Microsoft Active Directory and Microsoft Entra ID provide identity and access management for organizations of all sizes. Microsoft Graph API is the unified REST API gateway for accessing and managing Microsoft Entra ID (formerly Azure Active Directory), including users, groups, applications, devices, conditional access policies, identity governance, and directory administration. Legacy on-premises Active Directory is managed through LDAP, Kerberos, and PowerShell protocols; cloud identity is managed through Microsoft Graph.
Microsoft Active Directory publishes 25 API contracts indexed on the APIs.io network, including App Role Assignments API, Applications API, Groups API, and 22 more. Tagged areas include Active Directory, Authentication, Authorization, Directory Services, and Identity and Access Management.
The Microsoft Active Directory catalog on APIs.io includes 1 JSON-LD context and 3 Spectral governance rulesets.
Microsoft Active Directory’s developer surface includes changelog, authentication, developer portal, getting-started guide, documentation, API reference, CLI, and 64 more developer resources.
Regulatory Posture applies to this provider. Its tags matched the
Horizontal (data, software, accessibility, platform) regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it
carries 10 points of the composite. It is scored from the published contracts
themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already
holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in
front of it, and the first time that check is skipped a duplicate record is created.
Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet,
not penalised by it.
The six quality facets above are damped to 75 points between them,
because the conditional facet above carries the other
25. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 75% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/active-directory/"><img src="https://apis.io/badge/active-directory/card.svg" alt="Microsoft Active Directory on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented)
A2A Agent Card+8 pts — a2a/-a2a.yml manifest, graded on conformance.grade against A2A 1.0.0
Typed Event Surface+6 pts — AsyncAPI document, OR webhooks/callbacks objects in the as-published OpenAPI, OR common[].type includes Webhooks
Documented Reversibility+6 pts — a reversal operation in the contract, graded up when a window is documented too
Protected Resource Metadata+5 pts — a served /.well-known/oauth-protected-resource carrying `resource` (documented), and naming its authorization_servers (verified)
4 more unmet checks in the Agent Readiness table above.
Kin Score — facets with the most composite points still available (weight × headroom):
The Kin Score Market layer reads a provider inside its market:
its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted:
not part of the Kin Score or agent readiness.
Registered MCP server and declares compatibility are report only — not weighted.
Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
Manage devices registered or joined to Microsoft Entra ID, including Entra joined, Entra registered, and hybrid Azure AD joined devices. Retrieve BitLocker recovery keys and Loc...
Manage Microsoft Entra built-in and custom directory roles, role assignments, and role-scoped administrative units. Assign administrator roles to users, groups, or service princ...
Create and manage Microsoft Entra Conditional Access policies that enforce access controls based on user, location, device, and risk signals. Configure named locations, authenti...
Manage Microsoft Entra ID Governance features including access reviews, entitlement management (access packages, catalogs, and policies), Privileged Identity Management (PIM) fo...
Detect, investigate, and remediate identity-based risks using Microsoft Entra ID Protection. Access risk detections, risky users, risky service principals, and risk events, and ...
Manage authentication methods registered for users in Microsoft Entra ID, including FIDO2 security keys, Microsoft Authenticator, phone (SMS/voice call), email OTP, Windows Hell...
Access audit logs, sign-in logs, provisioning logs, and identity-related reports for monitoring, compliance, and troubleshooting. Stream logs to Azure Monitor and Log Analytics ...
The Microsoft identity platform provides authentication and authorization services using standards-compliant implementations of OAuth 2.0 and OpenID Connect, enabling developers...
Microsoft Entra Verified ID is a managed verifiable credentials service that enables organizations to issue, manage, and verify decentralized identity credentials based on W3C s...
Microsoft Entra ID Governance APIs in Microsoft Graph enable automated access reviews, entitlement management, lifecycle workflows, and privileged identity management for identi...
Microsoft Entra ID supports SCIM 2.0 protocol for automatic user and group provisioning to cloud applications, enabling automated identity lifecycle management through standardi...
