Skip to main content
TA Entra ID Group Lookup app icon

TA Entra ID Group Lookup

External lookup for listing Microsoft Entra ID groups for a user via Microsoft Graph.Built by Eric Jorgensen
splunk product badge

Default Version 1.0.3

May 11, 2026

Compatibility

Splunk Enterprise, Splunk Cloud

Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0

Rating
5
(1)

Log in to rate this app

Support
Developer Supported
Ranking

#5 in Directory Service

#49 in Identity Management

Microsoft Entra ID Group Lookup is a Splunk add-on that provides an external lookup for resolving a user’s Microsoft Entra ID group memberships through Microsoft Graph. Given a user principal name or Entra object ID, the lookup returns direct or transitive group memberships, including group ID, display name, mail address, group type, and security/mail-enabled flags.