Search for users by name or email.

Get a specific user by their ID.

Get sign-in logs for a specific user within the last N days.

Requires AuditLog.Read.All permission.

Get MFA status and methods for a specific user.

Get MFA status for all members of a group.

Get all users who are members of privileged directory roles.

Get all conditional access policies.

Get a single conditional access policy by its ID with comprehensive details.

Get all groups (up to the specified limit, with paging).

Get a specific group by its ID.

Search for groups by display name (case-insensitive, partial match, with paging).

Get members of a group by group ID (up to the specified limit, with paging).

Get all groups (including transitive memberships) for a user by user ID.

Get all directory roles assigned to a user by user ID.

Get all managed devices (optionally filter by OS).

Get all managed devices for a specific userId.

Get full details of a single Intune managed device (beta endpoint).

Get applications detected on a specific Intune managed device (beta endpoint).

Get compliance-policy states for a specific Intune managed device (beta endpoint).

Get configuration-profile states for a specific Intune managed device (beta endpoint).

List all Intune device compliance policies (beta endpoint).

List all Intune device configuration profiles (beta endpoint).

List all Intune device categories (beta endpoint).

Get all relevant directory audit logs for a user by user_id within the last N days (default 30).

List a user's password authentication methods.

Get a specific password authentication method for a user.

Reset a user's password with a specific password value.

Suggest Microsoft Graph permissions for a specific task based on common mappings.

List all available categories and tasks for permission suggestions.

Get all Microsoft Graph permissions directly from the Microsoft Graph API.

Search for Microsoft Graph permissions by keyword.

Create a new group in Microsoft Graph.

Update an existing group in Microsoft Graph.

Delete a group from Microsoft Graph.

Add a member to a group.

Remove a member from a group.

Add an owner to a group.

Remove an owner from a group.

List all applications (app registrations) in the tenant, with paging.

Get a specific application by its object ID.

Create a new application (app registration).

Update an existing application (app registration).

Delete an application (app registration) by its object ID.

List all service principals in the tenant, with paging.

Get a specific service principal by its object ID.

Create a new service principal.

Update an existing service principal.

Delete a service principal by its object ID.