The Microsoft Entra PowerShell module provides cmdlets for managing Microsoft Entra resources programmatically, built on the Microsoft Graph PowerShell SDK.
name: Microsoft Active Directory
url: https://developer.microsoft.com/en-us/graph
x-parent: microsoft-entra
description: Microsoft Active Directory and Microsoft Entra ID provide identity and access management for organizations of
all sizes. Microsoft Graph API is the unified REST API gateway for accessing and managing Microsoft Entra ID (formerly Azure
Active Directory), including users, groups, applications, devices, conditional access policies, identity governance, and
directory administration. Legacy on-premises Active Directory is managed through LDAP, Kerberos, and PowerShell protocols;
cloud identity is managed through Microsoft Graph.
deliveryModel:
model: saas
license_evidence:
not_product:
- azure-ad-b2c/rest-api
- azuread/azure-activedirectory-library-for-dotnet
- azuread/microsoft-authentication-library-for-dotnet
- azuread/microsoft-authentication-library-for-java
- azuread/microsoft-authentication-library-for-js
open_source: unknown
commercial: true
callable_host: true
label: Hosted service · you call their endpoint
confidence: low
source:
- openapi
- pricing
- repository-not-product
generated: '2026-09-25'
method: derived
accessModel:
pricing: freemium
onboarding: self-serve
trial: false
try_now: true
public: false
gated: none
gated_source:
- onboarding
label: Freemium · Self-serve signup
confidence: high
source:
- plans
- authentication
- rate-limits
- security
generated: '2026-11-06'
method: derived
image: https://learn.microsoft.com/en-us/entra/media/index/active-directory.svg
created: '2024-01-01'
modified: '2026-09-16'
specificationVersion: '0.23'
tags:
- Active Directory
- Authentication
- Authorization
- Directory Services
- Identity and Access Management
- Microsoft Entra
- Zero Trust
tags_raw:
- Active Directory
- Authentication
- Authorization
- Directory Services
- Identity Management
- Microsoft Entra
- Zero Trust
maintainers:
- name: Kin Lane
email: kin@apievangelist.com
common:
- type: AgentSkill
url: skills/_index.yml
- type: SecurityTxt
url: well-known/active-directory-security.txt
- type: WellKnown
url: well-known/active-directory-well-known.yml
- type: Spectral
url: rules/active-directory-spectral-rules.yml
- type: Spectral
url: rules/active-directory-rules.yml
- type: Spectral
url: rules/active-directory-jsonschema-spectral-rules.yml
- type: Vocabulary
url: vocabulary/active-directory-vocabulary.yml
- type: DataModel
url: data-model/active-directory-data-model.yml
- type: ChangeLog
url: changelog/active-directory-changelog.yml
- type: Conventions
url: conventions/active-directory-conventions.yml
- type: Compliance
url: https://www.microsoft.com/en-us/trust-center
- type: Deprecation
url: https://learn.microsoft.com/en-us/graph/versioning-and-support
- type: Lifecycle
url: lifecycle/active-directory-lifecycle.yml
- type: ErrorCatalog
url: errors/active-directory-problem-types.yml
- type: Conformance
url: conformance/active-directory-conformance.yml
- type: LLMsTxt
url: llms/active-directory-llms.txt
- type: ToolCrosswalk
url: mcp/active-directory-tool-crosswalk.yml
- type: MCPServer
url: mcp/active-directory-mcp.yml
- type: Hosts
url: hosts/active-directory-hosts.yml
- type: IntegrationEdges
url: integrations/active-directory-integration-edges.yml
- type: Vendors
url: vendors/active-directory-vendors.yml
- type: Packages
url: packages/active-directory-packages.yml
- type: Security
url: https://www.microsoft.com/security
- type: Leadership
url: https://news.microsoft.com/leadership
- type: TrustCenter
url: security/active-directory-trust-center.yml
- type: FinOps
url: finops/active-directory-finops.yml
- type: RateLimits
url: rate-limits/active-directory-rate-limits.yml
- type: Plans
url: plans/active-directory-plans-pricing.yml
- type: Service Status
url: https://status.azure.com/
- type: Website
url: https://www.microsoft.com/
- type: CapabilityMap
url: capabilities/active-directory-capability-edges.yml
