license errors · Get the number of the resource #
Ask an LLM
“How many applications in a group have license assignment errors?”
“Can I count only the apps among a group's license-error members?”
Tell an agent
Count the applications with license errors in group {group}.
Tell me how many apps in group {group} have license errors.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.device List devices with group license errors · Get the items of type microsoft.graph.device in the… #
Ask an LLM
“Which devices among a group's members have license errors?”
“Can I filter a group's license-error members to devices only?”
Tell an agent
List the devices with license errors in group {group}.
Show only devices among the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.device/$count Count devices with group license errors · Get the number of the resource #
Ask an LLM
“How many devices in a group have license assignment errors?”
“Is there a count of just the devices a group's license assignment failed on?”
Tell an agent
Count the devices with license errors in group {group}.
Tell me how many devices in group {group} have license errors.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.group List subgroups with group license errors · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which nested groups among a group's members have license errors?”
“Can I filter a group's license-error members to groups only?”
Tell an agent
List the subgroups with license errors in group {group}.
Show only groups among the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.group/$count Count subgroups with group license errors · Get the number of the resource #
Ask an LLM
“How many nested groups in a group have license assignment errors?”
“Can I tally the nested groups flagged with license errors in a parent group?”
Tell an agent
Count the subgroups with license errors in group {group}.
Tell me how many groups in group {group} have license errors.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.orgContact List org contacts with group license errors · Get the items of type microsoft.graph.orgContact in the… #
Ask an LLM
“Which organizational contacts among a group's members have license errors?”
“Can I filter a group's license-error members to org contacts only?”
Tell an agent
List the org contacts with license errors in group {group}.
Show only organizational contacts among the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.orgContact/$count Count org contacts with group license errors · Get the number of the resource #
Ask an LLM
“How many organizational contacts in a group have license assignment errors?”
“Can I count only the org contacts among a group's license-error members?”
Tell an agent
Count the org contacts with license errors in group {group}.
Tell me how many organizational contacts in group {group} have license errors.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.servicePrincipal List service principals with group license errors · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals among a group's members have license errors?”
“Can I filter a group's license-error members to service principals only?”
Tell an agent
List the service principals with license errors in group {group}.
Show only service principals among the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.servicePrincipal/$count Count service principals with group license errors · Get the number of the resource #
Ask an LLM
“How many service principals in a group have license assignment errors?”
“Can I count only the service principals among a group's license-error members?”
Tell an agent
Count the service principals with license errors in group {group}.
Tell me how many service principals in group {group} have license errors.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.user List users with group license errors · Get the items of type microsoft.graph.user in the… #
Ask an LLM
“Which users in a group did not receive their group-assigned license because of an error?”
“Can I filter a group's license-error members to people only?”
Tell an agent
List the users with license errors in group {group}.
Show only people among the license-error members of group {group}.
GET /groups/{group-id}/membersWithLicenseErrors/microsoft.graph.user/$count Count users with group license errors · Get the number of the resource #
Ask an LLM
“How many users in a group have group-based license errors?”
“What is the number of people whose group license assignment is in error?”
Tell an agent
Count the users with license errors in group {group}.
Tell me how many people in group {group} have license errors.
GET /groups/{group-id}/owners List a group's owners · List group owners #
Ask an LLM
“Who owns a group and is allowed to modify it?”
“Why does a group synced from on-premises show no owners?”
Tell an agent
List the owners of group {group}.
Show who can manage group {group}.
DELETE /groups/{group-id}/owners/{directoryObject-id}/$ref Remove an owner from a group · Remove group owner #
Ask an LLM
“How do I remove someone as an owner of a group by their object id?”
“Can I remove the last user owner of a group?”
Tell an agent destructive · confirm first
Remove owner {object} from group {group}.
Take directory object {object} off the owners of group {group}.
GET /groups/{group-id}/owners/{directoryObject-id}/microsoft.graph.application Get a group owner as an application · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one owner of a group cast as an application?”
“How do I get the app properties of a specific group owner?”
