Details

This atomic belongs to the Microsoft Entra ID atomic group.

Searches for users in Microsoft Entra ID. This atomic requires one of the following API permissions depending on how you use it: User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All.

Target: Microsoft Entra ID or Microsoft Defender for Office 365 integration target or HTTP endpoint for "graph.microsoft.com"

Account Key: None if using an integration-provided target, access token if using an HTTP Endpoint target

Steps:

  • Build the authorization header and query string
  • Request the users
  • Check if the request was successful:
    • If it was, attempt to extract the response and set the output variables
    • If it wasn't, return an error

More information about this API: https://learn.microsoft.com/en-us/graph/api/user-list

About
Authorship
Cisco Managed