Microsoft Graph is the gateway to data and intelligence in Microsoft cloud services like Microsoft Entra and Microsoft 365. Use the wealth of data accessible through Microsoft Graph to build apps for organizations and consumers that interact with millions of users.
Microsoft Graph
APIs
Microsoft Graph Admin
Microsoft Graph Admin refers to the administrative capabilities exposed through Microsoft Graph that let IT teams manage and monitor Microsoft 365 from a single, unified API. It enables you to provision and govern identities and access (users, groups, roles, licenses) in Microsoft Entra ID; manag...
Microsoft Graph Agreement Acceptances
Microsoft Graph Agreement Acceptances provides a read-only way to retrieve records of users’ responses to your organization’s Terms of Use configured in Microsoft Entra ID. Each acceptance entry is created automatically when a user (including guests) is prompted and captures who responded, which ...
Microsoft Graph Agreements
Microsoft Graph Agreements is the API for managing Microsoft Entra ID (Azure AD) Terms of Use. It lets organizations programmatically create, publish, localize, and version agreement documents (like EULAs, privacy notices, or acceptable use policies), configure how they’re shown to users, and req...
Microsoft Graph Applicaiton Catalogs
Microsoft Graph App Catalogs is the API surface that lets you programmatically manage Microsoft Teams apps in both the public Teams Store and your organization’s private app catalog. Through the appCatalogs/teamsApps resources, you can discover apps and their versions, retrieve metadata and app d...
Microsoft Graph Applications
Microsoft Graph applications are apps that use the Microsoft Graph API to securely access and orchestrate data across Microsoft 365 and Microsoft Entra ID (Azure AD). Through a single REST endpoint and SDKs, they can read and write mail, calendars, files, users, groups, Teams resources, devices, ...
Microsoft Graph Application Templates
Microsoft Graph Application Templates are open‑source, ready‑to‑deploy reference solutions that demonstrate how to build real applications on top of Microsoft Graph and Microsoft 365 data. Each template packages end‑to‑end code (UI, APIs, background processing), Azure infrastructure-as-code, and ...
Microsoft Graph Audit Logs
Microsoft Graph Audit Logs provide a unified, programmatic way to access and analyze activity and sign-in data from Microsoft Entra ID (Azure Active Directory) and related Microsoft 365 services. Through the Microsoft Graph API, you can query directory audit events (changes to users, groups, apps...
Microsoft Graph Authentication Method Configurations
Microsoft Graph Authentication Method Configurations provide programmatic control over which sign-in and multifactor authentication methods are available in Microsoft Entra ID (formerly Azure AD), how they’re configured, and who they apply to. Through Graph endpoints—such as the authentication me...
Microsoft Graph Authentication Methods Policies
Microsoft Graph Authentication Methods policies let administrators centrally control which sign-in and verification methods are available in Microsoft Entra ID (Azure AD) and how they’re used. Through Graph API endpoints, you can enable or disable specific methods (for example Microsoft Authentic...
Microsoft Graph Certificate Based Authorization Configuration
Microsoft Graph’s certificate-based authentication configuration is a tenant-level setting in Microsoft Entra ID that you manage via the Graph API to enable and govern sign-in using X.509 client certificates. It lets administrators specify which certificate authorities are trusted, how certificat...
Microsoft Graph Chats
Microsoft Graph Chats is the part of the Microsoft Graph API that lets developers build apps that read, create, and manage Microsoft Teams chats and chat messages. With it, you can list a user’s 1:1, group, and meeting chats; get chat details and members; create new chats; add or remove participa...
Microsoft Graph Communications
Microsoft Graph Communications is a set of cloud communications APIs and SDKs in Microsoft Graph that lets developers integrate deeply with Microsoft Teams calling and meetings. It provides endpoints to schedule and manage online meetings, place and control calls (answer, transfer, hold, mute), m...
