soar
MS Graph for Active Directory
Splunk SOAR Cloud
Splunk Built
Overview
Connects to Microsoft Active Directory using MS Graph REST API services to support various generic and investigative actions
Supported Actions Version 1.4.0
- test connectivity: Use supplied credentials to generate a token with MS Graph
- list users: Get a list of users
- reset password: Reset or set a user's password in a Microsoft AD environment
- disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
- enable user: Enable a user
- disable user: Disable a user
- list user devices: List devices for a specified user
- list user attributes: List attributes for all or a specified user
- set user attribute: Set an attribute for a user
- remove user: Remove a user from a specified group
- add user: Add a user to a specified group
- list groups: List groups in the organization
- get group: Get information about a group
- list group members: List the members in a group
- validate group: Returns true if a user is in a group; otherwise, false
- list directory roles: List the directory roles that are activated in the tenant
- generate token: Generate a token
Supported Actions Version 1.3.0
- test connectivity: Use supplied credentials to generate a token with MS Graph
- list users: Get a list of users
- reset password: Reset or set a user's password in a Microsoft AD environment
- disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
- enable user: Enable a user
- disable user: Disable a user
- list user devices: List devices for a specified user
- list user attributes: List attributes for all or a specified user
- set user attribute: Set an attribute for a user
- remove user: Remove a user from a specified group
- add user: Add a user to a specified group
- list groups: List groups in the organization
- get group: Get information about a group
- list group members: List the members in a group
- validate group: Returns true if a user is in a group; otherwise, false
- list directory roles: List the directory roles that are activated in the tenant
- generate token: Generate a token
Supported Actions Version 1.2.0
- test connectivity: Use supplied credentials to generate a token with MS Graph
- list users: Get a list of users
- reset password: Reset or set a user's password in an Microsoft AD environment
- disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
- enable user: Enable a user
- disable user: Disable a user
- list user devices: List devices for a specified user
- list user attributes: List attributes for all or a specified user
- set user attribute: Set an attribute for a user
- remove user: Remove a user from a specified group
- add user: Add a user to a specified group
- list groups: List groups in the organization
- get group: Get information about a group
- list group members: List the members in a group
- validate group: Returns true if a user is in a group; otherwise, false
- list directory roles: List the directory roles that are activated in the tenant
- generate token: Generate a token or regenerates token when the token expires
Supported Actions Version 1.1.0
- test connectivity: Use supplied credentials to generate a token with MS Graph
- list users: Get a list of users
- reset password: Reset or set a user's password in an Microsoft AD environment
- disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
- enable user: Enable a user
- disable user: Disable a user
- list user devices: List devices for a specified user
- list user attributes: List attributes for all or a specified user
- set user attribute: Set an attribute for a user
- remove user: Remove a user from a specified group
- add user: Add a user to a specified group
- list groups: List groups in the organization
- get group: Get information about a group
- list group members: List the members in a group
- validate group: Returns true if a user is in a group; otherwise, false
- list directory roles: List the directory roles that are activated in the tenant
- generate token: Generate a token or regenerates token when the token expires
Supported Actions Version 1.0.5
- test connectivity: Use supplied credentials to generate a token with MS Graph
- list users: Get a list of users
- reset password: Reset or set a user's password in an Microsoft AD environment
- disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
- enable user: Enable a user
- disable user: Disable a user
- list user attributes: List attributes for all or a specified user
- set user attribute: Set an attribute for a user
- remove user: Remove a user from a specified group
- add user: Add a user to a specified group
- list groups: List groups in the organization
- get group: Get information about a group
- list group members: List the members in a group
- validate group: Returns true if a user is in a group; otherwise, false
- list directory roles: List the directory roles that are activated in the tenant
- generate token: Generate a token or regenerates token when the token expires
Release Notes
Version 1.4.0
Sept. 29, 2023
- Fixed the token expiration issue [PAPP-31400]
Version 1.3.0
July 26, 2023
- Fixed the state file reseting logic [PAPP-30760]
- Removed django and requests dependencies in order to use platform packages [PAPP-31087, PAPP-31082, PAPP-31096, PAPP-30822]
Version 1.2.0
Feb. 2, 2023
- Added option to use admin granted permissions
- Updated the 'test connectivity' action to allow non-interactive tests when admin consent is already provided
- Added 'expand string' and 'use advanced query' parameters in below five actions
- list users
- list groups
- list user attributes
- get group
- list group members
Version 1.1.0
Dec. 5, 2022
- Added 'list user devices' action
Version 1.0.5
April 20, 2022
- Initial release with Python3 support
- Note - This app is a replacement for the Azure AD app with Microsoft Graph API as Azure AD API is going to deprecate in near future