How to connect Microsoft Entra ID to Claude

Add one existing user, group, or device to an assigned-membership Microsoft Entra administrative unit, bringing that object into the unit's delegated administration scope.

Add an existing user or service principal as an owner of an application registration, granting authority to administer it.

Assign a principal to an activated Microsoft Entra directory role, granting that role's tenant-wide administrative access.

Add an existing directory object as a direct member of an assigned-membership Microsoft Entra group.

Add an existing user or service principal as an owner of a Microsoft 365 or security group, granting authority to modify the group.

Add an existing user or service principal as an owner of an enterprise application/service principal, granting authority to administer it.

Add and remove Microsoft product licenses for one Entra user in a single request.

Create an assigned or dynamic Microsoft Entra administrative unit for scoping directory administration.

Create a Microsoft Entra application registration with allowlisted platform, role, and API permission settings, without creating or accepting password or key credentials.

Assign an application role to a user, group, or client service principal.

Create a Microsoft 365, assigned security, or dynamic-membership group.

Grant a user, role-assignable group, or service principal a Microsoft Entra directory role, conferring the role's administrative access at the explicit tenant, administrative-unit, resource-application, or app-specific scope.

Create an enterprise application (service principal) for an existing application ID without accepting or creating password or key credentials.

Create a Microsoft Entra tenant user with the required sign-in profile and an initial password.

Delete a Microsoft Entra administrative unit and remove its administrative scope.

Delete a Microsoft Entra application registration by its directory Object ID.

Delete a Microsoft Entra group and its associated group resources.

Delete a Microsoft Entra enterprise application/service principal.

Delete a tenant user and remove the directory identity.

Disable a Microsoft Entra user without deleting the directory object.

Get one Microsoft Entra administrative unit by directory object ID.

Get one application registration by its directory Object ID, not its Application (client) ID, returning only credential-safe properties.

Get one Microsoft Entra Conditional Access policy by object ID.

Get one Microsoft Entra device by its directory Object ID, not its distinct Device Registration Service deviceId value.

Get one Microsoft Entra directory audit event by its event ID.

Get one Microsoft Entra directory role that is activated in the tenant by its activated role object ID.

Get one tenant domain by its fully qualified domain name.

Get one tenant group by directory object ID.

Get the connected Microsoft Entra tenant's organization record by tenant organization ID.

Get one unified Microsoft Entra directory role assignment by its assignment ID, including its principal, role definition, and directory or application scope identifiers.

Get one Microsoft Entra enterprise application/service principal by its directory Object ID, not its Application (client) ID, returning only credential-safe properties.

Get one retained Microsoft Entra sign-in event by event ID.

Get one commercial product subscription acquired by the Microsoft Entra tenant using its subscribed-SKU object ID.

Get one tenant user by directory object ID or user principal name.

Get the directory object recorded as a user's manager.

List users, groups, and devices directly assigned to a Microsoft Entra administrative unit.

List Microsoft Entra administrative units with optional OData filtering, search, field selection, relationship expansion, and cursor pagination.

List the legacy scoped-role memberships that grant users administrative access within one Microsoft Entra administrative unit.

List the users and service principals that own an application registration.

List Microsoft Entra application registrations with OData filtering, search, ordering, and cursor pagination.

List users, groups, and client service principals granted application roles on a resource service principal, with OData filtering, field selection, and cursor pagination.

List read-only Microsoft Entra Conditional Access policy definitions, including conditions, grant controls, and session controls, with OData queries and cursor pagination.

List devices registered in the Microsoft Entra tenant with optional advanced OData queries and cursor pagination.

List retained Microsoft Entra directory audit events with documented OData filtering, activity-time ordering, and opaque cursor pagination.

List principals currently assigned to one activated Microsoft Entra directory role.

List Microsoft Entra directory roles that are activated in the tenant.

List verified and unverified domains configured for the Microsoft Entra tenant, with documented OData query controls and cursor pagination.

List a group's direct members; transitive members are not included.

List the users and service principals that own a group.

List tenant groups with general OData options, or list only dynamic-membership groups with a fixed safe filter and membership-rule fields.

Return the connected Microsoft Entra tenant's organization record.

List unified Microsoft Entra directory role assignments, including the assigned principal, role definition, and directory or application scope.

List directory objects that own an enterprise application/service principal.

List Microsoft Entra enterprise applications and service principals with OData filtering, search, ordering, and cursor pagination.

List retained Microsoft Entra sign-in events, newest first.

List commercial product subscriptions acquired by the Microsoft Entra tenant, including assigned-license counts, prepaid-unit availability, and included service plans.

List directory objects that directly report to one user, with optional OData filtering, search, ordering, field selection, and safe cursor pagination.

List one tenant user's assigned product licenses and the provisioning state of their included service plans.

List groups, directory roles, and administrative units a user directly belongs to.

List tenant users with optional OData filtering, search, ordering, field selection, and a safe continuation cursor.

Remove a user, group, or device from a Microsoft Entra administrative unit, ending administration scoped through that membership.

Remove an owner from a Microsoft Entra application registration, revoking that principal's authority to administer the application.

Remove an app-role assignment from a Microsoft Entra resource service principal.

Remove a principal from an activated Microsoft Entra directory role, revoking the role's tenant-wide administrative access.

Remove a direct member from an assigned-membership Microsoft Entra group, revoking access inherited through that membership.

Remove a user or service principal as an owner of a Microsoft Entra group, revoking that principal's authority to administer the group.

Remove a unified Microsoft Entra directory role assignment and revoke the principal's administrative access at that assignment's scope.

Remove an owner from a Microsoft Entra enterprise application/service principal, revoking that principal's authority to administer it.

Update explicitly supplied profile or dynamic-membership properties of one Microsoft Entra administrative unit.

Update explicitly supplied, allowlisted settings of one Microsoft Entra application registration.

Update explicitly supplied, allowlisted properties of one Microsoft Entra group, including its dynamic membership rule or processing state.

Update explicitly supplied, allowlisted settings of one Microsoft Entra enterprise application/service principal.

Update allowlisted, non-credential profile properties for one Microsoft Entra user.