Microsoft Graph Compliance
Microsoft Graph Compliance is a set of REST APIs that surface Microsoft Purview (Microsoft 365) compliance and privacy capabilities so you can automate workflows across Exchange, SharePoint, OneDrive, and Teams. It lets you orchestrate eDiscovery (Premium) end to end—create cases, add custodians ...
Microsoft Graph Connections
Microsoft Graph Connections lets organizations bring external business data—like content from Salesforce, ServiceNow, Confluence, file shares, or custom line‑of‑business apps—into Microsoft 365 by indexing it in Microsoft Graph. Through prebuilt or custom connectors and ingestion APIs, it normali...
Microsoft Graph Contacts
Microsoft Graph Contacts is the part of Microsoft Graph that lets apps access and manage the contacts stored in Microsoft 365 (Outlook) mailboxes through a single REST API. It enables you to list, search, create, update, and delete contacts and contact folders for the signed-in user or other mail...
Microsoft Graph Contracts
Microsoft Graph Contracts is a read-only API in Microsoft Graph that lets Microsoft 365 partners (such as CSP/resellers) discover and list the customer tenants they have a relationship with. It returns each customer’s key directory identifiers and metadata—like tenant (customer) ID, default domai...
Microsoft Graph Copilot
Microsoft Graph Copilot is an AI assistant that helps developers and IT pros explore and use the Microsoft Graph more easily. You describe what you want in plain language, and it suggests the right Graph APIs, generates REST requests and SDK code snippets, explains required permissions and data m...
Microsoft Graph Data Policy Operations
Microsoft Graph Data Policy Operations is the mechanism Microsoft Graph uses to represent and track long-running, privacy- and compliance-related tasks, most commonly exporting a user’s personal data. When you start an action like exportPersonalData, Graph creates a dataPolicyOperation resource t...
Microsoft Graph Device Application Management
Microsoft Graph Device Application Management is the set of Graph API endpoints that lets you automate Intune app lifecycle tasks across your organization. It enables you to discover, upload, categorize, and assign mobile and Windows apps (including line-of-business and store apps) to user or dev...
Microsoft Graph Device Management
Microsoft Graph Device Management is the set of Microsoft Graph APIs that expose Microsoft Intune’s endpoint management capabilities, letting you automate and integrate device and app lifecycle tasks across Windows, iOS/iPadOS, Android, and macOS. It enables you to inventory devices and apps; cre...
Microsoft Graph Devices
Microsoft Graph Devices refers to the Microsoft Graph APIs that let you discover and manage devices across Azure Active Directory and Microsoft Intune from a single, unified endpoint. Through the /devices resource you can list and query Azure AD–registered or joined devices and their relationship...
Microsoft Graph Directory
Microsoft Graph Directory is the identity and directory surface of Microsoft Graph, providing programmatic access to an organization’s Microsoft Entra ID (formerly Azure Active Directory). Through a single REST endpoint and SDKs, it lets you read and manage users, groups, devices, applications, r...
Microsoft Graph Directory Objects
Microsoft Graph Directory Objects is the common base resource that represents any identity object stored in Microsoft Entra ID (Azure AD)—including users, groups, devices, service principals, applications, and contacts—and gives them a consistent ID, metadata, and set of relationships. Through th...
Microsoft Graph Directory Roles
Microsoft Graph Directory Roles provides a REST API to discover, activate, and manage Microsoft Entra ID (formerly Azure Active Directory) directory roles—the RBAC roles that control permissions across Microsoft 365 and Entra. Through the API you can list which roles are active in a tenant, read ...
Microsoft Graph Directory Role Templates
Microsoft Graph directory role templates are read-only blueprints that represent each built-in Microsoft Entra ID (formerly Azure AD) administrator role, such as Global Administrator or User Administrator. Exposed via the directoryRoleTemplate resource, they let you discover the full set of avail...
Microsoft Graph Domain DNS Records
Microsoft Graph domain DNS records are the programmatic way to discover and manage the DNS settings Microsoft 365 expects for a custom domain. When you add a domain, Graph exposes two main sets of records: verificationDnsRecords (typically TXT or MX) used to prove ownership, and serviceConfigurat...
