External lookup for listing Microsoft Entra ID groups for a user via Microsoft Graph.
Built by
Latest Version 1.0.3
May 11, 2026
Compatibility
This is compatibility for the latest version of the app
Splunk Enterprise, Splunk Cloud
Platform Version: 10.3, 10.2, 10.1, 10.0
Rating
0
(0)
Log in to rate this app
Support
Developer Supported addon
Ranking
#6
in Directory Service
#50
in Identity Management
Microsoft Entra ID Group Lookup is a Splunk add-on that provides an external lookup for resolving a user’s Microsoft Entra ID group memberships through Microsoft Graph. Given a user principal name or Entra object ID, the lookup returns direct or transitive group memberships, including group ID, display name, mail address, group type, and security/mail-enabled flags.