name: Microsoft Active Directory Business Capability Map
- type: AgenticAccess
url: agentic-access/active-directory-agentic-access.yml
- type: VulnerabilityDisclosure
url: security/active-directory-vulnerability-disclosure.yml
- type: DomainSecurity
url: security/active-directory-domain-security.yml
- type: Authentication
url: authentication/active-directory-authentication.yml
- type: OAuthScopes
url: scopes/active-directory-scopes.yml
- type: PostmanWorkspace
url: https://www.postman.com/kinlaneapi/microsoft-active-directory/overview
- type: Arazzo
url: arazzo/active-directory-audit-user-group-memberships-workflow.yml
name: Active Directory Audit User Group Memberships
- type: Arazzo
url: arazzo/active-directory-create-group-and-add-members-workflow.yml
name: Active Directory Create Group And Add Two Members
- type: Arazzo
url: arazzo/active-directory-create-m365-group-with-owner-workflow.yml
name: Active Directory Create Microsoft 365 Group With Owner
- type: Arazzo
url: arazzo/active-directory-decommission-application-workflow.yml
name: Active Directory Decommission Application
- type: Arazzo
url: arazzo/active-directory-find-user-and-update-profile-workflow.yml
name: Active Directory Find User And Update Profile
- type: Arazzo
url: arazzo/active-directory-offboard-user-from-group-workflow.yml
name: Active Directory Offboard User From Group
- type: Arazzo
url: arazzo/active-directory-onboard-user-to-existing-group-workflow.yml
name: Active Directory Onboard User To Existing Group
- type: Arazzo
url: arazzo/active-directory-provision-application-with-membership-workflow.yml
name: Active Directory Provision Application With Service Principal
- type: Arazzo
url: arazzo/active-directory-provision-user-into-new-group-workflow.yml
name: Active Directory Provision User Into New Group
- type: Arazzo
url: arazzo/active-directory-rename-group-and-list-members-workflow.yml
name: Active Directory Rename Group And List Members
- type: Arazzo
url: arazzo/active-directory-self-service-profile-review-workflow.yml
name: Active Directory Self-Service Profile Review
- type: Arazzo
url: arazzo/active-directory-transfer-user-between-groups-workflow.yml
name: Active Directory Transfer User Between Groups
- type: Arazzo
url: arazzo/active-directory-update-application-redirect-uris-workflow.yml
name: Active Directory Update Application Redirect URIs
- type: Portal
url: https://developer.microsoft.com/en-us/graph
- type: GettingStarted
url: https://learn.microsoft.com/en-us/graph/use-the-api
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/overview
- type: Authentication
url: https://learn.microsoft.com/en-us/graph/auth/auth-concepts
- type: APIReference
url: https://learn.microsoft.com/en-us/graph/api/overview
- type: RateLimits
url: https://learn.microsoft.com/en-us/graph/throttling
- type: SDKs
url: https://learn.microsoft.com/en-us/graph/sdks/sdks-overview
- type: CLI
url: https://learn.microsoft.com/en-us/cli/azure/ad
- type: Blog
url: https://devblogs.microsoft.com/microsoft365dev/
- type: StatusPage
url: https://azure.status.microsoft.com/
- type: Support
url: https://developer.microsoft.com/en-us/graph/support
- type: TermsOfService
url: https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use
- type: PrivacyPolicy
url: https://privacy.microsoft.com/privacystatement
- type: Pricing
url: https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing
- type: ChangeLog
url: https://developer.microsoft.com/en-us/graph/changelog
- type: GitHubOrganization
url: https://github.com/microsoftgraph
- type: StackOverflow
url: https://stackoverflow.com/questions/tagged/microsoft-graph
- type: Training
url: https://learn.microsoft.com/en-us/training/paths/m365-msgraph-associate/
- type: SpectralRules
url: rules/active-directory-spectral-rules.yml
- type: Vocabulary
url: vocabulary/active-directory-vocabulary.yaml
- type: JSONLD
url: json-ld/active-directory-context.jsonld
- type: Features
data:
- name: Unified Identity API
description: Single REST endpoint (graph.microsoft.com) for all Microsoft Entra identity and directory operations.
