Skip to main content

Microsoft Azure Active Directory Graph API

Got chance to work with Microsoft Azure Active Directory Graph API (api-version=1.5) to manage users, groups, licenses management etc.

few of the things that I should mention here which could save a developer time to code.

Azure Portal UI and Graph API object properties mapping;

WORK INFO:

JOB TITLE  : jobTitle
DEPARTMENT : department
OFFICE NUMBER: physicalDeliveryOfficeNumber
OFFICE PHONE:telephoneNumber
MOBILE:mobile [a single space between country code and mobile number]
STREET ADDRESS:streetAddress
CITY:city
STATE OR PROVINCE:state
ZIP OR POSTAL CODE:
COUNTRY OR REGION:country


ALLOW THE USER TO SIGN IN AND ACCESS SERVICES?
Account Enabled = false( INACTIVE), true(ACTIVE)  //


LICENSE INFO:

 EXCHANGE_S_STANDARD - Exchange Online (Plan 2)
MCOSTANDARD - Lync Online (Plan 2)
SHAREPOINTENTERPRISE - SharePoint Online (Plan 2)
SHAREPOINTWAC - Office Online
OFFICESUBSCRIPTION - Office ProPlus
RMS_S_ENTERPRISE - Azure Active Directory Rights Management

YAMMER_ENTERPRISE - Yammer

Azure Portal Organizational ROLE and Graph API Role Mapping:

 "Global Administrator"  =   "Company Administrator"
"Billing Administrator" = "Billing Administrator"
"Service Administrator" =  "Service Support Administrator"
"User Administrator" = "User Account Administrator"

"Password Administrator"  = "Helpdesk Administrator"

Comments

Post a Comment

Popular posts from this blog

My own developed - Active Directory Cache Inspector for AD Driver Novell Identity manager

Sometimes there is a need for us (Consultants) to see a snapshot of all the changes that happened on the Active directory side while the Novell AD IDM driver was stopped or was not running, before we decide to start the AD driver. Since Novell Identity Manager currently allows us to see all the events which happened in the Identity vault only, but not on the AD side, I decided to write such a tool myself, and of course wanted to share this tool with the consultants/community out there. It's a .NET 2.0 WinForm application, written in C# programming language. To run this tool you should have at minimum: .NET 2.0 framework installed, ( Not supported on the Linux platforms yet) This application must be run under the same user which is configured on the AD driver. Short Tutorial (How To): When you run the application (ADCView.exe), the application automatically discovers the current domain, a domain controller, and default domain naming context in the user logged in domain automatically
Post a Comment
Read more

NetIQ IDM - How to read Component type data from Query nodeset done from command transformation

Suppose query: <do-set-local-variable name="local.sub.ctp.QueryContacts" scope="policy"> <arg-node-set> <token-query class-name="User" scope="entry"> <arg-match-attr name="UPN"> <arg-value type="string"> <token-src-attr class-name="User" name="UPN"/> </arg-value> </arg-match-attr> <arg-match-attr name="contacts"> <arg-value type="string"> <token-text xml:space="preserve">get-contacts</token-text> </arg-value> </arg-match-attr> <arg-match-attr name="userid"> <arg-value type="string"> <token-association/> </arg-value> </arg-match-attr> </token-query> </arg-node-set> </do-set-local-variable> Outpu
Post a Comment
Read more