Microsoft Graph Domains
Microsoft Graph Domains is the set of Microsoft Graph APIs and resources for discovering and managing your organization’s domain names in Microsoft Entra ID (Azure AD). It lets you list all domains in a tenant and read key properties (for example, whether a domain is verified, default, initial, r...
Microsoft Graph Drives
Microsoft Graph Drives is the part of Microsoft Graph that lets apps discover and work with files across OneDrive and SharePoint using a single, consistent REST API. A drive represents a top-level document library—personal or shared—and exposes its files and folders (driveItems) in the same way w...
Microsoft Graph Education
Microsoft Graph Education is a set of Microsoft Graph APIs that let developers build apps for schools by connecting directly to Microsoft 365 education data and workflows. It exposes structured resources such as schools, classes, teachers, students (educationUser), and supports end-to-end assignm...
Microsoft Graph Employee Experience
Microsoft Graph Employee Experience is a set of APIs that let developers integrate and extend Microsoft Viva capabilities across Microsoft 365. It focuses especially on learning and growth scenarios: you can connect external learning providers, synchronize course catalogs, create and manage learn...
Microsoft Graph External
Microsoft Graph External is the set of Microsoft Graph capabilities (the /external namespace) that lets you bring content from third‑party apps and line‑of‑business systems into Microsoft 365. You create external connections, define a schema, and push items (with ACLs and properties) so Microsoft...
Microsoft Graph Filter Operators
Microsoft Graph filter operators are the OData $filter expressions you add to Graph API requests to narrow results on the server before they’re returned. They let you select only the resources that match certain criteria—such as equality and comparison checks (eq, ne, gt, ge, lt, le), logical com...
Microsoft Graph Functions
Microsoft Graph Functions is the Excel capability in Microsoft Graph that lets developers invoke hundreds of Excel worksheet functions through REST, running calculations directly on workbooks stored in OneDrive or SharePoint without opening the Excel app. Your app calls the workbook/functions end...
Microsoft Graph Group Lifecycle Policies
Microsoft Graph Group Lifecycle Policies let administrators govern the lifespan of Microsoft 365 groups by setting an expiration period, scoping the policy to all or selected groups, and automating renewal and cleanup. When a group nears expiration, owners (and optional alternate email recipients...
Microsoft Graph Groups
Microsoft Graph Groups is the Microsoft Graph API surface for managing Azure AD and Microsoft 365 groups and everything connected to them. It lets you create, read, update, and delete groups; add or remove owners and members (including dynamic membership rules); query transitive membership and ch...
Microsoft Graph Group Setting Templates
Microsoft Graph Group Setting Templates are read-only blueprints that define the configurable options you can apply to Microsoft 365 groups (and some other directory objects). Administrators use these templates (for example, those covering naming policies, guest access, classifications, welcome e...
Microsoft Graph Identity
Microsoft Graph Identity is the set of Microsoft Graph APIs that expose identity and access capabilities of Microsoft Entra ID (formerly Azure Active Directory) and related services. Through a single REST endpoint and SDKs, it lets developers and admins manage users, groups, devices, applications...
Microsoft Graph Identity Governance
Microsoft Graph Identity Governance is the API surface that lets you automate and integrate the identity governance capabilities of Microsoft Entra ID (formerly Azure Active Directory). It helps you enforce least-privilege and zero-trust by controlling and auditing who gets access to what, for ho...
Microsoft Graph Identity Protection
Microsoft Graph Identity Protection exposes Microsoft Entra ID (formerly Azure AD) Identity Protection signals and controls through the Graph API so you can detect, investigate, and remediate identity risks at scale. It provides programmatic access to risk detections and risk levels for users, si...
Microsoft Graph Identity Providers
Microsoft Graph Identity Providers is a set of APIs that lets you programmatically manage the sign-in providers your organization offers to customers and guests, primarily for Microsoft Entra External Identities and Azure AD B2C. With it, you can create, configure, list, and delete identity provi...
