List usersList the people in your directory, optionally filtered by name, by whether they can sign in, or to members or guests.
Get a userLook up one user's profile and account status.
Create a userAdd a person to your directory with a sign-in name and an initial password they must change the first time they sign in. Leave the password blank to have one generated; it is returned once, in this step's result.
Update a userChange a user's profile, block or allow their sign-in, or rename their sign-in name. Only the fields you fill in change. Accounts that hold an admin role can only be changed by an app that has been given a higher Entra role itself.
Delete a userDelete a user. They can be restored, with their group memberships, for 30 days with 'Restore a deleted user or group'.
List a user's groups and rolesThe groups, admin roles and administrative units a user belongs to directly (not through a nested group).
Set a user's managerSet who a user reports to, replacing any current manager.
Remove a user's managerClear who a user reports to.
Sign a user out everywhereRevoke a user's sign-in sessions and refresh tokens, so every app and device has to sign in again. Use it when an account may be compromised or someone leaves. It can take a few minutes to reach every app.
List groupsList the groups in your directory, optionally by name or type.
Get a groupLook up one group's name, description and type.
Create a groupCreate a security group, for granting access to apps and resources, optionally with its owners and first members.
Update a groupRename a group or change its description. Only the fields you fill in change.
Delete a groupDelete a group. It can be restored for 30 days with 'Restore a deleted user or group'.
List group membersThe users, groups and devices directly in a group.
Add a group memberAdd a user, or nest a group, in a group. Adding someone who is already a member succeeds and says so.
Remove a group memberTake a user or nested group out of a group. Nothing is deleted.
List deleted users or groupsUsers or groups deleted in the last 30 days, which can still be restored.
Restore a deleted user or groupBring back a user or group deleted in the last 30 days, with its memberships.
List app registrationsThe apps registered in your directory, with their client IDs.