Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID (formerly Azure AD) Users.directory Object API

The users.directoryObject API from Microsoft Entra ID (formerly Azure AD) — 84 operation(s) for users.directoryobject.

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 88

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /users/{user-id}/createdObjects List directory objects a user created · Get createdObjects from users #
Ask an LLM
“Which directory objects did a particular user create?”
“Can I filter the objects someone created by a property?”
Tell an agent
List everything {user} has created in the directory.
Show objects created by {user} matching {filter}.
GET /users/{user-id}/createdObjects/{directoryObject-id} Get one object a user created · Get createdObjects from users #
Ask an LLM
“How do I look up a single object from a user's created objects?”
“Can I fetch one specific item a user created by its ID?”
Tell an agent
Get created object {object} from {user}'s created items.
Fetch the object {object} that {user} created, returning only {fields}.
GET /users/{user-id}/createdObjects/{directoryObject-id}/microsoft.graph.servicePrincipal Get a user-created object as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an object a user created cast as a service principal?”
“What does a user-created service principal look like when fetched by ID?”
Tell an agent
Get {object} from {user}'s created objects as a service principal.
Cast created object {object} of {user} to a service principal and show it.
GET /users/{user-id}/createdObjects/$count Count the objects a user created · Get the number of the resource #
Ask an LLM
“How many directory objects has a given user created?”
“Is it possible to count only the created objects that match a filter?”
Tell an agent
Count the objects {user} has created.
Tell me how many created objects of {user} match {filter}.
GET /users/{user-id}/createdObjects/microsoft.graph.servicePrincipal List service principals a user created · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals were created by a specific user?”
“Can I search the service principals a person created by name?”
Tell an agent
List the service principals {user} created.
Search service principals created by {user} for {term}.
GET /users/{user-id}/createdObjects/microsoft.graph.servicePrincipal/$count Count service principals a user created · Get the number of the resource #
Ask an LLM
“How many service principals has one user created?”
“What's the total of created service principals for a user matching a filter?”
Tell an agent
Count service principals created by {user}.
Give the number of service principals {user} created that match {filter}.
GET /users/{user-id}/directReports List a user's direct reports · List directReports (for agentUser) #
Ask an LLM
“Who reports directly to a given user or agent user?”
“Can I list both users and contacts that report to someone?”
Tell an agent
List direct reports of {user}.
Show {user}'s direct reports filtered by {filter}.
GET /users/{user-id}/directReports/{directoryObject-id} Get one direct report of a user · Get directReports from users #
Ask an LLM
“How do I fetch a single person from someone's direct reports?”
“Can I check whether a specific object is one of a manager's reports?”
Tell an agent
Get direct report {report} of {user}.
Look up {report} among the people reporting to {user}.
GET /users/{user-id}/directReports/{directoryObject-id}/microsoft.graph.orgContact Get a direct report as an org contact · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a direct report as an organizational contact?”
“What contact details come back when a direct report is an org contact?”
Tell an agent
Get direct report {report} of {user} cast as an organizational contact.
Show {user}'s report {report} as an org contact record.
GET /users/{user-id}/directReports/{directoryObject-id}/microsoft.graph.user Get a direct report as a user · Get the item of type microsoft.graph.directoryObject as microsoft.graph.user #
Ask an LLM
“How do I fetch one direct report typed as a user account?”
“Is there a way to get a report's full user properties by ID?”
Tell an agent
Get direct report {report} of {user} as a user object.
Return {user}'s report {report} cast to a user account.
GET /users/{user-id}/directReports/$count Count a user's direct reports · Get the number of the resource #
Ask an LLM
“How many direct reports does a manager have?”
“Can I count someone's reports that match a filter?”
Tell an agent
Count the direct reports of {user}.
Give me the number of {user}'s direct reports matching {filter}.
GET /users/{user-id}/directReports/microsoft.graph.orgContact List a user's direct reports that are contacts · Get the items of type microsoft.graph.orgContact in the… #
Ask an LLM
“Which of a manager's direct reports are organizational contacts rather than users?”
