Microsoft Entra ID

Disables a user in Microsoft Entra ID. This atomic requires one of the following API permissions depending on how you use it: User.ManageIdentities.All, User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All.

Target: Microsoft Entra ID or Microsoft Defender for Office 365 integration target or HTTP endpoint for "graph.microsoft.com"

Account Key: None if using an integration-provided target, access token if using an HTTP Endpoint target

Steps:
- Build the authorization header and request body
- Request the user be disabled
- Check if the request was successful:
  - If it wasn't, return an error

More information about this API: https://learn.microsoft.com/en-us/graph/api/user-update

Microsoft Entra ID - Disable User

prod-nam

prod-eu

prod-apjc

Enables a user in Microsoft Entra ID. This atomic requires one of the following API permissions depending on how you use it: User.ManageIdentities.All, User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All.

Target: Microsoft Entra ID or Microsoft Defender for Office 365 integration target or HTTP endpoint for "graph.microsoft.com"

Account Key: None if using an integration-provided target, access token if using an HTTP Endpoint target

Steps:
- Build the authorization header and request body
- Request the user be enabled
- Check if the request was successful:
  - If it wasn't, return an error

More information about this API: https://learn.microsoft.com/en-us/graph/api/user-update

Microsoft Entra ID - Enable User

Resets a user's password in Microsoft Entra ID. This atomic requires the "User.ReadWrite.All" API permission and your Azure application must be assigned at least the "User Administrator" Microsoft Entra role. If you want to be able to reset passwords for administrative or privileged users, you may need different permissions.

Target: Microsoft Entra ID or Microsoft Defender for Office 365 integration target or HTTP endpoint for "graph.microsoft.com"

Account Key: None if using an integration-provided target, access token if using an HTTP Endpoint target

Steps:
- Build the authorization header and request body
- Request the user's password be reset
- Check if the request was successful:
  - If it wasn't, return an error

More information about this API: https://learn.microsoft.com/en-us/graph/api/user-update

Microsoft Entra ID - Reset User Password

Searches for users in Microsoft Entra ID. This atomic requires one of the following API permissions depending on how you use it: User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All.

Target: Microsoft Entra ID or Microsoft Defender for Office 365 integration target or HTTP endpoint for "graph.microsoft.com"

Account Key: None if using an integration-provided target, access token if using an HTTP Endpoint target

Steps:
- Build the authorization header and query string
- Request the users
- Check if the request was successful:
  - If it was, attempt to extract the response and set the output variables
  - If it wasn't, return an error

More information about this API: https://learn.microsoft.com/en-us/graph/api/user-list