Azure actions

Services

Cosmos DB actions

• Cosmos DB: Create ContainerCreate a container in a database: set the partition key path, and optionally an indexing policy, item TTL, unique keys, and provisioned throughput (manual RU/s or autoscale).
• Cosmos DB: Create DatabaseCreate a database in the Cosmos DB account, optionally with shared provisioned throughput (manual RU/s or autoscale).
• Cosmos DB: Create ItemCreate an item in a container. Strict by default: creating an id that already exists fails unless Upsert is enabled, which overwrites it instead.
• Cosmos DB: Delete ContainerDelete a container from a database, including every item inside it. This cannot be undone.
• Cosmos DB: Delete DatabaseDelete a database from the Cosmos DB account, including every container and item inside it. This cannot be undone.
• Cosmos DB: Delete ItemDelete one item from a container by id. This cannot be undone.

Entra ID actions

• Entra ID: Add Group MembersAdd many users to a group in one action. Graph accepts at most 20 member references per request, so longer lists are batched automatically (n8n adds one user at a time). A user who is already a member fails the whole batch: the error says how far it got. Requires the GroupMember.ReadWrite.All application permission.
• Entra ID: Add User to GroupAdd one user to a group's members. Adding a user who is already a member fails softly with a clear message. To add several users at once, use Add Group Members. Requires the GroupMember.ReadWrite.All application permission.
• Entra ID: Assign LicenseAdd and/or remove licence SKUs on a user. Find skuId GUIDs with Get Subscribed SKUs. The user must have a usageLocation set first, or Graph refuses the assignment (the error says how to fix it). Requires the User.ReadWrite.All application permission.
• Entra ID: Check Group MembershipCheck whether a user is a member of the given groups (transitive: nested membership counts). Is Member is true when the user is in ANY of the listed groups; Member Of lists exactly which ones matched. Graph checks at most 20 group IDs per call, so longer lists are batched automatically. Requires the User.Read.All and GroupMember.Read.All application permissions.
• Entra ID: Create GroupCreate a Security or Microsoft 365 group. Setting a Dynamic Membership Rule makes the group dynamic (rule processing is switched on). Requires the Group.ReadWrite.All application permission.
• Entra ID: Create UserCreate a Microsoft Entra ID user with an initial password. Set any other Graph property (givenName, surname, jobTitle, department, usageLocation, …) via Additional Fields. Requires the User.ReadWrite.All application permission (admin-consented).

Files actions

• Azure Files: Copy FileStart a server-side (async) file copy: from another file in the same account, or from any URL Azure can reach, including a blob, and optionally wait for it to complete. Handles files of any size, unlike Upload's 256 MB ceiling
• Azure Files: Create DirectoryCreate a directory in a share. Azure has no mkdir -p: every parent must already exist, so nested paths need one call per level: turn on Create Parents to make those calls for you
• Azure Files: Create ShareCreate an SMB file share in the storage account, with an optional size quota and metadata. A share is the mount point: directories and files live inside it
• Azure Files: Delete DirectoryDelete a directory. It must be EMPTY first: unlike deleting a share, this does not cascade, and the service refuses a directory that still has anything in it
• Azure Files: Delete FileDelete a file from a share. The file's directory is left in place
• Azure Files: Delete ShareDelete a file share and EVERYTHING in it: every directory and file, irrecoverably unless the account has share soft-delete enabled. Unlike a directory, a share does not have to be empty first

Storage actions

• Azure Storage: Copy BlobStart a server-side (async) blob copy: from another blob in the same account, or from any URL Azure can reach, and optionally wait for it to complete. Handles blobs of any size, unlike Upload from URL's 256 MB synchronous cap
• Azure Storage: Create ContainerCreate a blob container in the storage account, optionally with a public access level and metadata
• Azure Storage: Delete BlobDelete a blob. Its snapshots are deleted with it by default (Azure refuses the delete otherwise); choose Snapshots Only to keep the blob and drop the snapshots
• Azure Storage: Delete ContainerDelete a container and every blob in it. The container is soft-deleted when the account has delete retention enabled, otherwise this is permanent
• Azure Storage: Download BlobDownload a blob (optionally a byte range) to a file reference for downstream nodes. Text-like content up to 1 MB is also returned inline
• Azure Storage: Find Blobs by TagsSearch the whole storage account for blobs whose index tags match an expression, e.g. "project"='alpha' AND "status"='final'

Table Storage actions

• Azure Table Storage: Batch RowsApply up to 100 row changes as one all-or-nothing transaction. Every change must be in the SAME partition: that is the service's rule, not ours, and it is what makes the batch atomic
• Azure Table Storage: Create TableCreate a table in the storage account. Optionally succeed quietly when it already exists, so a flow can create-on-first-run without an error branch
• Azure Table Storage: Delete RowDelete one row by Partition Key and Row Key. Supply an ETag to fail if the row changed since you read it
• Azure Table Storage: Delete TableDelete a table and every row in it. The name stays unusable for up to about 40 seconds afterwards while the service reclaims it
• Azure Table Storage: Generate SAS LinkCreate a time-limited shared access signature for one table: hand out access without sharing the account key, optionally narrowed to a slice of rows. Signed locally with the account key; no API call is made
• Azure Table Storage: Get Access PoliciesRead the stored access policies on a table: the named, revocable grants a SAS link can point at instead of carrying its own permissions

Virtual Machines actions

• Azure Disk: List Managed DisksList managed disks in a resource group (or across the whole subscription), with size, SKU and the VM each is attached to.
• Azure Image: List Custom ImagesList custom managed images in a resource group (or across the whole subscription). Marketplace images are selected by publisher/offer/sku when creating a VM.
• Azure NSG: Add Inbound RuleAdd or update an inbound rule on a Network Security Group (protocol, ports, source/destination, allow or deny).
• Azure NSG: Create Security GroupCreate a Network Security Group. It starts with Azure's default rules; add your own with the Add Inbound Rule action.
• Azure NSG: Delete Security GroupDelete a Network Security Group. Azure refuses if it is still attached to a subnet or network interface.
• Azure NSG: List Security GroupsList Network Security Groups in a resource group (or across the whole subscription), with their location, rule count and tags.