“Can I search only the contact-type direct reports?”
Tell an agent
List org contacts reporting directly to {user}.
Search {user}'s contact direct reports for {term}.
GET /users/{user-id}/directReports/microsoft.graph.orgContact/$count Count direct reports that are org contacts · Get the number of the resource #
Ask an LLM
“How many organizational contacts report to a given manager?”
“Can I count contact reports that match a filter?”
Tell an agent
Count org contacts among {user}'s direct reports.
Count organizational contact reports of {user} matching {filter}.
GET /users/{user-id}/directReports/microsoft.graph.user List direct reports that are users · Get the items of type microsoft.graph.user in the… #
Ask an LLM
“Which user accounts report directly to someone, excluding contacts?”
“Can I filter a manager's user-type reports by a property?”
Tell an agent
List user accounts reporting directly to {user}.
Filter {user}'s user-type direct reports by {filter}.
GET /users/{user-id}/directReports/microsoft.graph.user/$count Count direct reports that are users · Get the number of the resource #
Ask an LLM
“How many user accounts report directly to a manager?”
“What's the number of user-type reports under someone matching a filter?”
Tell an agent
Count user accounts that report directly to {user}.
Count {user}'s user-type reports matching {filter}.
GET /users/{user-id}/manager Get a user's manager · List manager (for agentUser) #
Ask an LLM
“Who is a given user's or agent user's manager?”
“Can I see whether a manager is a user or an organizational contact?”
Tell an agent
Get the manager of {user}.
Show full details of who {user} reports to.
GET /users/{user-id}/manager/$ref Get a reference to a user's manager · List manager (for agentUser) #
Ask an LLM
“How do I get just the reference link to someone's manager instead of the full object?”
“Can I read the manager as an @odata.id reference?”
Tell an agent
Get the manager reference for {user}.
Return only the @odata.id link of {user}'s manager.
PUT /users/{user-id}/manager/$ref Assign a user's manager · Assign manager #
Ask an LLM
“How do I set who a user reports to?”
“Can I change a person's manager by pointing at another directory object?”
Tell an agent
Set {manager_ref} as the manager of {user}.
Make {user} report to the directory object {manager_ref}.
DELETE /users/{user-id}/manager/$ref Remove a user's manager · Remove manager (for agentUser) #
Ask an LLM
“How do I clear the manager assignment for a user or agent user?”
“Can I remove a manager only if the record's ETag still matches?”
Tell an agent destructive · confirm first
Remove the manager from {user}.
Unassign {user}'s manager if the ETag still matches {etag}.
GET /users/{user-id}/memberOf List a user's direct memberships · List agentUser direct memberships #
Ask an LLM
“Which groups, directory roles and administrative units is a user directly a member of?”
“Can I filter a person's direct memberships?”
Tell an agent
List direct memberships of {user}.
Show groups and roles {user} directly belongs to matching {filter}.
GET /users/{user-id}/memberOf/{directoryObject-id} Get one direct membership of a user · Get memberOf from users #
Ask an LLM
“How do I fetch a single group or role from a user's direct memberships?”
“Can I confirm a user is directly in a specific group by its ID?”
Tell an agent
Get membership {object} from {user}'s direct memberships.
Check whether {user} directly belongs to {object}.
GET /users/{user-id}/memberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a direct membership as an administrative unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I fetch one of a user's direct memberships cast as an administrative unit?”
“What administrative unit details come back for a membership ID?”
Tell an agent
Get {object} from {user}'s direct memberships as an administrative unit.
Show the administrative unit {object} that {user} is directly in.
GET /users/{user-id}/memberOf/{directoryObject-id}/microsoft.graph.directoryRole Get a direct membership as a directory role · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Is there a way to read one of a user's direct memberships typed as a directory role?”
“What role details come back for one of someone's role memberships?”
Tell an agent
Get {object} from {user}'s direct memberships as a directory role.
Show directory role {object} that {user} directly holds.
GET /users/{user-id}/memberOf/{directoryObject-id}/microsoft.graph.group Get a direct membership as a group · List a user's direct memberships #
Ask an LLM
“How do I get one of a user's direct memberships cast as a group?”
