Microsoft Graph User

Details
Content
Dependencies
Version History

Use the Microsoft Graph integration to connect to and interact with user objects on Microsoft Platforms.

Integrations

Name	Description
Entra ID Users	The Entra ID Users integration (formerly Azure Active Directory Users) is a Unified gateway to security insights - all from a unified Microsoft Graph User API.

Integrations

Name	Description
Entra ID Users	The Entra ID Users integration (formerly Azure Active Directory Users) is a Unified gateway to security insights - all from a unified Microsoft Graph User API.

Required Content Packs (1)

Pack Name	Pack By
Base	By: Cortex XSOAR

Optional Content Packs (0)

Pack Name	Pack By

All level dependencies (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Aggregated Scripts	By: Cortex XSOAR

1.6.0 - 6758702 (January 18, 2026)

Integrations

Entra ID Users

Added support for the msgraph-user-get-groups command, which retrieves all groups a user is a member of.
Added support for the msgraph-user-get-auth-methods command, which retrieves all authentication methods registered to a user.

Related pull requests:
- 42670

Download

1.5.61 - 6580350 (January 6, 2026)

Microsoft Graph User

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 42564

Download

1.5.60 - 6078342 (December 1, 2025)

Integrations

Entra ID Users

Added support for msgraph-user-force-reset-password command that forces a user to reset their password the next time they log in.

Related pull requests:
- 41788

Download

1.5.59 - 6062719 (November 30, 2025)

Integrations

Entra ID Users

The msgraph-user-change-password-on-premise command is now a polling command.
Updated the Docker image to: demisto/crypto:1.0.0.5490413.

Related pull requests:
- 41874

Download

1.5.58 - 5707718 (November 3, 2025)

Integrations

Entra ID Users

Fixed an issue where the msgraph-user-change-password-on-premise command failed with a response parsing error even though the operation was successful.

Related pull requests:
- 41738

Download

1.5.57 - 5665400 (October 31, 2025)

Integrations

Entra ID Users

Renamed the integration Azure Active Directory Users to Entra ID Users.

Related pull requests:
- 41222

Download

1.5.56 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

1.5.55 - 5538136 (October 23, 2025)

Microsoft Graph User

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41627

Download

1.5.54 - 5509109 (October 22, 2025)

Integrations

Azure Active Directory Users

Added support for the msgraph-user-change-password-on-premise command, which changes the password of an on-premise user. See documentation for full permissions and roles to execute this command.
Updated the Docker image to: demisto/crypto:1.0.0.4578119.

Related pull requests:
- 41232

Download

1.5.53 - R5469292 (October 20, 2025)

Integrations

Azure Active Directory Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.

Related pull requests:
- 40846

Download

1.5.52 - 4431069 (August 5, 2025)

Integrations

Azure Active Directory Users

Fixed a bug in the request retry logic that caused all requests to fail with a type error.

Related pull requests:
- 40838

Download

1.5.51 - 4419577 (August 4, 2025)

Integrations

Azure Active Directory Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.
Improved error messages to include specific Microsoft error codes when available, providing better visibility into the root cause of failures.

Related pull requests:
- 40769

Download

1.5.50 - R4180042 (July 15, 2025)

Microsoft Graph User

Documentation and metadata improvements.

Related pull requests:
- 40478

Download

1.5.49 - R3980324 (June 26, 2025)

Integrations

Azure Active Directory Users

Added support for the 'Preference Center' feature for selected commands.
Updated the Docker image to: demisto/crypto:1.0.0.3539024.

Related pull requests:
- 40192

Download

1.5.48 - 3534539 (May 25, 2025)

Integrations

Azure Active Directory Users

Updated the documentation of msgraph-user-get with the correct links and information.

Related pull requests:
- 40014

Download

1.5.47 - 3481649 (May 21, 2025)

Integrations

Azure Active Directory Users

Fixed an issue with error message extraction in MicrosoftApiModule.

Related pull requests:
- 38951

Download

1.5.46 - R3414854 (May 15, 2025)

Integrations

Azure Active Directory Users

Added the msgraph-user-tap-policy-create command that creates a new Temporary Access Pass (TAP) policy for a user.
Added the msgraph-user-tap-policy-delete command that deletes a specific TAP policy.
Added the msgraph-user-tap-policy-list command that lists all TAP policies for a user.
Aligned the integration commands to the latest content standards.

Related pull requests:
- 39353

Download

1.5.45 - 3295986 (May 4, 2025)

Integrations

Azure Active Directory Users

Updated the documentation and metadata.
Updated the Docker image to: demisto/crypto:1.0.0.3174650.

Related pull requests:
- 38913
- 39393
- 39363
- 39365
- 39366
- 39367
- 39368

Download

1.5.44 - R3247809 (April 27, 2025)

Integrations

Azure Active Directory Users

Metadata and documentation improvements.

Related pull requests:
- 39077

Download

1.5.43 - R2989425 (March 26, 2025)

Integrations

Azure Active Directory Users

Improved the documentation for the msgraph-user-session-revoke command. This command requires an administrator role.
Updated the Docker image to: demisto/crypto:1.0.0.2005673.

