Microsoft Active Directory · Capability

Microsoft Active Directory Identity Management Operations

Unified workflow for managing Microsoft Entra ID (Active Directory) identity and access operations including user lifecycle management, group management, and application registration. Used by IT administrators, identity engineers, and security teams to automate identity governance and access management.

Run with Naftiko Active DirectoryIdentity ManagementMicrosoft EntraUser ManagementZero Trust

What You Can Do

GET
List users — List users
/v1/users
POST
Create user — Create user
/v1/users
GET
Get user — Get user by ID or UPN
/v1/users/{userId}
GET
Get me — Get signed-in user profile
/v1/me
GET
List groups — List groups
/v1/groups
POST
Create group — Create group
/v1/groups
GET
Get group — Get group
/v1/groups/{groupId}
GET
List group members — List group members
/v1/groups/{groupId}/members
GET
List applications — List applications
/v1/applications
GET
List service principals — List service principals
/v1/servicePrincipals

MCP Tools

list-users

List Microsoft Entra ID users with optional filtering by department, job title, or other attributes

read-only
get-user

Get details about a specific Microsoft Entra user by object ID or userPrincipalName

read-only idempotent
create-user

Create a new user account in Microsoft Entra ID with required profile and password settings

get-me

Get the signed-in user's Microsoft Entra profile

read-only idempotent
list-groups

List Microsoft Entra ID groups — security groups and Microsoft 365 groups

read-only
get-group

Get details about a specific Microsoft Entra group including type and membership settings

read-only idempotent
list-group-members

List direct members of a Microsoft Entra group

read-only
list-applications

List application registrations in the Microsoft Entra tenant

read-only
get-application

Get details about a specific Microsoft Entra application registration

read-only idempotent
list-service-principals

List service principals in the Microsoft Entra tenant

read-only

APIs Used

active-directory-users active-directory-groups active-directory-applications