Azure Active Directory · Capability

Azure AD Identity and Access Management

Unified identity and access management workflow combining user lifecycle, group management, application registration, and service principal operations. Used by IT administrators and identity engineers to manage enterprise identity infrastructure.

Run with Naftiko Microsoft EntraIdentityAccess ManagementAzure Active Directory

What You Can Do

GET
List users — List directory users.
/v1/users
POST
Create user — Create a new user.
/v1/users
GET
Get user — Get user details.
/v1/users/{userId}
PATCH
Update user — Update user properties.
/v1/users/{userId}
DELETE
Delete user — Delete a user.
/v1/users/{userId}
GET
List groups — List groups.
/v1/groups
POST
Create group — Create a group.
/v1/groups
GET
Get group — Get group details.
/v1/groups/{groupId}
GET
List group members — List group members.
/v1/groups/{groupId}/members
POST
Add group member — Add a group member.
/v1/groups/{groupId}/members
GET
List applications — List app registrations.
/v1/applications
GET
List service principals — List service principals.
/v1/service-principals

MCP Tools

list-users

List Azure AD users with optional filtering.

read-only idempotent
create-user

Create a new Azure AD user account.

get-user

Get Azure AD user details by ID or UPN.

read-only idempotent
update-user

Update Azure AD user properties.

idempotent
delete-user

Delete an Azure AD user account.

idempotent
list-user-memberships

List groups and roles a user belongs to.

read-only idempotent
list-groups

List Azure AD groups with optional filtering.

read-only idempotent
create-group

Create a new Azure AD group.

get-group

Get Azure AD group details.

read-only idempotent
delete-group

Delete an Azure AD group.

idempotent
list-group-members

List members of an Azure AD group.

read-only idempotent
add-group-member

Add a member to an Azure AD group.

list-applications

List Azure AD application registrations.

read-only idempotent
create-application

Register a new application in Azure AD.

get-application

Get an application registration by ID.

read-only idempotent
list-service-principals

List Azure AD service principals.

read-only idempotent
get-service-principal

Get a service principal by ID.

read-only idempotent

APIs Used

graph-identity