Entra ID actions

Every Entra ID action

• Entra ID: Add Group MembersAdd many users to a group in one action. Graph accepts at most 20 member references per request, so longer lists are batched automatically (n8n adds one user at a time). A user who is already a member fails the whole batch: the error says how far it got. Requires the GroupMember.ReadWrite.All application permission.
• Entra ID: Add User to GroupAdd one user to a group's members. Adding a user who is already a member fails softly with a clear message. To add several users at once, use Add Group Members. Requires the GroupMember.ReadWrite.All application permission.
• Entra ID: Assign LicenseAdd and/or remove licence SKUs on a user. Find skuId GUIDs with Get Subscribed SKUs. The user must have a usageLocation set first, or Graph refuses the assignment (the error says how to fix it). Requires the User.ReadWrite.All application permission.
• Entra ID: Check Group MembershipCheck whether a user is a member of the given groups (transitive: nested membership counts). Is Member is true when the user is in ANY of the listed groups; Member Of lists exactly which ones matched. Graph checks at most 20 group IDs per call, so longer lists are batched automatically. Requires the User.Read.All and GroupMember.Read.All application permissions.
• Entra ID: Create GroupCreate a Security or Microsoft 365 group. Setting a Dynamic Membership Rule makes the group dynamic (rule processing is switched on). Requires the Group.ReadWrite.All application permission.
• Entra ID: Create UserCreate a Microsoft Entra ID user with an initial password. Set any other Graph property (givenName, surname, jobTitle, department, usageLocation, …) via Additional Fields. Requires the User.ReadWrite.All application permission (admin-consented).
• Entra ID: Delete GroupDelete a Microsoft Entra ID group. A Microsoft 365 group moves to the directory recycle bin for 30 days (restorable with Restore Deleted Object); a Security group is deleted permanently. Requires the Group.ReadWrite.All application permission.
• Entra ID: Delete UserDelete a Microsoft Entra ID user. The user moves to the directory recycle bin for 30 days and can be brought back with Restore Deleted Object. Requires the User.ReadWrite.All application permission.
• Entra ID: Get GroupGet one Microsoft Entra ID group by object ID. Narrow the returned properties with Select Fields. Requires the Group.Read.All application permission.
• Entra ID: Get ManagerGet a user's manager. A user with no manager assigned fails softly with a clear message, so a flow can branch on it. Requires the User.Read.All application permission.
• Entra ID: Get Many GroupsList Microsoft Entra ID groups with raw OData $filter/$search passthrough. Advanced queries (endsWith, filter on null, $search) work: ConsistencyLevel: eventual and $count=true are sent on every request. Requires the Group.Read.All application permission.
• Entra ID: Get Many UsersList Microsoft Entra ID users with raw OData $filter/$search passthrough. Advanced queries (endsWith, filter on null, $search) work: ConsistencyLevel: eventual and $count=true are sent on every request. Requires the User.Read.All application permission.
• Entra ID: Get Subscribed SKUsList the licence SKUs the tenant has subscribed to: skuId, skuPartNumber, consumed vs available units. Feed the skuId GUIDs into Assign License. Requires the Organization.Read.All application permission.
• Entra ID: Get UserGet one Microsoft Entra ID user by object ID or userPrincipalName. Returns a rich default property set (Graph only returns a handful without an explicit $select); narrow it with Select Fields. Requires the User.Read.All application permission.
• Entra ID: Invite GuestInvite an external (B2B) guest user by email. A guest account is created immediately; the redeem link is returned so you can send it yourself if you turn the invitation email off. Requires the User.Invite.All application permission.
• Entra ID: List Group MembersList a group's members with proper paging (n8n only offers a capped $expand on group get). Turn on Transitive to include members inherited through nested groups. Requires the GroupMember.Read.All application permission.
• Entra ID: List Group OwnersList a group's owners: the users allowed to manage it. Requires the Group.Read.All application permission.
• Entra ID: List User's GroupsList the groups (and directory roles) a user is a member of. Turn on Transitive to include nested memberships: groups the user is in via other groups. Requires the User.Read.All and GroupMember.Read.All application permissions.
• Entra ID: Remove Group MemberRemove one member from a group. The member itself is untouched. Requires the GroupMember.ReadWrite.All application permission.
• Entra ID: Remove User from GroupRemove a user from a group's members. The user itself is untouched. Requires the GroupMember.ReadWrite.All application permission.
• Entra ID: Restore Deleted ObjectRestore a soft-deleted user or Microsoft 365 group from the directory recycle bin (objects stay restorable for 30 days after deletion). Requires the User.ReadWrite.All (users) or Group.ReadWrite.All (groups) application permission.
• Entra ID: Revoke Sign-In SessionsInvalidate all of a user's refresh tokens and session cookies, forcing sign-in everywhere: the standard leaver / compromised-account response. Access tokens already issued stay valid until they expire (up to ~1 hour). Requires the User.ReadWrite.All application permission.
• Entra ID: Set ManagerAssign a user's manager: the core HR-driven provisioning step. Requires the User.ReadWrite.All application permission.
• Entra ID: Update GroupUpdate a Microsoft Entra ID group's properties (description, displayName, visibility, membershipRule, …) as raw JSON. Requires the Group.ReadWrite.All application permission.
• Entra ID: Update UserUpdate a Microsoft Entra ID user. Common toggles are first-class; any other Graph property goes in Update Fields (which wins on a key set both ways). SharePoint-backed personal properties (aboutMe, birthday, skills, …) cannot be set app-only and are not supported. Requires the User.ReadWrite.All application permission.

Also in Azure