Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Service Principals.directory Object API

The servicePrincipals.directoryObject API from Microsoft Entra ID (formerly Azure AD) — 64 operation(s) for serviceprincipals.directoryobject.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 66

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /servicePrincipals/{servicePrincipal-id}/createdObjects List objects a service principal created · servicePrincipal: List createdObjects #
Ask an LLM
“Which directory objects were created by a particular service principal?”
“Can I see everything an app's service principal has created in my tenant?”
Tell an agent
List all directory objects created by service principal {sp}.
Show the first {top} objects that service principal {sp} created.
GET /servicePrincipals/{servicePrincipal-id}/createdObjects/{directoryObject-id} Get one object a service principal created · Get createdObjects from servicePrincipals #
Ask an LLM
“What are the details of a single object that a service principal created?”
“Can I look up one specific created object by its id under its creating service principal?”
Tell an agent
Get created object {object} from service principal {sp}.
Show me the directory object {object} that {sp} created.
GET /servicePrincipals/{servicePrincipal-id}/createdObjects/{directoryObject-id}/microsoft.graph.servicePrincipal Get a created object typed as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a created object with its service principal properties rather than generic directory fields?”
“Is the object a service principal created itself a service principal, and what are its app details?”
Tell an agent
Get created object {object} of service principal {sp}, cast as a service principal.
Return created item {object} under {sp} with its full service principal fields.
GET /servicePrincipals/{servicePrincipal-id}/createdObjects/$count Count objects a service principal created · Get the number of the resource #
Ask an LLM
“How many directory objects has a given service principal created?”
“Is there a quick way to get just the total of created objects for an app without listing them?”
Tell an agent
Count the directory objects created by service principal {sp}.
Give me the number of created objects for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/createdObjects/microsoft.graph.servicePrincipal List service principals a service principal created · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals were created by another service principal?”
“Can I filter a service principal's created objects down to only service principals?”
Tell an agent
List only the service principals that {sp} created.
Show created objects of {sp} that are service principals, first {top}.
GET /servicePrincipals/{servicePrincipal-id}/createdObjects/microsoft.graph.servicePrincipal/$count Count service principals a service principal created · Get the number of the resource #
Ask an LLM
“How many service principals has one service principal created?”
“What is the total of created objects that are themselves service principals?”
Tell an agent
Count the service principals created by {sp}.
Tell me how many of the objects {sp} created are service principals.
GET /servicePrincipals/{servicePrincipal-id}/memberOf List a service principal's direct memberships · List servicePrincipal memberOf #
Ask an LLM
“Which groups and directory roles is a service principal directly a member of?”
“Does the memberOf list for an app include nested group memberships?”
Tell an agent
List the groups and roles service principal {sp} directly belongs to.
Show the direct, non-transitive memberships of {sp}.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/{directoryObject-id} Get one direct membership of a service principal · Get memberOf from servicePrincipals #
Ask an LLM
“Can I fetch a single group or role that a service principal is directly a member of?”
“What does one direct membership entry for a service principal look like?”
Tell an agent
Get direct membership {object} of service principal {sp}.
Show the group or role {object} that {sp} is directly a member of.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a direct membership as an administrative unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one of a service principal's direct memberships as an administrative unit?”
“What are the admin unit details for a unit a service principal directly belongs to?”
Tell an agent
Get direct membership {unit} of {sp} as an administrative unit.
Show administrative unit {unit} that service principal {sp} is directly in.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/{directoryObject-id}/microsoft.graph.directoryRole Get a direct membership as a directory role · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read one of a service principal's direct memberships as a directory role?”
“Which role details come back for a role a service principal holds directly?”
Tell an agent
Get direct membership {role} of {sp} as a directory role.
Show directory role {role} that service principal {sp} directly holds.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/{directoryObject-id}/microsoft.graph.group Get a direct membership as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Can I read one of a service principal's direct memberships with its group properties?”
“What are the group details for a group an app is directly a member of?”
Tell an agent
Get direct membership {group} of {sp} as a group.
Show group {group} that service principal {sp} is directly a member of.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/$count Count a service principal's direct memberships · Get the number of the resource #
Ask an LLM
“How many groups and roles is a service principal directly a member of?”
“What is the total of direct memberships for one app?”
Tell an agent
Count the direct memberships of service principal {sp}.
Give me the number of groups and roles {sp} directly belongs to.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/microsoft.graph.administrativeUnit List admin units a service principal is directly in · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units is a service principal directly a member of?”
