Skip to main content
MS Graph for Active Directory app icon

MS Graph for Active Directory

Connects to Microsoft Active Directory using MS Graph REST API services to support various generic and investigative actionsBuilt by Splunk LLC
soar product badge
Default Version 1.5.1

June 1, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4

Rating
0
(0)

Log in to rate this app

Support
Splunk Supported
Ranking

#7 in Identity Management

Connects to Microsoft Active Directory using MS Graph REST API services to support various generic and investigative actions

Supported actions

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in a Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • list named locations: List named locations in Entra Conditional Access
  • add cidr to named location: Add a CIDR range to an IP-based named location in Entra Conditional Access
  • remove cidr from named location: Remove a CIDR range from an IP-based named location in Entra Conditional Access
  • generate token: Generate a token