Microsoft Graph API
Microsoft's unified REST API for Microsoft 365 + Microsoft Entra ID + Azure services — accessed at graph.microsoft.com. The Graph API exposes users, groups, directory roles, licenses, mailboxes, OneDrive files, Teams, calendars, and dozens of other Microsoft cloud objects through a consistent OData-flavored REST interface.
AE Guardian's microsoft-entra-id connector uses Graph API exclusively for all provisioning + reconciliation operations. The connector requires an Entra app registration with specific Application Permissions granted via admin consent:
- User.Read.All, User.ReadWrite.All — user CRUD
- Group.Read.All, GroupMember.Read.All — group + membership
- Directory.Read.All — SKU / license info
- RoleManagement.Read.Directory — directory roles
- User-LifeCycleInfo.ReadWrite.All — hire/termination dates
- User.EnableDisableAccount.All — lock/unlock accounts
- User.ManageIdentities.All — external identities
Microsoft Graph throttling limits vary by resource. Large reconciliation jobs honor Retry-After headers on HTTP 429 responses.
What other systems call it
Per-vendor / per-standard terminology for this same concept.
| System | Term / Notes |
|---|---|
| Used by the microsoft-entra-id connector for all operations | |
| MEMicrosoft Entra ID | Microsoft Graph — the REST surface for Entra ID |
Used by 1 connector
Connectors in the catalog that reference this concept.