icon/x Created with Sketch.

Splunk Cookie Policy

We use our own and third-party cookies to provide you with a great online experience. We also use these cookies to improve our products and services, support our marketing campaigns, and advertise to you on our website and other websites. Some cookies may continue to collect information after you have left our website. Learn more (including how to update your settings) here.
Accept Cookie Policy

We are working on something new...

A Fresh New Splunkbase
We are designing a New Splunkbase to improve search and discoverability of apps. Check out our new and improved features like Categories and Collections. New Splunkbase is currently in preview mode, as it is under active development. We welcome you to navigate New Splunkbase and give us feedback.

Accept License Agreements

Thank You

Downloading MS Graph for Active Directory
SHA256 checksum (ms-graph-for-active-directory_144.tgz) f6b70f4ee906f9aa604a82e665bdb81f44bdb879483d97a52e9a203356799a30 SHA256 checksum (ms-graph-for-active-directory_143.tgz) 21b09b1761c319d3905b9240276de1e48e1a9559b9512ca17cd9cf17241e2774 SHA256 checksum (ms-graph-for-active-directory_142.tgz) e2acee601a003a16107d45d12f4bbc81c1ceda761cdb99e789915d81e2fe8fd6 SHA256 checksum (ms-graph-for-active-directory_141.tgz) 2a99431d8d12a217cdebb51383a81ba38ca1bb5762762c1e971799e97f7a2956 SHA256 checksum (ms-graph-for-active-directory_140.tgz) ef2aba3b60f7fccb1293cf1308bf7d9a522ea113f98592175c0c93712b7553e8 SHA256 checksum (ms-graph-for-active-directory_130.tgz) fcfb03423ced40286e88d447865f0911e18d24ddcee1f3dc30af5b624c8ab9fd SHA256 checksum (ms-graph-for-active-directory_120.tgz) e573ec4c14148cb8ae819ed705e5972079ea5699d866e7dea5586a6abf97c59c SHA256 checksum (ms-graph-for-active-directory_110.tgz) e17decaf118781253d89cb74d7255d625f9d26959e20c2615c7079b5fb171820 SHA256 checksum (ms-graph-for-active-directory_105.tgz) 784e733be1d891bf53562825301990f70ece37f5f155701c999d3e010f86f3a2

Flag As Inappropriate

soar

MS Graph for Active Directory

Splunk SOAR Cloud
Splunk Built
Overview
Connects to Microsoft Active Directory using MS Graph REST API services to support various generic and investigative actions

Supported Actions Version 1.4.4

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in a Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token

Supported Actions Version 1.4.3

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in a Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token

Supported Actions Version 1.4.2

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in a Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token

Supported Actions Version 1.4.1

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in a Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token

Supported Actions Version 1.4.0

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in a Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token

Supported Actions Version 1.3.0

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in a Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token

Supported Actions Version 1.2.0

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in an Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token or regenerates token when the token expires

Supported Actions Version 1.1.0

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in an Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user devices: List devices for a specified user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token or regenerates token when the token expires

Supported Actions Version 1.0.5

  • test connectivity: Use supplied credentials to generate a token with MS Graph
  • list users: Get a list of users
  • reset password: Reset or set a user's password in an Microsoft AD environment
  • disable tokens: Invalidate all active refresh tokens for a user in a Microsoft AD environment
  • enable user: Enable a user
  • disable user: Disable a user
  • list user attributes: List attributes for all or a specified user
  • set user attribute: Set an attribute for a user
  • remove user: Remove a user from a specified group
  • add user: Add a user to a specified group
  • list groups: List groups in the organization
  • get group: Get information about a group
  • list group members: List the members in a group
  • validate group: Returns true if a user is in a group; otherwise, false
  • list directory roles: List the directory roles that are activated in the tenant
  • generate token: Generate a token or regenerates token when the token expires

Release Notes

Version 1.4.4
Oct. 7, 2025
  • Updated documentation for reset password action
Version 1.4.3
Oct. 3, 2025
  • Update for Python 3.13 compatibility
  • Updated documentation for permissions, Test Connectivity flows, and asset configuration with clearer, user-friendly steps [PAPP-36675]
Version 1.4.2
Sept. 11, 2025
  • Fix set-attribute action with json string as attribute value
Version 1.4.1
Sept. 5, 2025
  • Update Python dependencies for vulnerabilities, package updates, and platform built-in removals
  • Update Python dependencies for Python 3.13 support
  • Update NOTICE file with updated dependencies
  • Apply pre-commit fixes
  • Remove beautifulsoup4 from requirements.txt
  • Resolved app issues related to Python 3.13 upgrade
  • Update Python version for 3.13
Version 1.4.0
Sept. 29, 2023
  • Fixed the token expiration issue [PAPP-31400]
Version 1.3.0
July 26, 2023
  • Fixed the state file reseting logic [PAPP-30760]
  • Removed django and requests dependencies in order to use platform packages [PAPP-31087, PAPP-31082, PAPP-31096, PAPP-30822]
Version 1.2.0
Feb. 2, 2023
  • Added option to use admin granted permissions
  • Updated the 'test connectivity' action to allow non-interactive tests when admin consent is already provided
  • Added 'expand string' and 'use advanced query' parameters in below five actions
  • list users
  • list groups
  • list user attributes
  • get group
  • list group members
Version 1.1.0
Dec. 5, 2022
  • Added 'list user devices' action
Version 1.0.5
April 20, 2022
  • Initial release with Python3 support
  • Note - This app is a replacement for the Azure AD app with Microsoft Graph API as Azure AD API is going to deprecate in near future

Subscribe Share

Are you a developer?

As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.

Follow Us:
Splunk, Splunk>,Turn Data Into Doing, Data-to-Everything, and D2E are trademarks or registered trademarks of Splunk LLC in the United States and other countries. All other brand names,product names,or trademarks belong to their respective owners.