“Can I narrow a service principal's direct memberships to administrative units only?”
Tell an agent
List the administrative units {sp} is directly a member of.
Show only admin-unit memberships held directly by service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/microsoft.graph.administrativeUnit/$count Count admin units a service principal is directly in · Get the number of the resource #
Ask an LLM
“How many administrative units does a service principal directly belong to?”
“What is the count of direct admin-unit memberships for an app?”
Tell an agent
Count the administrative units {sp} is directly in.
Tell me how many admin units service principal {sp} directly belongs to.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/microsoft.graph.directoryRole List directory roles a service principal holds directly · Get the items of type microsoft.graph.directoryRole in the… #
Ask an LLM
“Which directory roles has a service principal been directly assigned?”
“Can I list only the roles, not groups, that an app is directly a member of?”
Tell an agent
List the directory roles service principal {sp} holds directly.
Show only direct directory-role memberships for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/microsoft.graph.directoryRole/$count Count directory roles a service principal holds directly · Get the number of the resource #
Ask an LLM
“How many directory roles does a service principal directly hold?”
“What is the number of direct role memberships for an app?”
Tell an agent
Count the directory roles {sp} directly holds.
Tell me how many roles service principal {sp} is directly assigned.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/microsoft.graph.group List groups a service principal is directly in · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which groups is a service principal directly a member of?”
“Can I see only the direct group memberships of an app, without roles?”
Tell an agent
List the groups service principal {sp} is directly a member of.
Show only direct group memberships for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/memberOf/microsoft.graph.group/$count Count groups a service principal is directly in · Get the number of the resource #
Ask an LLM
“How many groups is a service principal directly a member of?”
“What is the direct group membership total for an app?”
Tell an agent
Count the groups {sp} is directly in.
Tell me how many groups service principal {sp} directly belongs to.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects List objects a service principal owns · servicePrincipals: List ownedObjects #
Ask an LLM
“Which applications, groups or other objects does a service principal own?”
“Can I get every directory object owned by an app's service principal?”
Tell an agent
List all objects owned by service principal {sp}.
Show the first {top} directory objects that {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/{directoryObject-id} Get one object a service principal owns · Get ownedObjects from servicePrincipals #
Ask an LLM
“Can I fetch a single owned object by id for a service principal?”
“What are the generic directory details of one object an app owns?”
Tell an agent
Get owned object {object} of service principal {sp}.
Show the directory object {object} that {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/{directoryObject-id}/microsoft.graph.application Get an owned object as an application · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an object a service principal owns with its application registration properties?”
“What app registration details come back for an application owned by a service principal?”
Tell an agent
Get owned object {app} of {sp} as an application.
Show application {app} that service principal {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/{directoryObject-id}/microsoft.graph.appRoleAssignment Get an owned object as an app role assignment · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an owned object of a service principal as an app role assignment?”
“Which role and principal does an app role assignment owned by a service principal point to?”
Tell an agent
Get owned object {assignment} of {sp} as an app role assignment.
Show app role assignment {assignment} owned by service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/{directoryObject-id}/microsoft.graph.endpoint Get an owned object as an endpoint · Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint #
Ask an LLM
“Can I read an owned object of a service principal as an endpoint?”
“What endpoint details are returned for one endpoint a service principal owns?”
Tell an agent
Get owned object {endpoint} of {sp} as an endpoint.
Show endpoint {endpoint} owned by service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/{directoryObject-id}/microsoft.graph.group Get an owned object as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Can I read a group that a service principal owns with its group properties?”
“What group details come back for one group owned by an app?”
Tell an agent
Get owned object {group} of {sp} as a group.
Show group {group} that service principal {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/{directoryObject-id}/microsoft.graph.servicePrincipal Get an owned object as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read another service principal that this service principal owns?”
“What app details come back for a service principal owned by a different one?”
Tell an agent
Get owned object {owned} of {sp} as a service principal.
Show service principal {owned} that is owned by service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/$count Count objects a service principal owns · Get the number of the resource #
Ask an LLM
“How many directory objects does a service principal own in total?”
“What is the owned-object count for one app?”
Tell an agent
Count all objects owned by service principal {sp}.
Give me the total number of owned objects for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.application List applications a service principal owns · Get the items of type microsoft.graph.application in the… #
Ask an LLM
“Which application registrations does a service principal own?”