“Can I see group properties for a group a user belongs to directly?”
Tell an agent
Get {object} from {user}'s direct memberships as a group.
Show group {object} that {user} is a direct member of.
GET /users/{user-id}/memberOf/$count Count a user's direct memberships · Get the number of the resource #
Ask an LLM
“How many groups, roles and units is a user directly a member of?”
“Can I count direct memberships that match a filter?”
Tell an agent
Count the direct memberships of {user}.
Count {user}'s direct memberships matching {filter}.
GET /users/{user-id}/memberOf/microsoft.graph.administrativeUnit List administrative units a user is directly in · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units is a user a direct member of?”
“Can I search a person's direct administrative unit memberships?”
Tell an agent
List administrative units {user} is directly a member of.
Search {user}'s direct administrative units for {term}.
GET /users/{user-id}/memberOf/microsoft.graph.administrativeUnit/$count Count administrative units a user is directly in · Get the number of the resource #
Ask an LLM
“How many administrative units does a user directly belong to?”
“Can I count direct administrative unit memberships matching a filter?”
Tell an agent
Count administrative units {user} directly belongs to.
Count direct administrative units of {user} matching {filter}.
GET /users/{user-id}/memberOf/microsoft.graph.directoryRole List directory roles a user directly holds · Get the items of type microsoft.graph.directoryRole in the… #
Ask an LLM
“Which directory roles is a user directly a member of?”
“Can I filter a person's directly held directory roles?”
Tell an agent
List directory roles {user} is directly a member of.
Filter {user}'s direct directory roles by {filter}.
GET /users/{user-id}/memberOf/microsoft.graph.directoryRole/$count Count directory roles a user directly holds · Get the number of the resource #
Ask an LLM
“How many directory roles does a user directly hold?”
“Can I count someone's direct role memberships that match a filter?”
Tell an agent
Count directory roles {user} directly holds.
Count direct directory role memberships of {user} matching {filter}.
GET /users/{user-id}/memberOf/microsoft.graph.group List groups a user is directly in · List a user's direct memberships #
Ask an LLM
“Which groups is a user a direct member of, leaving out roles and units?”
“Can I search the groups someone directly belongs to by name?”
Tell an agent
List only the groups {user} is directly in.
Search groups {user} directly belongs to for {term}.
GET /users/{user-id}/memberOf/microsoft.graph.group/$count Count groups a user is directly in · Get the number of the resource #
Ask an LLM
“How many groups is a user directly a member of?”
“Can I count someone's direct group memberships matching a filter?”
Tell an agent
Count groups {user} is directly a member of.
Count direct group memberships of {user} matching {filter}.
GET /users/{user-id}/ownedDevices List devices a user owns · Get ownedDevices from users #
Ask an LLM
“Which devices does a user own?”
“Can I filter a person's owned devices?”
Tell an agent
List devices owned by {user}.
Show owned devices of {user} matching {filter}.
GET /users/{user-id}/ownedDevices/{directoryObject-id} Get one device a user owns · Get ownedDevices from users #
Ask an LLM
“How do I fetch a single device from a user's owned devices?”
“Can I look up one owned device by its object ID?”
Tell an agent
Get owned device {device} of {user}.
Look up device {device} among those {user} owns.
GET /users/{user-id}/ownedDevices/{directoryObject-id}/microsoft.graph.appRoleAssignment Get an owned-device entry as an app role assignment · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read an item under a user's owned devices cast as an app role assignment?”
“What app role assignment data comes back for an owned-device ID?”
Tell an agent
Get {object} from {user}'s owned devices as an app role assignment.
Cast owned-device entry {object} of {user} to an app role assignment.
GET /users/{user-id}/ownedDevices/{directoryObject-id}/microsoft.graph.device Get an owned device with full device properties · Get the item of type microsoft.graph.directoryObject as microsoft.graph.device #
Ask an LLM
“How do I get one of a user's owned devices with full device properties?”
