Alert EnterpriseWiki

Microsoft Graph API

Provisioning

Microsoft's unified REST API for Microsoft 365 + Microsoft Entra ID + Azure services — accessed at graph.microsoft.com. The Graph API exposes users, groups, directory roles, licenses, mailboxes, OneDrive files, Teams, calendars, and dozens of other Microsoft cloud objects through a consistent OData-flavored REST interface.

AE Guardian's microsoft-entra-id connector uses Graph API exclusively for all provisioning + reconciliation operations. The connector requires an Entra app registration with specific Application Permissions granted via admin consent:

- User.Read.All, User.ReadWrite.All — user CRUD - Group.Read.All, GroupMember.Read.All — group + membership - Directory.Read.All — SKU / license info - RoleManagement.Read.Directory — directory roles - User-LifeCycleInfo.ReadWrite.All — hire/termination dates - User.EnableDisableAccount.All — lock/unlock accounts - User.ManageIdentities.All — external identities

Microsoft Graph throttling limits vary by resource. Large reconciliation jobs honor Retry-After headers on HTTP 429 responses.

What other systems call it

Per-vendor / per-standard terminology for this same concept.

SystemTerm / Notes
AlertEnterpriseAlertEnterpriseUsed by the microsoft-entra-id connector for all operations
MEMicrosoft Entra IDMicrosoft Graph — the REST surface for Entra ID

Used by 1 connector

Connectors in the catalog that reference this concept.

Verifying access
Desktop only

The AE Mobile Wiki needs a bigger screen.

The diagrams, comparisons, and animated flows aren't built for phones. Open this link on your laptop or desktop browser and you'll see the full reference.

wiki.alertenterprise.app

Same Google sign-in as the AE App Hub — you'll be in once you open it on a larger screen.