“Can I narrow a service principal's owned objects to applications only?”
Tell an agent
List the applications owned by service principal {sp}.
Show only application registrations that {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.application/$count Count applications a service principal owns · Get the number of the resource #
Ask an LLM
“How many application registrations does a service principal own?”
“What is the number of apps owned by one service principal?”
Tell an agent
Count the applications owned by {sp}.
Tell me how many app registrations service principal {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.appRoleAssignment List app role assignments a service principal owns · Get the items of type microsoft.graph.appRoleAssignment in the… #
Ask an LLM
“Which app role assignments are owned by a service principal?”
“Can I filter a service principal's owned objects to app role assignments?”
Tell an agent
List the app role assignments owned by service principal {sp}.
Show only owned app role assignments for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.appRoleAssignment/$count Count app role assignments a service principal owns · Get the number of the resource #
Ask an LLM
“How many app role assignments does a service principal own?”
“What is the owned app role assignment total for an app?”
Tell an agent
Count the app role assignments owned by {sp}.
Tell me how many app role assignments service principal {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.endpoint List endpoints a service principal owns · Get the items of type microsoft.graph.endpoint in the… #
Ask an LLM
“Which endpoints does a service principal own?”
“Can I see just the endpoint objects owned by an app's service principal?”
Tell an agent
List the endpoints owned by service principal {sp}.
Show only owned endpoint objects for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.endpoint/$count Count endpoints a service principal owns · Get the number of the resource #
Ask an LLM
“How many endpoints does a service principal own?”
“What is the owned endpoint total for one app?”
Tell an agent
Count the endpoints owned by {sp}.
Tell me how many endpoint objects service principal {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.group List groups a service principal owns · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which groups are owned by a service principal?”
“Can I narrow an app's owned objects to groups only?”
Tell an agent
List the groups owned by service principal {sp}.
Show only the groups that {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.group/$count Count groups a service principal owns · Get the number of the resource #
Ask an LLM
“How many groups does a service principal own?”
“What is the number of groups owned by one app?”
Tell an agent
Count the groups owned by {sp}.
Tell me how many groups service principal {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.servicePrincipal List service principals a service principal owns · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which other service principals does this service principal own?”
“Can I filter owned objects to only service principals?”
Tell an agent
List the service principals owned by service principal {sp}.
Show only owned service principal objects for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/ownedObjects/microsoft.graph.servicePrincipal/$count Count service principals a service principal owns · Get the number of the resource #
Ask an LLM
“How many service principals are owned by one service principal?”
“What is the owned service principal total for an app?”
Tell an agent
Count the service principals owned by {sp}.
Tell me how many other service principals {sp} owns.
GET /servicePrincipals/{servicePrincipal-id}/owners List the owners of a service principal · Get owners from servicePrincipals #
Ask an LLM
“Who are the owners allowed to modify a service principal?”
“Which users and service principals own an enterprise app?”
Tell an agent
List the owners of service principal {sp}.
Show who owns {sp}, with their full directory objects.
DELETE /servicePrincipals/{servicePrincipal-id}/owners/{directoryObject-id}/$ref Remove an owner from a service principal by owner id · Remove service principal owner #
Ask an LLM
“Can I remove a specific owner from a service principal using the owner's object id?”
“What is the recommended minimum number of owners to keep on a service principal?”
Tell an agent destructive · confirm first
Remove owner {owner} from service principal {sp}.
Take object {owner} off the owners of {sp} using its id in the path.
GET /servicePrincipals/{servicePrincipal-id}/owners/{directoryObject-id}/microsoft.graph.appRoleAssignment Get a service principal owner as an app role assignment · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an owner of a service principal as an app role assignment?”
“Which app role assignment details come back for that type of owner?”
Tell an agent
Get owner {owner} of {sp} as an app role assignment.
Show the app role assignment owner {owner} on service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/owners/{directoryObject-id}/microsoft.graph.endpoint Get a service principal owner as an endpoint · Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint #
Ask an LLM
“Can I read an owner of a service principal cast as an endpoint?”
“What endpoint properties does an endpoint-type owner of an app have?”
Tell an agent
Get owner {owner} of {sp} as an endpoint.
Show the endpoint owner {owner} on service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/owners/{directoryObject-id}/microsoft.graph.servicePrincipal Get a service principal owner as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an owner that is itself a service principal with its app properties?”
“Which service principal owns this enterprise app, and what are its details?”