“Can I cast an owned-device entry to a device object?”
Tell an agent
Get owned device {device} of {user} as a device object.
Return {user}'s owned item {device} typed as a device.
GET /users/{user-id}/ownedDevices/{directoryObject-id}/microsoft.graph.endpoint Get an owned device as an endpoint · Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint #
Ask an LLM
“Can I read one of a user's owned devices as an endpoint?”
“What endpoint details exist for an owned-device entry?”
Tell an agent
Get {object} from {user}'s owned devices as an endpoint.
Show owned endpoint {object} for {user}.
GET /users/{user-id}/ownedDevices/$count Count devices a user owns · Get the number of the resource #
Ask an LLM
“How many devices does a user own?”
“Can I count owned devices that match a filter?”
Tell an agent
Count devices owned by {user}.
Count {user}'s owned devices matching {filter}.
GET /users/{user-id}/ownedDevices/microsoft.graph.appRoleAssignment List app role assignments in a user's owned devices · Get the items of type microsoft.graph.appRoleAssignment in the… #
Ask an LLM
“Which app role assignments appear under a user's owned devices?”
“Can I search owned-device app role assignments?”
Tell an agent
List app role assignments among {user}'s owned devices.
Search owned-device app role assignments of {user} for {term}.
GET /users/{user-id}/ownedDevices/microsoft.graph.appRoleAssignment/$count Count app role assignments in owned devices · Get the number of the resource #
Ask an LLM
“How many app role assignments are listed under a user's owned devices?”
“Can I count owned-device app role assignments matching a filter?”
Tell an agent
Count app role assignments in {user}'s owned devices.
Count owned-device app role assignments of {user} matching {filter}.
GET /users/{user-id}/ownedDevices/microsoft.graph.device List device objects a user owns · Get the items of type microsoft.graph.device in the… #
Ask an LLM
“Which owned devices of a user are actual device objects?”
“Can I filter a user's owned devices by a device property?”
Tell an agent
List device objects owned by {user}.
Filter {user}'s owned device objects by {filter}.
GET /users/{user-id}/ownedDevices/microsoft.graph.device/$count Count device objects a user owns · Get the number of the resource #
Ask an LLM
“How many device objects does a user own?”
“Can I count owned device objects matching a filter?”
Tell an agent
Count device objects owned by {user}.
Count {user}'s owned device objects matching {filter}.
GET /users/{user-id}/ownedDevices/microsoft.graph.endpoint List endpoints a user owns · Get the items of type microsoft.graph.endpoint in the… #
Ask an LLM
“Which endpoints does a user own?”
“Can I search a user's owned endpoints?”
Tell an agent
List endpoints owned by {user}.
Search {user}'s owned endpoints for {term}.
GET /users/{user-id}/ownedDevices/microsoft.graph.endpoint/$count Count endpoints a user owns · Get the number of the resource #
Ask an LLM
“How many endpoints does a user own?”
“Can I count owned endpoints matching a filter?”
Tell an agent
Count endpoints owned by {user}.
Count owned endpoints of {user} matching {filter}.
GET /users/{user-id}/ownedObjects List directory objects a user owns · List ownedObjects (for agentUser) #
Ask an LLM
“Which directory objects does a user or agent user own?”
“Can I filter owned objects like apps and groups?”
Tell an agent
List directory objects owned by {user}.
Show objects {user} owns matching {filter}.
GET /users/{user-id}/ownedObjects/{directoryObject-id} Get one object a user owns · Get ownedObjects from users #
Ask an LLM
“How do I fetch one object from a user's owned objects?”
“Can I check if a user owns a specific directory object?”
Tell an agent
Get owned object {object} of {user}.
Look up {object} in what {user} owns.
GET /users/{user-id}/ownedObjects/{directoryObject-id}/microsoft.graph.application Get an owned object as an application · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I fetch an object a user owns as an application registration?”
“What app registration details come back for an owned object ID?”
Tell an agent
Get {object} owned by {user} as an application.
Show app registration {object} that {user} owns.
