Connect your own Microsoft Entra ID (Azure AD) tenant via an App Registration to manage Users, Groups, Applications/Service Principals, Directory Roles, Conditional Access Policies, and review Sign...
What this app can do
28 tools registered
Connect EntraFree
Connect a Microsoft Entra ID tenant via an Azure AD App Registration (client credentials), after verifying connectivity.
Disconnect EntraFree
Disconnect a Microsoft Entra ID tenant: deletes only the saved credentials. Nothing in Entra ID itself is changed.
List ConnectionsFree
List the connected Microsoft Entra ID tenants.
List Users8 tok
List users in the connected Entra ID tenant, optionally filtered by a search string.
Get User8 tok
Read one Entra ID user in full.
Create User16 tok
Create a new Entra ID user with a required initial password.
Update User16 tok
Update selected fields of an existing Entra ID user (display name and/or enabled state). Only given fields change.
Delete User20 tok
Permanently delete an Entra ID user. Entra ID keeps a 30-day recovery window internally, but this connector cannot restore it.
List Groups8 tok
List groups in the connected Entra ID tenant.
Get Group8 tok
Read one Entra ID group in full.
Create Group16 tok
Create a new Entra ID security or Microsoft 365 group.
Add User To Group16 tok
Add a user to an Entra ID group.
Remove User From Group20 tok
Remove a user from an Entra ID group.
List Applications8 tok
List App Registrations (Applications) in the connected Entra ID tenant.
Get Application8 tok
Read one Entra ID App Registration in full.
List Service Principals8 tok
List Service Principals (the tenant-local instance of an application) in the connected Entra ID tenant.
Get Service Principal8 tok
Read one Entra ID Service Principal in full.
List Directory Roles8 tok
List activated Directory Roles in the connected Entra ID tenant (e.g. Global Administrator, User Administrator).
List Directory Role Members8 tok
List the members (users/service principals) assigned to one Entra ID Directory Role.
Add Directory Role Member16 tok
Add a user to an Entra ID Directory Role (grants admin privilege -- use carefully).
Remove Directory Role Member20 tok
Remove a user from an Entra ID Directory Role.
List Conditional Access Policies8 tok
List Conditional Access Policies configured on the connected Entra ID tenant (read-only -- writing/editing CA policies is out of scope, they can lock out an entire org if misconfigured).
Get Conditional Access Policy8 tok
Read one Conditional Access Policy in full (read-only).
List Sign Ins8 tok
List Entra ID sign-in log events, optionally filtered to one user.
List Directory Audits8 tok
List Entra ID directory audit log events (who changed what, e.g. user/group/app/role changes).
List Risky Users8 tok
List users flagged by Identity Protection as risky. Requires Entra ID P2 license on the tenant -- returns requires_p2_license=true with an empty list if unavailable, not an error.
List Risk Detections8 tok
List Identity Protection risk detection events. Requires Entra ID P2 license on the tenant -- returns requires_p2_license=true with an empty list if unavailable, not an error.
Audit Tenant40 tok
Build one aggregated health report for the connected Entra ID tenant: total/disabled users, application count, and a naive stale-privileged-role-assignment signal.