Tell an agent
Get owner {owner} of {sp} as a service principal.
Fetch owner {owner} of {sp} with its app identity fields.
GET /servicePrincipals/{servicePrincipal-id}/owners/{directoryObject-id}/microsoft.graph.user Get a service principal owner as a user · Get the item of type microsoft.graph.directoryObject as microsoft.graph.user #
Ask an LLM
“Can I read a user owner of a service principal with their user profile fields?”
“What user details come back for a person who owns an enterprise app?”
Tell an agent
Get owner {owner} of {sp} as a user.
Show the user profile of owner {owner} on service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/owners/$count Count the owners of a service principal · Get the number of the resource #
Ask an LLM
“How many owners does a service principal have?”
“Does an app have fewer than the two owners recommended as a best practice?”
Tell an agent
Count the owners of service principal {sp}.
Tell me how many owners {sp} has.
GET /servicePrincipals/{servicePrincipal-id}/owners/$ref List owner references of a service principal · Get ref of owners from servicePrincipals #
Ask an LLM
“Can I get just the reference links for a service principal's owners instead of full objects?”
“What are the @odata.id references of everyone who owns an app?”
Tell an agent
List owner references ($ref) for service principal {sp}.
Return only the owner reference URLs of {sp}.
POST /servicePrincipals/{servicePrincipal-id}/owners/$ref Add an owner to a service principal · servicePrincipal: Add owner #
Ask an LLM
“How do I add an owner to a service principal?”
“Can a service principal be an owner of itself or of another service principal?”
Tell an agent
Add {owner} as an owner of service principal {sp}.
Make the directory object at reference {owner} an owner of {sp}.
DELETE /servicePrincipals/{servicePrincipal-id}/owners/$ref Remove a service principal owner by reference URL · Remove service principal owner #
Ask an LLM
“Can I remove an owner from a service principal by passing the owner's reference URL as a query parameter?”
“Which reference form does the owner-removal call take when the owner id is not in the path?”
Tell an agent destructive · confirm first
Remove the owner referenced by {ref} from service principal {sp}.
Delete owner reference {ref} on {sp} using the @id query parameter.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.appRoleAssignment List service principal owners that are app role assignments · Get the items of type microsoft.graph.appRoleAssignment in the… #
Ask an LLM
“Which owners of a service principal are app role assignments?”
“Can I filter an app's owners to app role assignment objects?”
Tell an agent
List owners of {sp} that are app role assignments.
Show only app role assignment owners on service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.appRoleAssignment/$count Count service principal owners that are app role assignments · Get the number of the resource #
Ask an LLM
“How many owners of a service principal are app role assignments?”
“What is the count of app-role-assignment owners on an app?”
Tell an agent
Count the app role assignment owners of {sp}.
Tell me how many owners of service principal {sp} are app role assignments.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.endpoint List service principal owners that are endpoints · Get the items of type microsoft.graph.endpoint in the… #
Ask an LLM
“Which owners of a service principal are endpoint objects?”
“Can I narrow an app's owner list to endpoints?”
Tell an agent
List owners of {sp} that are endpoints.
Show only endpoint-type owners on service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.endpoint/$count Count service principal owners that are endpoints · Get the number of the resource #
Ask an LLM
“How many owners of a service principal are endpoints?”
“What is the endpoint owner total on an app?”
Tell an agent
Count the endpoint owners of {sp}.
Tell me how many owners of service principal {sp} are endpoints.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.servicePrincipal List service principal owners that are service principals · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals are owners of this service principal?”
“Can I see only the app identities, not people, that own an enterprise app?”
Tell an agent
List owners of {sp} that are service principals.
Show only service principal owners on {sp}.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.servicePrincipal/$count Count service principal owners that are service principals · Get the number of the resource #
Ask an LLM
“How many owners of a service principal are other service principals?”
“What is the count of app identities that own this app?”
Tell an agent
Count only the app-identity owners, not users, of {sp}.
Tell me how many owners of {sp} are service principals.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.user List user owners of a service principal · Get the items of type microsoft.graph.user in the… #
Ask an LLM
“Which people own a given service principal?”
“Can I list only the user accounts among an enterprise app's owners?”
Tell an agent
List the users who own service principal {sp}.
Show only user owners of {sp}.
GET /servicePrincipals/{servicePrincipal-id}/owners/microsoft.graph.user/$count Count user owners of a service principal · Get the number of the resource #
Ask an LLM
“How many users own a service principal?”