GET /users/{user-id}/ownedObjects/{directoryObject-id}/microsoft.graph.group Get an owned object as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“Can I read an object a user owns cast as a group?”
“What group properties come back for a group someone owns?”
Tell an agent
Get {object} owned by {user} as a group.
Show owned group {object} for {user}.
GET /users/{user-id}/ownedObjects/{directoryObject-id}/microsoft.graph.servicePrincipal Get an owned object as a service principal · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Is it possible to read an owned object of a user as a service principal?”
“What service principal details come back for one someone owns?”
Tell an agent
Get {object} owned by {user} as a service principal.
Show owned service principal {object} for {user}.
GET /users/{user-id}/ownedObjects/$count Count directory objects a user owns · Get the number of the resource #
Ask an LLM
“How many directory objects does a user own?”
“Is there a way to tally only the objects a user owns that fit a filter?”
Tell an agent
Count directory objects owned by {user}.
Count {user}'s owned objects matching {filter}.
GET /users/{user-id}/ownedObjects/microsoft.graph.application List applications a user owns · Get the items of type microsoft.graph.application in the… #
Ask an LLM
“Which application registrations does a user own?”
“Can I search the apps a person owns by name?”
Tell an agent
List applications owned by {user}.
Search {user}'s owned applications for {term}.
GET /users/{user-id}/ownedObjects/microsoft.graph.application/$count Count applications a user owns · Get the number of the resource #
Ask an LLM
“How many application registrations does a user own?”
“Can I count owned applications matching a filter?”
Tell an agent
Count applications owned by {user}.
Count owned applications of {user} matching {filter}.
GET /users/{user-id}/ownedObjects/microsoft.graph.group List groups a user owns · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which groups does a user own?”
“Can I search the groups a person owns by name?”
Tell an agent
List groups owned by {user}.
Search {user}'s owned groups for {term}.
GET /users/{user-id}/ownedObjects/microsoft.graph.group/$count Count groups a user owns · Get the number of the resource #
Ask an LLM
“How many groups does a user own?”
“Can I count owned groups matching a filter?”
Tell an agent
Count groups owned by {user}.
Count owned groups of {user} matching {filter}.
GET /users/{user-id}/ownedObjects/microsoft.graph.servicePrincipal List service principals a user owns · Get the items of type microsoft.graph.servicePrincipal in the… #
Ask an LLM
“Which service principals does a user own?”
“Can I search the service principals a person owns?”
Tell an agent
List service principals owned by {user}.
Search {user}'s owned service principals for {term}.
GET /users/{user-id}/ownedObjects/microsoft.graph.servicePrincipal/$count Count service principals a user owns · Get the number of the resource #
Ask an LLM
“How many service principals does a user own?”
“Can I count owned service principals matching a filter?”
Tell an agent
Count service principals owned by {user}.
Count owned service principals of {user} matching {filter}.
GET /users/{user-id}/registeredDevices List devices registered for a user · Get registeredDevices from users #
Ask an LLM
“Which devices are registered for a user?”
“Can I filter the devices registered to someone?”
Tell an agent
List devices registered for {user}.
Show registered devices of {user} matching {filter}.
GET /users/{user-id}/registeredDevices/{directoryObject-id} Get one device registered for a user · Get registeredDevices from users #
Ask an LLM
“How do I fetch one device from a user's registered devices?”
“Can I look up a single registered device by ID?”
Tell an agent
Get registered device {device} of {user}.
Look up device {device} among those registered for {user}.
GET /users/{user-id}/registeredDevices/{directoryObject-id}/microsoft.graph.appRoleAssignment Get a registered-device entry as an app role assignment · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a registered-device entry of a user cast as an app role assignment?”
“Which app role assignment fields are returned for a registered-device ID?”
Tell an agent
Get {object} from {user}'s registered devices as an app role assignment.
Cast registered-device entry {object} of {user} to an app role assignment.
GET /users/{user-id}/registeredDevices/{directoryObject-id}/microsoft.graph.device Get a registered device with full device properties · Get the item of type microsoft.graph.directoryObject as microsoft.graph.device #
Ask an LLM
“What full device properties can I read for a single device registered to a user?”