Tell an agent
Get owner {object} of group {group} as an application.
Show application owner {object} of group {group}.
GET /groups/{group-id}/owners/{directoryObject-id}/microsoft.graph.device Get a group owner as a device · Get the item of type microsoft.graph.directoryObject as microsoft.graph.device #
Ask an LLM
“Can I read one owner of a group cast as a device?”
“How do I get device properties for a specific owner entry of a group?”
Tell an agent
Get owner {object} of group {group} as a device.
Show device owner {object} of group {group}.
GET /groups/{group-id}/owners/{directoryObject-id}/microsoft.graph.group Get a group owner as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Is there a way to view the group properties of a group object that owns another group?”
“Which fields come back when a group owner entry is read as a group type?”
Tell an agent
Look up the group object {object} that is an owner of group {group}.
Show group-type owner {object} of group {group}.
GET /groups/{group-id}/owners/{directoryObject-id}/microsoft.graph.orgContact Get a group owner as an org contact · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one owner of a group cast as an organizational contact?”
“How do I get contact details for a specific owner entry of a group?”
Tell an agent
Get owner {object} of group {group} as an org contact.
Show organizational contact owner {object} of group {group}.
GET /groups/{group-id}/owners/{directoryObject-id}/microsoft.graph.servicePrincipal Get a group owner as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one owner of a group cast as a service principal?”
“How do I get service principal details for an app that owns a group?”
Tell an agent
Get owner {object} of group {group} as a service principal.
Show service principal owner {object} of group {group}.
GET /groups/{group-id}/owners/{directoryObject-id}/microsoft.graph.user Get a group owner as a user · Get the item of type microsoft.graph.directoryObject as microsoft.graph.user #
Ask an LLM
“Can I read the user profile of one specific owner of a group?”
“How do I fetch one group owner cast as a user?”
Tell an agent
Fetch the user profile of owner {object} on group {group}.
Show user owner {object} of group {group}.
GET /groups/{group-id}/owners/$count Count a group's owners · Get the number of the resource #
Ask an LLM
“How many owners does a group have?”
“Is there a count endpoint for a group's owners?”
Tell an agent
Count the owners of group {group}.
Tell me how many owners group {group} has.
GET /groups/{group-id}/owners/$ref List owner references for a group · List group owners #
Ask an LLM
“Can I get just the reference ids of a group's owners instead of full objects?”
“What @odata.id links make up a group's owner list?”
Tell an agent
List the owner references of group {group}.
Give me only the ids of the owners of group {group}.
POST /groups/{group-id}/owners/$ref Add an owner to a group · Add owners #
Ask an LLM
“How do I make a user an owner of a Microsoft 365 or security group?”
“Can a service principal be added as a group owner?”
Tell an agent
Add {ref} as an owner of group {group}.
Make the user or service principal at {ref} an owner of group {group}.
DELETE /groups/{group-id}/owners/$ref Remove a group owner by reference link · Remove group owner #
Ask an LLM
“Is it possible to revoke group ownership by sending the owner's @id in the query?”
“Is there a way to drop an owner from a group using the full directory reference URL?”
Tell an agent destructive · confirm first
Remove the owner with reference {ref_id} from group {group}.
Delete ownership {ref_id} from group {group} using its @id.
GET /groups/{group-id}/owners/microsoft.graph.application List applications that own a group · Get the items of type microsoft.graph.application in the… #
Ask an LLM
“Which applications are owners of a group?”
“Can I filter a group's owners to apps only?”
Tell an agent
List the application owners of group {group}.
Show only apps among the owners of group {group}.
GET /groups/{group-id}/owners/microsoft.graph.application/$count Count applications that own a group · Get the number of the resource #
Ask an LLM
“How many applications own a group?”
“Can I count only the app owners of a group?”
Tell an agent
Count the application owners of group {group}.
Tell me how many apps own group {group}.
GET /groups/{group-id}/owners/microsoft.graph.device List devices among a group's owners · Get the items of type microsoft.graph.device in the… #
Ask an LLM
“Which devices appear as owners of a group?”