- name: User Lifecycle Management
description: Full CRUD operations for user accounts including bulk operations, license assignment, and guest management.
- name: Group Management
description: Create and manage security groups, Microsoft 365 groups, and dynamic membership groups.
- name: Application Registration
description: Programmatic app registration, permission configuration, and service principal management.
- name: Conditional Access Automation
description: Create, update, and evaluate Conditional Access policies via API for Zero Trust enforcement.
- name: Privileged Identity Management
description: Just-in-time role activation, time-bound access, and PIM policy management via API.
- name: Identity Protection
description: Access risk signals, risky users, and risk detections for automated threat response.
- name: Authentication Method Management
description: Manage MFA and passwordless authentication methods registered for users.
- name: Audit and Sign-in Logs
description: Programmatic access to audit logs, sign-in logs, and provisioning logs for SIEM integration.
- name: Identity Governance
description: Access reviews, entitlement management, and lifecycle workflows for automated IAM.
- type: UseCases
data:
- name: User Provisioning Automation
description: Automate user account creation, attribute updates, and deprovisioning for HR-driven identity lifecycle.
- name: Zero Trust Policy Enforcement
description: Programmatically deploy and manage Conditional Access policies across the organization.
- name: SIEM Integration
description: Stream audit logs and sign-in events to security information and event management systems.
- name: Application Access Management
description: Automate app registration, permission grants, and app role assignments for developer self-service.
- name: Identity Risk Remediation
description: Detect and respond to risky sign-ins and compromised accounts via Identity Protection APIs.
- name: Compliance Reporting
description: Generate access reviews, entitlement reports, and audit logs for regulatory compliance.
- name: Privileged Access Governance
description: Enforce just-in-time privileged access and audit role assignments via PIM APIs.
- type: Integrations
data:
- name: Azure Active Directory
description: Microsoft Entra ID (formerly Azure AD) is the cloud identity backbone accessed via Microsoft Graph.
- name: Microsoft 365
description: Microsoft Graph provides unified access to Microsoft 365 user data alongside identity operations.
- name: Azure Monitor
description: Stream Microsoft Entra sign-in and audit logs to Azure Monitor Log Analytics for analysis.
- name: Microsoft Sentinel
description: Feed identity risk signals and audit logs into Microsoft Sentinel SIEM for threat hunting.
- name: Intune
description: Microsoft Graph Intune APIs integrate device management with identity policies.
- name: SCIM Providers
description: Automate user provisioning to SaaS applications using Microsoft Entra SCIM provisioning.
- name: SAML and OIDC Applications
description: Register and manage federated applications using SAML 2.0 and OpenID Connect via Microsoft Graph.
apis:
- name: Microsoft Graph Devices API
description: Manage devices registered or joined to Microsoft Entra ID, including Entra joined, Entra registered, and hybrid
Azure AD joined devices. Retrieve BitLocker recovery keys and Local Admin Password Solution (LAPS) credentials for managed
devices.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/device
baseURL: https://graph.microsoft.com/v1.0
tags:
- Devices
- Endpoint Management
- Identity and Access Management
tags_raw:
- Devices
- Endpoint Management
- Identity Management
properties:
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/device
aid: active-directory:microsoft-graph-devices-api
- name: Microsoft Graph Directory Roles and Administrative Units API
description: Manage Microsoft Entra built-in and custom directory roles, role assignments, and role-scoped administrative
units. Assign administrator roles to users, groups, or service principals, and create scoped role assignments via administrative
units.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/directoryrole
baseURL: https://graph.microsoft.com/v1.0
tags:
- Authorization
- Directory Services
- Role Management
properties:
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/directoryrole
aid: active-directory:microsoft-graph-directory-roles-and-administrative-units-api
- name: Microsoft Graph Conditional Access API
description: Create and manage Microsoft Entra Conditional Access policies that enforce access controls based on user, location,
device, and risk signals. Configure named locations, authentication context class references, and evaluate policy impact
using what-if analysis.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesspolicy
baseURL: https://graph.microsoft.com/v1.0
tags:
- Authorization
- Conditional Access
- Security
- Zero Trust
properties:
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/conditionalaccesspolicy
aid: active-directory:microsoft-graph-conditional-access-api
- name: Microsoft Graph Identity Governance API
description: Manage Microsoft Entra ID Governance features including access reviews, entitlement management (access packages,