“Can I cast a registered-device entry to a device object?”
Tell an agent
Get registered device {device} of {user} as a device object.
Return {user}'s registered item {device} typed as a device.
GET /users/{user-id}/registeredDevices/{directoryObject-id}/microsoft.graph.endpoint Get a registered device as an endpoint · Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint #
Ask an LLM
“Can I read one registered device of a user as an endpoint?”
“Which endpoint properties exist for a device registered to someone?”
Tell an agent
Get {object} from {user}'s registered devices as an endpoint.
Show registered endpoint {object} for {user}.
GET /users/{user-id}/registeredDevices/$count Count devices registered for a user · Get the number of the resource #
Ask an LLM
“How many devices are registered for a user?”
“Can I count registered devices matching a filter?”
Tell an agent
Count devices registered for {user}.
Count {user}'s registered devices matching {filter}.
GET /users/{user-id}/registeredDevices/microsoft.graph.appRoleAssignment List app role assignments in registered devices · Get the items of type microsoft.graph.appRoleAssignment in the… #
Ask an LLM
“Are there app role assignments listed among the devices registered to a user?”
“Can I search registered-device app role assignments?”
Tell an agent
List app role assignments among {user}'s registered devices.
Search registered-device app role assignments of {user} for {term}.
GET /users/{user-id}/registeredDevices/microsoft.graph.appRoleAssignment/$count Count app role assignments in registered devices · Get the number of the resource #
Ask an LLM
“How many app role assignments are in a user's registered devices list?”
“Can I count registered-device app role assignments matching a filter?”
Tell an agent
Count app role assignments in {user}'s registered devices.
Count registered-device app role assignments of {user} matching {filter}.
GET /users/{user-id}/registeredDevices/microsoft.graph.device List device objects registered for a user · Get the items of type microsoft.graph.device in the… #
Ask an LLM
“Which registered entries for a user are actual device objects?”
“Can I filter a user's registered device objects by a property?”
Tell an agent
List device objects registered for {user}.
Filter {user}'s registered device objects by {filter}.
GET /users/{user-id}/registeredDevices/microsoft.graph.device/$count Count device objects registered for a user · Get the number of the resource #
Ask an LLM
“How many device objects are registered for a user?”
“Can I count registered device objects matching a filter?”
Tell an agent
Count device objects registered for {user}.
Count {user}'s registered device objects matching {filter}.
GET /users/{user-id}/registeredDevices/microsoft.graph.endpoint List endpoints registered for a user · Get the items of type microsoft.graph.endpoint in the… #
Ask an LLM
“Which endpoints are registered for a user?”
“Can I search a user's registered endpoints?”
Tell an agent
List endpoints registered for {user}.
Search {user}'s registered endpoints for {term}.
GET /users/{user-id}/registeredDevices/microsoft.graph.endpoint/$count Count endpoints registered for a user · Get the number of the resource #
Ask an LLM
“How many endpoints are registered for a user?”
“Can I count registered endpoints matching a filter?”
Tell an agent
Count endpoints registered for {user}.
Count registered endpoints of {user} matching {filter}.
GET /users/{user-id}/sponsorOf List objects a user sponsors · List sponsorOf #
Ask an LLM
“Which guest users, agent users or groups does a person sponsor?”
“Can I filter the objects a user sponsors?”
Tell an agent
List everything {user} sponsors.
Show objects sponsored by {user} matching {filter}.
GET /users/{user-id}/sponsorOf/{directoryObject-id} Get one object a user sponsors · Get sponsorOf from users #
Ask an LLM
“How do I fetch one object a user sponsors?”
“Can I confirm a user sponsors a specific guest or agent?”
Tell an agent
Get sponsored object {object} of {user}.
Look up {object} among what {user} sponsors.
GET /users/{user-id}/sponsorOf/$count Count objects a user sponsors · Get the number of the resource #
Ask an LLM
“How many objects does a user sponsor?”
“Can I count sponsored objects matching a filter?”