“What is the number of people listed as owners of an app?”
Tell an agent
Count the user owners of {sp}.
Tell me how many users own service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf List all memberships of a service principal, nested too · List servicePrincipal transitive memberOf #
Ask an LLM
“Which groups and roles does a service principal belong to, including through nested groups?”
“Can I get an app's full transitive membership rather than only direct ones?”
Tell an agent
List every group and role {sp} belongs to, including nested memberships.
Show the transitive memberships of service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/{directoryObject-id} Get one transitive membership of a service principal · Get transitiveMemberOf from servicePrincipals #
Ask an LLM
“Can I fetch a single group or role a service principal belongs to through nesting?”
“What does one transitive membership entry of an app contain?”
Tell an agent
Get transitive membership {object} of service principal {sp}.
Show the directly or indirectly joined group or role {object} for {sp}.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a transitive membership as an administrative unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an administrative unit a service principal belongs to via nesting?”
“What admin unit details come back for an inherited membership of an app?”
Tell an agent
Get transitive membership {unit} of {sp} as an administrative unit.
Show administrative unit {unit} that {sp} belongs to directly or through nesting.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.directoryRole Get a transitive membership as a directory role · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a directory role a service principal holds through group nesting?”
“What role details come back for an inherited role membership of an app?”
Tell an agent
Get transitive membership {role} of {sp} as a directory role.
Show directory role {role} that {sp} holds directly or through nesting.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.group Get a transitive membership as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Can I read a group a service principal belongs to through nested groups?”
“What group details come back for an inherited group membership of an app?”
Tell an agent
Get transitive membership {group} of {sp} as a group.
Show group {group} that {sp} is in directly or through nesting.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/$count Count all memberships of a service principal, nested too · Get the number of the resource #
Ask an LLM
“How many groups and roles does a service principal belong to once nested memberships are included?”
“What is an app's total transitive membership count?”
Tell an agent
Count the transitive memberships of service principal {sp}.
Give me the number of groups and roles {sp} belongs to including nesting.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/microsoft.graph.administrativeUnit List admin units a service principal is in, nested too · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units does a service principal belong to, counting nested memberships?”
“Can I list an app's transitive admin-unit memberships only?”
Tell an agent
List administrative units {sp} belongs to, including through nesting.
Show transitive admin-unit memberships for service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/microsoft.graph.administrativeUnit/$count Count admin units a service principal is in, nested too · Get the number of the resource #
Ask an LLM
“How many administrative units does a service principal belong to including nested ones?”
“What is the transitive admin-unit total for an app?”
Tell an agent
Count administrative units {sp} belongs to transitively.
Tell me how many admin units service principal {sp} is in, nested included.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/microsoft.graph.directoryRole List directory roles a service principal holds, nested too · Get the items of type microsoft.graph.directoryRole in the… #
Ask an LLM
“Which directory roles does a service principal effectively hold, including via group nesting?”
“Can I list an app's transitive directory-role memberships only?”
Tell an agent
List directory roles {sp} holds, including through nested groups.
Show transitive directory-role memberships for service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/microsoft.graph.directoryRole/$count Count directory roles a service principal holds, nested too · Get the number of the resource #
Ask an LLM
“How many directory roles does a service principal hold once nesting is counted?”
“What is the transitive role total for an app?”
Tell an agent
Count directory roles {sp} holds transitively.
Tell me how many roles service principal {sp} has, nested included.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/microsoft.graph.group List groups a service principal is in, nested too · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which groups does a service principal belong to, including groups inside groups?”
“Can I list an app's transitive group memberships without roles?”
Tell an agent
List groups {sp} belongs to, including through nested groups.
Show transitive group memberships for service principal {sp}.
GET /servicePrincipals/{servicePrincipal-id}/transitiveMemberOf/microsoft.graph.group/$count Count groups a service principal is in, nested too · Get the number of the resource #
Ask an LLM
“How many groups does a service principal belong to once nested groups are counted?”
“What is the transitive group total for an app?”
Tell an agent
Count groups {sp} belongs to transitively.
Tell me how many groups service principal {sp} is in, nested included.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-serviceprincipals-directoryobject-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-serviceprincipals-directoryobject-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-serviceprincipals-directoryobject-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Applications Service Principals.directory Object API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (956 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-serviceprincipals-directoryobject-api-openapi.yml