Microsoft Graph Information Protection
Microsoft Graph Information Protection is a set of Microsoft Graph APIs that expose Microsoft Purview Information Protection (sensitivity labels and related policies) to applications. It enables developers to discover a tenant’s label taxonomy and policy settings, evaluate which label should appl...
Microsoft Graph Invitations
Microsoft Graph Invitations is a Microsoft Graph API feature that lets apps programmatically invite external (B2B) users into a Microsoft Entra ID tenant. By calling POST /invitations, it creates a guest user and can send an email invitation with a redemption link, or you can suppress the email a...
Microsoft Graph Me
Microsoft Graph “Me” is a shortcut to the signed-in user’s resource, letting apps work with the current user’s data across Microsoft 365 without knowing their user ID. Through the /me endpoint, you can retrieve and update profile details and settings; get the user’s photo and presence; read, send...
Microsoft Graph Oauth2 Permission Grants
Microsoft Graph OAuth2 Permission Grants (the oAuth2PermissionGrant resource) are the consent records in Microsoft Entra ID that capture which delegated permissions (scopes) a client application’s service principal has to call a resource API on behalf of users. Each grant ties the client service ...
Microsoft Graph Organizations
Microsoft Graph Organizations exposes a tenant’s organization profile in Microsoft Entra ID (formerly Azure Active Directory) so apps can discover and manage directory‑level information through a single API. It lets you read core details like the tenant’s display name and ID, verified domains, an...
Microsoft Graph Permission Grants
Microsoft Graph permission grants are the records and APIs in Microsoft Entra ID that represent the consent an application has to access resources. They link a client app (service principal) to a resource API and the specific permissions approved, and are used during token issuance to determine w...
Microsoft Graph Places
Microsoft Graph Places is an API surface in Microsoft Graph that lets applications discover and work with physical location resources in Microsoft 365—primarily meeting rooms and room lists (and, in some tenants, workspaces). It provides a tenant-wide, directory-backed catalog of places that apps...
Microsoft Graph Planner
Microsoft Graph Planner is the set of Microsoft Graph APIs that lets developers programmatically work with Microsoft Planner data across Microsoft 365. With it, you can create and manage plans, buckets, and tasks; assign tasks to people; set due dates, priority, progress, labels, checklists, and ...
Microsoft Graph Policies
Microsoft Graph Policies is the set of Microsoft Graph API endpoints that let administrators and developers read and manage tenant-wide policy settings across Microsoft Entra ID and Microsoft 365. Through a single, programmable interface, you can automate and enforce organization-wide rules for t...
Microsoft Graph Print
Microsoft Graph Print (the Universal Print APIs in Microsoft Graph) lets developers integrate secure, cloud-based printing into their apps and workflows. Through these APIs, you can discover and register organization printers, manage printer shares and access, submit and spool print jobs (includi...
Microsoft Graph Reports
Microsoft Graph Reports is the reporting surface of Microsoft 365 exposed via Microsoft Graph, enabling administrators to programmatically retrieve usage, adoption, and certain identity and print analytics across their tenant. Through the /reports endpoints, you can pull tenant- and user-level me...
Microsoft Graph Role Management
Microsoft Graph Role Management provides a unified API to programmatically manage role-based access across Microsoft Entra ID (Azure AD) and supported services like Microsoft 365 and Intune. It lets you list and inspect built-in and custom role definitions, create or update custom roles, and assi...
Microsoft Graph Schema Extensions
Microsoft Graph schema extensions let you add your own strongly typed fields to Microsoft 365 resources—such as users, groups, messages, events, devices, and more—so your application’s data can live alongside Microsoft data and be accessed through the same Graph APIs. You register a schema extens...
Microsoft Graph Scoped Role Memberships
Microsoft Graph Scoped Role Memberships let you programmatically assign and manage Azure AD (Microsoft Entra ID) directory roles with a limited scope to an administrative unit, rather than tenant-wide. Exposed through the scopedRoleMembership resource, these assignments delegate administrative pe...