Tell an agent
Count the objects {user} sponsors.
Count objects sponsored by {user} matching {filter}.
GET /users/{user-id}/sponsors List an agent user's sponsors · List sponsors (for agentUser) #
Ask an LLM
“Who are the sponsors responsible for an agent user?”
“Can I filter an agent user's sponsors?”
Tell an agent
List the sponsors of {user}.
Show sponsors of agent user {user} matching {filter}.
DELETE /users/{user-id}/sponsors/{directoryObject-id}/$ref Remove a specific sponsor from an agent user · Remove sponsor (for agentUser) #
Ask an LLM
“How do I remove one sponsor from an agent user when I know the sponsor's ID?”
“Can I unassign a sponsor only when the ETag matches?”
Tell an agent destructive · confirm first
Remove sponsor {sponsor} from agent user {user}.
Unassign sponsor {sponsor} from {user} if the ETag is {etag}.
GET /users/{user-id}/sponsors/$count Count an agent user's sponsors · Get the number of the resource #
Ask an LLM
“How many sponsors does an agent user have?”
“Can I count an agent user's sponsors matching a filter?”
Tell an agent
Count the sponsors of {user}.
Count sponsors of agent user {user} matching {filter}.
GET /users/{user-id}/sponsors/$ref List sponsor references of an agent user · List sponsors (for agentUser) #
Ask an LLM
“Can I get just the reference links to an agent user's sponsors?”
“How do I list sponsor IDs as @odata.id references?”
Tell an agent
List sponsor references for {user}.
Return @odata.id links of sponsors of {user} matching {filter}.
POST /users/{user-id}/sponsors/$ref Add a sponsor to an agent user · Add sponsors (for agentUser) #
Ask an LLM
“How do I assign a sponsor to an agent user?”
“Can a group be made responsible as an agent user's sponsor?”
Tell an agent
Add {sponsor_ref} as a sponsor of {user}.
Assign the user or group {sponsor_ref} to sponsor agent user {user}.
DELETE /users/{user-id}/sponsors/$ref Remove a sponsor by reference from an agent user · Remove sponsor (for agentUser) #
Ask an LLM
“Can I remove an agent user's sponsor by passing its reference as a query parameter?”
“What's the way to drop a sponsor using the @id reference rather than a path ID?”
Tell an agent destructive · confirm first
Remove the sponsor referenced by {sponsor_query} from {user}.
Delete sponsor reference {sponsor_query} on agent user {user} if the ETag matches {etag}.
GET /users/{user-id}/transitiveMemberOf List all of a user's memberships including nested · List transitiveMemberOf #
Ask an LLM
“Which groups, roles and units is a user a member of, including through nested groups?”
“Can I filter a person's transitive memberships?”
Tell an agent
List all memberships of {user} including nested groups.
Show transitive memberships of {user} matching {filter}.
GET /users/{user-id}/transitiveMemberOf/{directoryObject-id} Get one transitive membership of a user · Get transitiveMemberOf from users #
Ask an LLM
“How do I check whether a user belongs to a group directly or through nesting?”
“Can I fetch one transitive membership by ID?”
Tell an agent
Get transitive membership {object} of {user}.
Check if {user} is in {object} directly or via nested groups.
GET /users/{user-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.administrativeUnit Get a transitive membership as an administrative unit · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I fetch a user's transitive membership cast as an administrative unit?”
“What unit details come back for an inherited administrative unit membership?”
Tell an agent
Get {object} from {user}'s transitive memberships as an administrative unit.
Show inherited administrative unit {object} of {user}.
GET /users/{user-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.directoryRole Get a transitive membership as a directory role · Get the item of type microsoft.graph.directoryObject as… #
Ask an LLM
“Can I read a user's transitive membership typed as a directory role?”
“What role details come back for a role a user holds directly or indirectly?”
Tell an agent
Get {object} from {user}'s transitive memberships as a directory role.
Show directory role {object} held by {user} through any membership path.