Related pull requests:
- 38585

Download

1.5.42 - 2040490 (January 22, 2025)

Microsoft Graph User

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 38251

Download

1.6.0 - 6758702 (January 18, 2026)

Integrations

Entra ID Users

Added support for the msgraph-user-get-groups command, which retrieves all groups a user is a member of.
Added support for the msgraph-user-get-auth-methods command, which retrieves all authentication methods registered to a user.

Related pull requests:
- 42670

Download

1.5.61 - 6580350 (January 6, 2026)

Microsoft Graph User

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 42564

Download

1.5.60 - 6078342 (December 1, 2025)

Integrations

Entra ID Users

Added support for msgraph-user-force-reset-password command that forces a user to reset their password the next time they log in.

Related pull requests:
- 41788

Download

1.5.59 - 6062719 (November 30, 2025)

Integrations

Entra ID Users

The msgraph-user-change-password-on-premise command is now a polling command.
Updated the Docker image to: demisto/crypto:1.0.0.5490413.

Related pull requests:
- 41874

Download

1.5.58 - 5707718 (November 3, 2025)

Integrations

Entra ID Users

Fixed an issue where the msgraph-user-change-password-on-premise command failed with a response parsing error even though the operation was successful.

Related pull requests:
- 41738

Download

1.5.57 - 5665400 (October 31, 2025)

Integrations

Entra ID Users

Renamed the integration Azure Active Directory Users to Entra ID Users.

Related pull requests:
- 41222

Download

1.5.56 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

1.5.55 - 5538136 (October 23, 2025)

Microsoft Graph User

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 41627

Download

1.5.54 - 5509109 (October 22, 2025)

Integrations

Azure Active Directory Users

Added support for the msgraph-user-change-password-on-premise command, which changes the password of an on-premise user. See documentation for full permissions and roles to execute this command.
Updated the Docker image to: demisto/crypto:1.0.0.4578119.

Related pull requests:
- 41232

Download

1.5.53 - R5469292 (October 20, 2025)

Integrations

Azure Active Directory Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.

Related pull requests:
- 40846

Download

1.5.52 - 4431069 (August 5, 2025)

Integrations

Azure Active Directory Users

Fixed a bug in the request retry logic that caused all requests to fail with a type error.

Related pull requests:
- 40838

Download

1.5.51 - 4419577 (August 4, 2025)

Integrations

Azure Active Directory Users

Added automatic retry mechanism for HTTP 503 (Service Unavailable) errors to enhance reliability when Microsoft Graph services are temporarily unavailable.
Improved error messages to include specific Microsoft error codes when available, providing better visibility into the root cause of failures.

Related pull requests:
- 40769

Download

1.5.50 - R4180042 (July 15, 2025)

Microsoft Graph User

Documentation and metadata improvements.

Related pull requests:
- 40478

Download

1.5.49 - R3980324 (June 26, 2025)

Integrations

Azure Active Directory Users

Added support for the 'Preference Center' feature for selected commands.
Updated the Docker image to: demisto/crypto:1.0.0.3539024.

Related pull requests:
- 40192

Download

1.5.48 - 3534539 (May 25, 2025)

Integrations

Azure Active Directory Users

Updated the documentation of msgraph-user-get with the correct links and information.

Related pull requests:
- 40014

Download

1.5.47 - 3481649 (May 21, 2025)

Integrations

Azure Active Directory Users

Fixed an issue with error message extraction in MicrosoftApiModule.

Related pull requests:
- 38951

Download

1.5.46 - R3414854 (May 15, 2025)

Integrations

Azure Active Directory Users

Added the msgraph-user-tap-policy-create command that creates a new Temporary Access Pass (TAP) policy for a user.
Added the msgraph-user-tap-policy-delete command that deletes a specific TAP policy.
Added the msgraph-user-tap-policy-list command that lists all TAP policies for a user.
Aligned the integration commands to the latest content standards.

Related pull requests:
- 39353

Download

1.5.45 - 3295986 (May 4, 2025)

Integrations

Azure Active Directory Users

Updated the documentation and metadata.
Updated the Docker image to: demisto/crypto:1.0.0.3174650.

Related pull requests:
- 38913
- 39393
- 39363
- 39365
- 39366
- 39367
- 39368

Download

1.5.44 - R3247809 (April 27, 2025)

Integrations

Azure Active Directory Users

Metadata and documentation improvements.

Related pull requests:
- 39077

Download

1.5.43 - R2989425 (March 26, 2025)

Integrations

Azure Active Directory Users

Improved the documentation for the msgraph-user-session-revoke command. This command requires an administrator role.
Updated the Docker image to: demisto/crypto:1.0.0.2005673.

Related pull requests:
- 38585

Download

1.5.42 - 2040490 (January 22, 2025)

Microsoft Graph User

Locked dependencies of the pack to ensure stability for versioned core packs. No changes in this release.

Related pull requests:
- 38251

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	July 22, 2020
Last Release	January 18, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.