catalogs, and policies), Privileged Identity Management (PIM) for just-in-time role activation, and lifecycle workflows
for joiner/mover/leaver employee identity lifecycle automation.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview
baseURL: https://graph.microsoft.com/v1.0
tags:
- Governance
- Identity and Access Management
- Lifecycle Management
- Privileged Identity Management
tags_raw:
- Governance
- Identity Management
- Lifecycle Management
- Privileged Identity Management
properties:
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/identitygovernance-overview
aid: active-directory:microsoft-graph-identity-governance-api
- name: Microsoft Graph Identity Protection API
description: Detect, investigate, and remediate identity-based risks using Microsoft Entra ID Protection. Access risk detections,
risky users, risky service principals, and risk events, and feed data into SIEM tools for security correlation and incident
response.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/identityprotection-overview
baseURL: https://graph.microsoft.com/v1.0
tags:
- Identity Protection
- Risk Management
- Security
properties:
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/identityprotection-overview
aid: active-directory:microsoft-graph-identity-protection-api
- name: Microsoft Graph Authentication Methods API
description: Manage authentication methods registered for users in Microsoft Entra ID, including FIDO2 security keys, Microsoft
Authenticator, phone (SMS/voice call), email OTP, Windows Hello for Business, and temporary access passes. Configure authentication
method policies and authentication strength requirements.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview
baseURL: https://graph.microsoft.com/v1.0
tags:
- Authentication
- MFA
- Passwordless
- Security
properties:
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/authenticationmethods-overview
aid: active-directory:microsoft-graph-authentication-methods-api
- name: Microsoft Graph Identity and Access Reports API
description: Access audit logs, sign-in logs, provisioning logs, and identity-related reports for monitoring, compliance,
and troubleshooting. Stream logs to Azure Monitor and Log Analytics or to third-party SIEM tools for security operations.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/report-identity-access
baseURL: https://graph.microsoft.com/v1.0
tags:
- Audit Logs
- Compliance
- Monitoring
- Reports
properties:
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/report-identity-access
aid: active-directory:microsoft-graph-identity-and-access-reports-api
- aid: active-directory:active-directory-app-role-assignments-api
name: Microsoft Active Directory App Role Assignments API
description: The App Role Assignments API from Microsoft Active Directory — 1 operation(s) for app role assignments.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/users
baseURL: https://graph.microsoft.com/v1.0
tags:
- App Role Assignments
properties:
- type: OpenAPI
url: openapi/active-directory-app-role-assignments-api-openapi.yml
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/users
- type: JSONSchema
url: json-schema/users-user-schema.json
- type: JSONSchema
url: json-schema/users-password-profile-schema.json
- type: JSONStructure
url: json-structure/users-user-structure.json
- type: Examples
url: examples/users-user-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/groups-overview
- type: JSONSchema
url: json-schema/groups-group-schema.json
- type: JSONStructure
url: json-structure/groups-group-structure.json
- type: Examples
url: examples/groups-group-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
- type: JSONSchema
url: json-schema/applications-application-schema.json
- type: JSONSchema
url: json-schema/applications-service-principal-schema.json
- type: JSONStructure
url: json-structure/applications-application-structure.json
- type: Examples
url: examples/applications-application-example.json
- aid: active-directory:active-directory-applications-api
name: Microsoft Active Directory Applications API
description: The Applications API from Microsoft Active Directory — 2 operation(s) for applications.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/users
baseURL: https://graph.microsoft.com/v1.0
tags:
- Application
tags_raw:
- Applications
properties:
- type: OpenAPI
url: openapi/active-directory-applications-api-openapi.yml
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/users
- type: JSONSchema
url: json-schema/users-user-schema.json
- type: JSONSchema
url: json-schema/users-password-profile-schema.json
- type: JSONStructure
url: json-structure/users-user-structure.json
- type: Examples
url: examples/users-user-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/groups-overview
- type: JSONSchema
url: json-schema/groups-group-schema.json
- type: JSONStructure
url: json-structure/groups-group-structure.json
- type: Examples
url: examples/groups-group-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
- type: JSONSchema
url: json-schema/applications-application-schema.json
- type: JSONSchema
url: json-schema/applications-service-principal-schema.json
- type: JSONStructure
url: json-structure/applications-application-structure.json
- type: Examples
url: examples/applications-application-example.json
- aid: active-directory:active-directory-groups-api