“Can I filter a group's owners to devices only?”
Tell an agent
List the device owners of group {group}.
Show only devices among the owners of group {group}.
GET /groups/{group-id}/owners/microsoft.graph.device/$count Count devices among a group's owners · Get the number of the resource #
Ask an LLM
“How many devices are listed as owners of a group?”
“Can I count only the device owners of a group?”
Tell an agent
Count the device owners of group {group}.
Tell me how many devices own group {group}.
GET /groups/{group-id}/owners/microsoft.graph.group List groups among a group's owners · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which groups appear as owners of a group?”
“Can I filter a group's owners to group objects only?”
Tell an agent
List the group-type owners of group {group}.
Show only groups among the owners of group {group}.
GET /groups/{group-id}/owners/microsoft.graph.group/$count Count groups among a group's owners · Get the number of the resource #
Ask an LLM
“How many groups are listed as owners of a group?”
“Can I count only the group-type owners of a group?”
Tell an agent
Count the group-type owners of group {group}.
Tell me how many groups own group {group}.
GET /groups/{group-id}/owners/microsoft.graph.orgContact List org contacts among a group's owners · Get the items of type microsoft.graph.orgContact in the… #
Ask an LLM
“Which organizational contacts appear as owners of a group?”
“Can I filter a group's owners to org contacts only?”
Tell an agent
List the org contact owners of group {group}.
Show only organizational contacts among the owners of group {group}.
GET /groups/{group-id}/owners/microsoft.graph.orgContact/$count Count org contacts among a group's owners · Get the number of the resource #
Ask an LLM
“How many organizational contacts are listed as owners of a group?”
“Can I count only the org contact owners of a group?”
Tell an agent
Count the org contact owners of group {group}.
Tell me how many organizational contacts own group {group}.
GET /groups/{group-id}/owners/microsoft.graph.servicePrincipal List service principals that own a group · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals are owners of a group?”
“Can I filter a group's owners to service principals only?”
Tell an agent
List the service principal owners of group {group}.
Show only service principals among the owners of group {group}.
GET /groups/{group-id}/owners/microsoft.graph.servicePrincipal/$count Count service principals that own a group · Get the number of the resource #
Ask an LLM
“How many service principals own a group?”
“Can I count only the service principal owners of a group?”
Tell an agent
Count the service principal owners of group {group}.
Tell me how many service principals own group {group}.
GET /groups/{group-id}/owners/microsoft.graph.user List users who own a group · Get the items of type microsoft.graph.user in the… #
Ask an LLM
“Which people are owners of a group, leaving out service principals?”
“Can I filter a group's owners to users only?”
Tell an agent
List the user owners of group {group}.
Show only people among the owners of group {group}.
GET /groups/{group-id}/owners/microsoft.graph.user/$count Count users who own a group · Get the number of the resource #
Ask an LLM
“How many users own a group?”
“Can I count only the people who own a group?”
Tell an agent
Count the user owners of group {group}.
Tell me how many people own group {group}.
GET /groups/{group-id}/rejectedSenders List who is blocked from posting to a group · List rejectedSenders #
Ask an LLM
“Who is blocked from posting to a group's conversations?”
“Can I see the full details of users on a group's rejected senders list?”
Tell an agent
Show the rejected senders for group {group}.
List every user or group blocked from posting in group {group}.
DELETE /groups/{group-id}/rejectedSenders/{directoryObject-id}/$ref Unblock one rejected sender from a group · Remove rejectedSender #
Ask an LLM
“How can I unblock a specific user so they can post to a group again?”
“Can I take one object id off a group's rejected senders list?”
Tell an agent destructive · confirm first
Remove {object} from the rejected senders of group {group}.
Unblock directory object {object} from posting in group {group}.
GET /groups/{group-id}/rejectedSenders/$count Count a group's rejected senders · Get the number of the resource #
Ask an LLM
“How many senders are blocked from posting to a group?”
“Can I get a count of a group's rejected senders filtered by a condition?”
