Endpoint:

https://login.microsoftonline.com/{tenant_id}/oauth2
/v2.0/token

Description:

Authenticates with the API and returns a token in exchange for valid credentials.

Documentation:

https://docs.microsoft.com/en-us/graph/auth-v2-service#4-get-an-access-token

Endpoint:

{+serverUrl}/beta/users/

Description:

Get all users.

Permissions:

User.Read.All

Extracted Fields:

id, onPremisesSamAccountName, userPrincipalName, onPremisesImmutableId, onPermisesDistinguishedName, onPremisesLastSyncDateTime, displayName, deletedDateTime, givenName, surname, employeeID, mail, country, city, officeLocation, department, companyName, onPremisesUserPrincipalName, signInSessionsValidFromDateTime, employeeType, userType, accountEnabled

Documentation:

https://docs.microsoft.com/graph/api/user-list?view=graph-rest-beta&tabs=http

Endpoint:

{+serverUrl}/beta/groups/

Description:

Get all groups.

Permissions:

Group.Read.All

Extracted Fields:

id, displayName, mailNickname, renewedDateTime, createdDateTime, deletedDateTime, securityIdentifier, onPremisesDomainName, onPremisesSamAccountName

Documentation:

https://docs.microsoft.com/graph/api/group-list?view=graph-rest-beta&tabs=http

Endpoint:

{+serverUrl}/beta/groups/{groupId}/members

Description:

Get members with group.

Permissions:

Group.Read.All

Extracted Fields:

id

Documentation:

https://docs.microsoft.com/graph/api/group-list-members?view=graph-rest-beta&tabs=http

Endpoint:

{+serverUrl}/beta/directoryRoles/

Description:

Get all roles.

Permissions:

RoleManagement.Read.Directory

Extracted Fields:

id, deletedDateTime, description, displayName, roleTemplateId

Documentation:

https://docs.microsoft.com/graph/api/directoryrole-list?view=graph-rest-beta&tabs=http

Endpoint:

{+serverUrl}/beta/directoryRoles/{roleId}/members

Description:

Get members with role.

Permissions:

RoleManagement.ReadDirectory

Extracted Fields:

id

Documentation:

https://docs.microsoft.com/graph/api/directoryrole-list-members?view=graph-rest-beta&tabs=http

Endpoint:

{+serverUrl}/beta/devices/

Description:

Get all devices

Permissions:

Device.Read.All

Extracted Fields:

id, displayName, name, accountEnabled, approximateLastSignInDateTime, complianceExpirationDateTime, deviceId, deviceMetadata, deviceVersion, isCompliant, isManaged, mdmAppId, onPremisesLastSyncDateTime, onPremisesSyncEnabled, operatingSystem, operatingSystemVersion, profileType, trustType, status, platform, kind, model, manufacturer

Documentation:

https://docs.microsoft.com/graph/api/device-list?view=graph-rest-beta&tabs=http

Endpoint:

{+serverUrl}/beta/devices/{deviceId}/registeredUsers

Description:

Get users with device.

Permissions:

Directory.Read.All

Extracted Fields:

id

Documentation:

https://docs.microsoft.com/graph/api/device-list-registeredusers?view=graph-rest-beta&tabs=http