name: Microsoft Active Directory Groups API
description: The Groups API from Microsoft Active Directory — 6 operation(s) for groups.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/users
baseURL: https://graph.microsoft.com/v1.0
tags:
- Group
tags_raw:
- Groups
properties:
- type: OpenAPI
url: openapi/active-directory-groups-api-openapi.yml
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/users
- type: JSONSchema
url: json-schema/users-user-schema.json
- type: JSONSchema
url: json-schema/users-password-profile-schema.json
- type: JSONStructure
url: json-structure/users-user-structure.json
- type: Examples
url: examples/users-user-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/groups-overview
- type: JSONSchema
url: json-schema/groups-group-schema.json
- type: JSONStructure
url: json-structure/groups-group-structure.json
- type: Examples
url: examples/groups-group-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
- type: JSONSchema
url: json-schema/applications-application-schema.json
- type: JSONSchema
url: json-schema/applications-service-principal-schema.json
- type: JSONStructure
url: json-structure/applications-application-structure.json
- type: Examples
url: examples/applications-application-example.json
- aid: active-directory:active-directory-members-api
name: Microsoft Active Directory Members API
description: The Members API from Microsoft Active Directory — 2 operation(s) for members.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/users
baseURL: https://graph.microsoft.com/v1.0
tags:
- Members
properties:
- type: OpenAPI
url: openapi/active-directory-members-api-openapi.yml
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/users
- type: JSONSchema
url: json-schema/users-user-schema.json
- type: JSONSchema
url: json-schema/users-password-profile-schema.json
- type: JSONStructure
url: json-structure/users-user-structure.json
- type: Examples
url: examples/users-user-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/groups-overview
- type: JSONSchema
url: json-schema/groups-group-schema.json
- type: JSONStructure
url: json-structure/groups-group-structure.json
- type: Examples
url: examples/groups-group-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
- type: JSONSchema
url: json-schema/applications-application-schema.json
- type: JSONSchema
url: json-schema/applications-service-principal-schema.json
- type: JSONStructure
url: json-structure/applications-application-structure.json
- type: Examples
url: examples/applications-application-example.json
- aid: active-directory:active-directory-owners-api
name: Microsoft Active Directory Owners API
description: The Owners API from Microsoft Active Directory — 1 operation(s) for owners.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/users
baseURL: https://graph.microsoft.com/v1.0
tags:
- Owners
properties:
- type: OpenAPI
url: openapi/active-directory-owners-api-openapi.yml
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/users
- type: JSONSchema
url: json-schema/users-user-schema.json
- type: JSONSchema
url: json-schema/users-password-profile-schema.json
- type: JSONStructure
url: json-structure/users-user-structure.json
- type: Examples
url: examples/users-user-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/groups-overview
- type: JSONSchema
url: json-schema/groups-group-schema.json
- type: JSONStructure
url: json-structure/groups-group-structure.json
- type: Examples
url: examples/groups-group-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
- type: JSONSchema
url: json-schema/applications-application-schema.json
- type: JSONSchema
url: json-schema/applications-service-principal-schema.json
- type: JSONStructure
url: json-structure/applications-application-structure.json
- type: Examples
url: examples/applications-application-example.json
- aid: active-directory:active-directory-service-principals-api
name: Microsoft Active Directory Service Principals API
description: The Service Principals API from Microsoft Active Directory — 3 operation(s) for service principals.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/users
baseURL: https://graph.microsoft.com/v1.0
tags:
- Service Principals
properties:
- type: OpenAPI
url: openapi/active-directory-service-principals-api-openapi.yml
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/users
- type: JSONSchema
url: json-schema/users-user-schema.json
- type: JSONSchema
url: json-schema/users-password-profile-schema.json
- type: JSONStructure
url: json-structure/users-user-structure.json
- type: Examples
url: examples/users-user-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/groups-overview
- type: JSONSchema
url: json-schema/groups-group-schema.json
- type: JSONStructure
url: json-structure/groups-group-structure.json
- type: Examples
url: examples/groups-group-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
- type: JSONSchema
url: json-schema/applications-application-schema.json
- type: JSONSchema
url: json-schema/applications-service-principal-schema.json
- type: JSONStructure
url: json-structure/applications-application-structure.json
- type: Examples
url: examples/applications-application-example.json
- aid: active-directory:active-directory-users-api
name: Microsoft Active Directory Users API
description: The Users API from Microsoft Active Directory — 5 operation(s) for users.