Tell an agent
Count the rejected senders on group {group}.
Tell me how many users are blocked from posting in group {group}.
GET /groups/{group-id}/rejectedSenders/$ref List rejected sender references for a group · List rejectedSenders #
Ask an LLM
“Can I list only the reference ids of a group's blocked senders?”
“What @odata.id links are on a group's rejected senders list?”
Tell an agent
List the rejected sender references for group {group}.
Give me just the ids of blocked senders in group {group}.
POST /groups/{group-id}/rejectedSenders/$ref Block a user or group from posting to a group · Create rejectedSender #
Ask an LLM
“How do I stop a particular user from posting to a group's conversations?”
“Will blocking a sender fail if they are already on the group's accepted senders list?”
Tell an agent
Add {ref} to the rejected senders of group {group}.
Block the user at {ref} from posting in group {group}.
DELETE /groups/{group-id}/rejectedSenders/$ref Unblock a rejected sender by reference link · Remove rejectedSender #
Ask an LLM
“Can I remove a blocked sender from a group by passing its @id reference in the query string?”
“Is there a way to unblock a sender using the full directory reference URL?”
Tell an agent destructive · confirm first
Remove the rejected sender with reference {ref_id} from group {group}.
Unblock sender {ref_id} on group {group} using its @id.
GET /groups/{group-id}/transitiveMemberOf List all groups a group belongs to, incl. nested · List group transitive memberOf #
Ask an LLM
“Which groups does a group belong to, including through nested parent groups?”
“Does the transitive memberOf list return all group types, not just Microsoft 365 groups?”
Tell an agent
List every group group {group} belongs to directly or through nesting.
Show the full transitive memberOf of group {group}.
GET /groups/{group-id}/transitiveMemberOf/{directoryObject-id} Get one direct or nested parent of a group · Get transitiveMemberOf from groups #
Ask an LLM
“Can I fetch a single entry from a group's transitive memberships, even if it is an indirect parent?”
“How do I read one ancestor of a group reached through nested membership?”
Tell an agent
Get ancestor {object} from the transitive memberOf of group {group}.
Show details of {object}, which group {group} belongs to directly or via nesting.
GET /groups/{group-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a nested parent of a group as an admin unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an administrative unit that a group belongs to directly or through nesting?”
“How do I get an ancestor admin unit from a group's transitive memberships?”
Tell an agent
Get administrative unit {object} from the transitive memberOf of group {group}.
Show ancestor {object} of group {group} as an administrative unit.
GET /groups/{group-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.group Get a nested parent of a group as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Can I read an ancestor group that a group is nested in, even indirectly, with group properties?”
“How do I fetch one transitive parent of a group cast as a group?”
Tell an agent
Read the group properties of ancestor group {object} above group {group}.
Show transitive parent {object} of group {group} cast as a group.
GET /groups/{group-id}/transitiveMemberOf/$count Count everything a group belongs to, incl. nested · Get the number of the resource #
Ask an LLM
“How many groups and units does a group belong to once nested memberships are included?”
“Can I count a group's transitive memberOf entries?”
Tell an agent
Count the transitive memberships of group {group}.
Tell me how many ancestors group {group} has, including nested ones.
GET /groups/{group-id}/transitiveMemberOf/microsoft.graph.administrativeUnit List admin units a group belongs to, incl. nested · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units contain a group, directly or through a parent group?”
“Can I restrict a group's transitive memberships to administrative units?”
Tell an agent
List the administrative units group {group} belongs to, including via nesting.
Show only admin units in the transitive memberOf of group {group}.
GET /groups/{group-id}/transitiveMemberOf/microsoft.graph.administrativeUnit/$count Count admin units a group belongs to, incl. nested · Get the number of the resource #
Ask an LLM
“How many administrative units does a group fall under once nested memberships count?”
“Can I count only the admin units among a group's transitive memberships?”
Tell an agent
Count the administrative units in the transitive memberOf of group {group}.
Tell me how many admin units contain group {group} directly or indirectly.