GET /users/{user-id}/transitiveMemberOf/{directoryObject-id}/microsoft.graph.group Get a transitive membership as a group · Get the item of type microsoft.graph.directoryObject as microsoft.graph.group #
Ask an LLM
“How do I get a group from a user's transitive memberships?”
“Can I see group properties for a nested group a user inherits?”
Tell an agent
Get {object} from {user}'s transitive memberships as a group.
Show nested or direct group {object} for {user}.
GET /users/{user-id}/transitiveMemberOf/$count Count all of a user's memberships including nested · Get the number of the resource #
Ask an LLM
“How many groups, roles and units does a user belong to, counting nested ones?”
“Can I count transitive memberships matching a filter?”
Tell an agent
Count all memberships of {user} including nested.
Count transitive memberships of {user} matching {filter}.
GET /users/{user-id}/transitiveMemberOf/microsoft.graph.administrativeUnit List administrative units a user is in transitively · Get the items of type microsoft.graph.administrativeUnit in the… #
Ask an LLM
“Which administrative units is a user in, directly or through nesting?”
“Can I search a user's transitive administrative units?”
Tell an agent
List administrative units {user} belongs to transitively.
Search transitive administrative units of {user} for {term}.
GET /users/{user-id}/transitiveMemberOf/microsoft.graph.administrativeUnit/$count Count administrative units a user is in transitively · Get the number of the resource #
Ask an LLM
“How many administrative units does a user belong to including nested membership?”
“Can I count a person's transitive administrative units matching a filter?”
Tell an agent
Count transitive administrative units of {user}.
Count administrative units {user} reaches through nesting matching {filter}.
GET /users/{user-id}/transitiveMemberOf/microsoft.graph.directoryRole List directory roles a user holds transitively · Get the items of type microsoft.graph.directoryRole in the… #
Ask an LLM
“Which directory roles does a user hold, including via group membership?”
“Can I filter a user's transitive directory roles?”
Tell an agent
List directory roles {user} holds transitively.
Filter transitive directory roles of {user} by {filter}.
GET /users/{user-id}/transitiveMemberOf/microsoft.graph.directoryRole/$count Count directory roles a user holds transitively · Get the number of the resource #
Ask an LLM
“How many directory roles does a user have counting inherited ones?”
“Can I count transitive directory roles matching a filter?”
Tell an agent
Count transitive directory roles of {user}.
Count directory roles {user} inherits or holds matching {filter}.
GET /users/{user-id}/transitiveMemberOf/microsoft.graph.group List all groups a user is in including nested · Get the items of type microsoft.graph.group in the… #
Ask an LLM
“Which groups is a user in when nested groups are included?”
“Can I search all of a user's groups, direct and nested, by name?”
Tell an agent
List every group {user} belongs to including nested.
Search transitive groups of {user} for {term}.
GET /users/{user-id}/transitiveMemberOf/microsoft.graph.group/$count Count all groups a user is in including nested · Get the number of the resource #
Ask an LLM
“How many groups does a user belong to counting nested memberships?”
“Can I tally only the nested and direct groups of a user that fit a filter?”
Tell an agent
Count all groups {user} is in including nested.
Count transitive groups of {user} matching {filter}.

Documentation

📖
Documentation
https://learn.microsoft.com/en-us/graph/api/overview
📖
Authentication
https://learn.microsoft.com/en-us/graph/auth/
📖
Documentation
https://learn.microsoft.com/en-us/graph/change-notifications-overview

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-users-directoryobject-api-openapi.yml

Other Resources

🔗
SDKs
https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
🔗
ChangeLog
https://developer.microsoft.com/en-us/graph/changelog
🔗
Webhooks
https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/asyncapi/azure-ad-change-notifications-webhooks.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/azure-ad:azure-ad-users-directoryobject-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

azure-ad-users-directoryobject-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Users.directory Object API
  version: v1.0
servers:
- url: https://graph.microsoft.com/v1.0/
  description: Core
security:
- azureaadv2: []
tags:


# --- truncated at 32 KB (1002 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/azure-ad/refs/heads/main/openapi/azure-ad-users-directoryobject-api-openapi.yml