humanURL: https://learn.microsoft.com/en-us/graph/api/resources/users
baseURL: https://graph.microsoft.com/v1.0
tags:
- User
tags_raw:
- Users
properties:
- type: OpenAPI
url: openapi/active-directory-users-api-openapi.yml
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/users
- type: JSONSchema
url: json-schema/users-user-schema.json
- type: JSONSchema
url: json-schema/users-password-profile-schema.json
- type: JSONStructure
url: json-structure/users-user-structure.json
- type: Examples
url: examples/users-user-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/groups-overview
- type: JSONSchema
url: json-schema/groups-group-schema.json
- type: JSONStructure
url: json-structure/groups-group-structure.json
- type: Examples
url: examples/groups-group-example.json
- type: Documentation
url: https://learn.microsoft.com/en-us/graph/api/resources/applications-api-overview
- type: JSONSchema
url: json-schema/applications-application-schema.json
- type: JSONSchema
url: json-schema/applications-service-principal-schema.json
- type: JSONStructure
url: json-structure/applications-application-structure.json
- type: Examples
url: examples/applications-application-example.json
- name: LDAP Protocol Interface
description: Lightweight Directory Access Protocol interface for querying and modifying Active Directory.
humanURL: https://docs.microsoft.com/en-us/previous-versions/windows/desktop/ldap/lightweight-directory-access-protocol-ldap-api
baseURL: ldap://[domain-controller]:389
tags:
- Directory
- LDAP
- Protocol
- Query
tags_raw:
- Directory
- Ldap
- Protocol
- Queries
properties:
- type: Protocol Specification
url: https://datatracker.ietf.org/doc/html/rfc4511
- type: Examples
url: https://docs.microsoft.com/en-us/windows/win32/ad/example-code-for-searching-active-directory
aid: active-directory:ldap-protocol-interface
- name: PowerShell Active Directory Module
description: PowerShell cmdlets for managing Active Directory Domain Services.
humanURL: https://docs.microsoft.com/en-us/powershell/module/activedirectory/
tags:
- Administration
- Automation
- PowerShell
- Scripting
tags_raw:
- Administration
- Automation
- Powershell
- Scripting
properties:
- type: Documentation
url: https://docs.microsoft.com/en-us/powershell/module/activedirectory/
- type: GettingStarted
url: https://docs.microsoft.com/en-us/powershell/module/activedirectory/get-aduser
- type: Examples
url: https://docs.microsoft.com/en-us/powershell/scripting/samples/sample-scripts-for-administration
aid: active-directory:powershell-active-directory-module
- name: Azure AD Graph API (Deprecated)
description: Legacy REST API for Azure Active Directory (being replaced by Microsoft Graph).
humanURL: https://docs.microsoft.com/en-us/previous-versions/azure/ad/graph/
baseURL: https://graph.windows.net
tags:
- Microsoft Azure
- Deprecated
- Legacy
- REST
tags_raw:
- Azure
- Deprecated
- Legacy
- Rest
properties:
- type: Documentation
url: https://docs.microsoft.com/en-us/previous-versions/azure/ad/graph/api/api-catalog
- type: Migration Guide
url: https://docs.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview
- type: Deprecation Notice
url: https://docs.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview
aid: active-directory:azure-ad-graph-api-deprecated
- aid: microsoft-active-directory:microsoft-active-directory-directory-roles-api
name: Microsoft Active Directory Roles API
description: The Directory Roles API from Microsoft Active Directory — 2 operation(s) for directory roles.