Microsoft Graph Search
Microsoft Graph Search is the unified enterprise search capability for Microsoft 365, exposed via the Microsoft Graph API, that lets apps query and discover content across services like SharePoint, OneDrive, Outlook, Teams, and more—as well as external systems connected through Graph connectors. ...
Microsoft Graph Security
Microsoft Graph Security is a unified set of APIs within Microsoft Graph that lets you access, correlate, and act on security data across Microsoft 365 and integrated security solutions. It normalizes alerts and incidents from Microsoft Defender products and other providers, exposes security post...
Microsoft Graph Service Principals
In Microsoft Entra ID (formerly Azure AD), a service principal is the identity an application uses to access resources, and the Microsoft Graph service principal is the tenant-local representation of the Microsoft Graph API itself. It publishes the set of OAuth 2.0 delegated scopes and applicatio...
Microsoft Graph Shares
Microsoft Graph Shares is the part of Microsoft Graph that lets apps access a OneDrive or SharePoint item by its sharing link or token, without needing to know the site, drive, or item IDs. Given a share URL, you can resolve it to a sharedDriveItem and then work with the underlying driveItem or l...
Microsoft Graph Sites
Microsoft Graph Sites is the Graph API surface for SharePoint Online, letting apps discover and work with sites and their content through a single, secure endpoint. It enables you to locate the root site or a site by URL, search for sites, and navigate a site’s structure to access document librar...
Microsoft Graph Solutions
Microsoft Graph solutions connect apps to the data and intelligence across Microsoft 365 through a single, unified API. They enable secure access to users, groups, mail, calendars, files, Teams chats and meetings, SharePoint, OneDrive, Planner, devices, and security signals, so you can build expe...
Microsoft Graph Storage
“Microsoft Graph storage” typically refers to the storage capabilities exposed through Microsoft Graph—primarily OneDrive and SharePoint—via the Files and Drives APIs. It lets apps programmatically store and manage files and folders, upload and download (including large-file upload sessions), tra...
Microsoft Graph Subscribed SKUs
Microsoft Graph Subscribed SKUs is the API/resource that lists the Microsoft 365/Azure AD license subscriptions your tenant owns. When you call GET /subscribedSkus, it returns each license plan (SKU) with its identifiers (skuId, skuPartNumber), seat counts (prepaidUnits and consumedUnits), subscr...
Microsoft Graph Subscriptions
Microsoft Graph Subscriptions let your app receive near real-time change notifications (webhooks) when Microsoft 365 data changes—such as Outlook mail and calendar items, users and groups, files in OneDrive/SharePoint, or Teams chats and channels. You register a subscription that specifies the re...
Microsoft Graph Teams
Microsoft Graph for Teams exposes Microsoft Teams data and capabilities through a single, secure API so you can build integrations and automate Teams at scale. With it, you can create and manage teams, channels, chats, and memberships; post and read messages; schedule and manage meetings and webi...
Microsoft Graph Teamwork
Microsoft Graph Teamwork is the set of Microsoft Graph APIs that surface Microsoft Teams collaboration capabilities. It lets you programmatically create and manage teams and channels; add members and owners; read, post, and moderate chat and channel messages; install, configure, and manage Teams ...
Microsoft Graph Tenant Relationships
Microsoft Graph Tenant Relationships is the part of the Microsoft Graph API that lets you model and manage how your Microsoft Entra ID tenant relates to other tenants. It provides endpoints to discover external tenants, create and govern delegated admin relationships (GDAP) between partners and c...
Microsoft Graph Users
Microsoft Graph Users refers to the Users resource in Microsoft Graph, which exposes Microsoft Entra ID (Azure AD) user accounts and their relationships and Microsoft 365 data through a unified API. It lets you list, read, create, update, and delete users; manage identities and lifecycle tasks su...