GET /groups/{group-id}/transitiveMemberOf/microsoft.graph.group List all ancestor groups of a group · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“What are all the ancestor groups a group is nested under, at any depth?”
“Can I list a group's transitive memberships filtered to groups only?”
Tell an agent
List all ancestor groups of group {group}.
Show only groups in the transitive memberOf of group {group}.
GET /groups/{group-id}/transitiveMemberOf/microsoft.graph.group/$count Count all ancestor groups of a group · Get the number of the resource #
Ask an LLM
“How many ancestor groups does a group have at any nesting depth?”
“Can I count only groups in a group's transitive memberOf?”
Tell an agent
Count the ancestor groups of group {group}.
Tell me how many groups contain group {group}, including nested parents.
GET /groups/{group-id}/transitiveMembers List all members of a group, incl. nested · List group transitive members #
Ask an LLM
“Who are all the members of a group once nested subgroups are flattened?”
“What error do I get if I filter transitive members by an unsupported member type?”
Tell an agent
List every member of group {group}, including nested ones.
Show the flattened transitive membership of group {group}.
GET /groups/{group-id}/transitiveMembers/{directoryObject-id} Get one direct or nested member of a group · Get transitiveMembers from groups #
Ask an LLM
“Can I fetch a single member of a group even if they are in only through a nested subgroup?”
“How do I read one entry from a group's transitive members?”
Tell an agent
Get transitive member {object} of group {group}.
Show {object}, a direct or nested member of group {group}.
GET /groups/{group-id}/transitiveMembers/{directoryObject-id}/microsoft.graph.application Get a nested member of a group as an application · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an app that belongs to a group directly or through nesting, with app properties?”
“How do I fetch one transitive member of a group cast as an application?”
Tell an agent
Get transitive member {object} of group {group} as an application.
Show nested app member {object} of group {group}.
GET /groups/{group-id}/transitiveMembers/{directoryObject-id}/microsoft.graph.device Get a nested member of a group as a device · Get the item of type microsoft.graph.directoryObject as microsoft.graph.device #
Ask an LLM
“Can I read a device that belongs to a group directly or through a subgroup?”
“How do I fetch one transitive member of a group cast as a device?”
Tell an agent
Get transitive member {object} of group {group} as a device.
Show nested device member {object} of group {group}.
GET /groups/{group-id}/transitiveMembers/{directoryObject-id}/microsoft.graph.group Get a nested member of a group as a group · List group transitive members #
Ask an LLM
“Can I read a subgroup that sits anywhere under a group's nesting, with group properties?”
“Which group fields do I get for a subgroup found in a group's flattened membership?”
Tell an agent
Read nested group {object} found anywhere under group {group}.
Show nested subgroup {object} under group {group}.
GET /groups/{group-id}/transitiveMembers/{directoryObject-id}/microsoft.graph.orgContact Get a nested member of a group as an org contact · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an organizational contact that belongs to a group through nested membership?”
“How do I fetch one transitive member of a group cast as an org contact?”
Tell an agent
Get transitive member {object} of group {group} as an org contact.
Show nested organizational contact {object} in group {group}.
GET /groups/{group-id}/transitiveMembers/{directoryObject-id}/microsoft.graph.servicePrincipal Get a nested member of a group as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a service principal that belongs to a group directly or via a subgroup?”
“Is there a way to see service principal details for a nested member of a group?”
Tell an agent
Get transitive member {object} of group {group} as a service principal.
Show nested service principal {object} in group {group}.
GET /groups/{group-id}/transitiveMembers/{directoryObject-id}/microsoft.graph.user Get a nested member of a group as a user · List group transitive members #
Ask an LLM
“Can I check the profile of a user who is in a group only through a nested subgroup?”
“Which user profile fields come back for a person in a group through nesting?”
Tell an agent
Fetch the user record of {object}, a nested member of group {group}.
Show nested user {object} in group {group}.
GET /groups/{group-id}/transitiveMembers/$count Count all members of a group, incl. nested · Get the number of the resource #
Ask an LLM
“How many members does a group have once nested subgroups are included?”