humanURL: https://docs.microsoft.com/en-us/graph/overview
baseURL: https://graph.microsoft.com
tags:
- Directory Roles
properties:
- type: OpenAPI
url: openapi/active-directory-directory-roles-api-openapi.yml
- type: Documentation
url: https://docs.microsoft.com/en-us/graph/api/overview
- type: Authentication
url: https://docs.microsoft.com/en-us/graph/auth/
- type: SDKs
url: https://docs.microsoft.com/en-us/graph/sdks/sdks-overview
- type: Pricing
url: https://azure.microsoft.com/en-us/pricing/details/active-directory/
- name: Azure AD Authentication Library (ADAL)
description: Authentication library for Azure AD (being replaced by MSAL).
humanURL: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-authentication-libraries
tags:
- Authentication
- Legacy
- Library
properties:
- type: Documentation
url: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-authentication-libraries
- type: GitHubRepository
url: https://github.com/AzureAD/azure-activedirectory-library-for-dotnet
aid: active-directory:azure-ad-authentication-library-adal
- name: Microsoft Authentication Library (MSAL)
description: Modern authentication library for Microsoft identity platform.
humanURL: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-overview
tags:
- Authentication
- Library
- OAuth
- OpenID Connect
tags_raw:
- Authentication
- Library
- OAuth
- OpenID Connect
properties:
- type: Documentation
url: https://docs.microsoft.com/en-us/azure/active-directory/develop/msal-overview
- type: GitHubRepository
url: https://github.com/AzureAD/microsoft-authentication-library-for-js
title: JavaScript SDK
- type: CodeExamples
url: https://docs.microsoft.com/en-us/azure/active-directory/develop/sample-v2-code
- type: GitHubRepository
url: https://github.com/AzureAD/microsoft-authentication-library-for-dotnet
title: .NET SDK
- type: GitHubRepository
url: https://github.com/AzureAD/microsoft-authentication-library-for-python
title: Python SDK
- type: GitHubRepository
url: https://github.com/AzureAD/microsoft-authentication-library-for-java
title: Java SDK
# --- truncated at 32 KB (37 KB total) ---
# Full source: https://artifacts.apis.io/active-directory/apis.yml
Microsoft Active Directory API — frequently asked questions
Does Microsoft Active Directory have an API?
Yes. APIs.io lists 25 APIs from Microsoft Active Directory, including Microsoft Graph Devices API, Microsoft Graph Directory Roles and Administrative Units API and Microsoft Graph Conditional Access API, and 22 more.
Is there an OpenAPI specification for the Microsoft Active Directory API?
Yes. APIs.io indexes 8 OpenAPI specifications for Microsoft Active Directory, each linked for download from this page.
How do I authenticate with the Microsoft Active Directory API?
Microsoft Active Directory documents its authentication (oauth2 · 1 scheme). The details are profiled on APIs.io as Active Directory Authentication.
How much does the Microsoft Active Directory API cost?
Microsoft Active Directory publishes its prices; its Microsoft Entra ID P1 plan is $7.00 user/month, paid yearly (annual commitment) as of 2026-09-20. APIs.io lists 11 pricing plans for Microsoft Active Directory, with each plan's price, limits and inclusions under Pricing on this page.
Does Microsoft Active Directory have an MCP server?
Yes. APIs.io lists 1 MCP server for Microsoft Active Directory: Remote MCP server at mcp.svc.cloud.microsoft requiring OAuth; 3 tools listed.
Is the Microsoft Active Directory API ready for AI agents?
Microsoft Active Directory has a Kin Score of 68.2 out of 100 (exemplar) and an Agent Readiness score of 36.0 (agent-ready), scored by API Evangelist on 2026-11-06.
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.