“Can I count a group's transitive members?”
Tell an agent
Count all transitive members of group {group}.
Tell me how many members group {group} has, including nested ones.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.application List apps in a group, incl. nested · Get the items of type microsoft.graph.application in the… #
Ask an LLM
“Which applications belong to a group directly or through nested subgroups?”
“Can I filter a group's transitive members to apps only?”
Tell an agent
List the applications in group {group}, including nested membership.
Show only apps among the transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.application/$count Count apps in a group, incl. nested · Get the number of the resource #
Ask an LLM
“How many applications are in a group once nested membership counts?”
“Can I count only the apps among a group's transitive members?”
Tell an agent
Count the applications in group {group}, including nested membership.
Tell me how many apps are transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.device List devices in a group, incl. nested · Get the items of type microsoft.graph.device in the… #
Ask an LLM
“Which devices belong to a group directly or through nested subgroups?”
“Can I filter a group's transitive members to devices only?”
Tell an agent
List the devices in group {group}, including nested membership.
Show only devices among the transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.device/$count Count devices in a group, incl. nested · Get the number of the resource #
Ask an LLM
“How many devices are in a group once nested membership counts?”
“Can I count only the devices among a group's transitive members?”
Tell an agent
Count the devices in group {group}, including nested membership.
Tell me how many devices are transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.group List all subgroups nested under a group · List group transitive members #
Ask an LLM
“What are all the subgroups nested under a group at any depth?”
“Can I filter a group's transitive members to groups only?”
Tell an agent
List every subgroup nested under group {group}.
Show only groups among the transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.group/$count Count all subgroups nested under a group · Get the number of the resource #
Ask an LLM
“How many subgroups are nested under a group at any depth?”
“Can I count only the groups among a group's transitive members?”
Tell an agent
Count every subgroup nested under group {group}.
Tell me how many groups are transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.orgContact List org contacts in a group, incl. nested · Get the items of type microsoft.graph.orgContact in the… #
Ask an LLM
“Which organizational contacts belong to a group directly or through nested subgroups?”
“Can I filter a group's transitive members to org contacts only?”
Tell an agent
List the org contacts in group {group}, including nested membership.
Show only organizational contacts among the transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.orgContact/$count Count org contacts in a group, incl. nested · Get the number of the resource #
Ask an LLM
“How many organizational contacts are in a group once nested membership counts?”
“Can I count only the org contacts among a group's transitive members?”
Tell an agent
Count the org contacts in group {group}, including nested membership.
Tell me how many organizational contacts are transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.servicePrincipal List service principals in a group, incl. nested · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals belong to a group directly or through nested subgroups?”
“Can I filter a group's transitive members to service principals only?”
Tell an agent
List the service principals in group {group}, including nested membership.
Show only service principals among the transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.servicePrincipal/$count Count service principals in a group, incl. nested · Get the number of the resource #
Ask an LLM
“How many service principals are in a group once nested membership counts?”
“Can I count only the service principals among a group's transitive members?”
Tell an agent
Count the service principals in group {group}, including nested membership.
Tell me how many service principals are transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.user List every user in a group, incl. nested · List group transitive members #
Ask an LLM
“Who are all the people in a group, including those who only belong through nested subgroups?”
“Can I filter a group's transitive members to users only?”
Tell an agent
List every user in group {group}, including nested membership.
Show only people among the transitive members of group {group}.
GET /groups/{group-id}/transitiveMembers/microsoft.graph.user/$count Count every user in a group, incl. nested · Get the number of the resource #
Ask an LLM
“How many people are in a group once nested subgroups are flattened?”
“Can I count only the users among a group's transitive members?”
Tell an agent
Count every user in group {group}, including nested membership.
Tell me how many people are transitive members of group {group}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-groups-directoryobject-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-groups-directoryobject-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-groups-directoryobject-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Groups.directory Object API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (1057 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-groups-directoryobject-api-openapi.yml