Need to add new custom field For user in AAD

Question

Hi,

Need to add new custom field called workShift in user Properties. There is any Graph API's to get and modify the custom field?

Also want to know is there any api to get available custom Fields?

Thanks,
Ajithkumar.M

Answer 1

Hi @Ajithkumar M ,

You can use Microsoft Graph API extensionProperty to have custom attributes which can be added to users, groups, application and devices.

Create Extension :
POST request:
https://graph.microsoft.com/v1.0/applications/xxxe7035-47d1-xxx-xxx-ffa55xxxx/extensionProperties

{
"name": "extensionName",
"dataType": "string",
"targetObjects": [
"User"
]
}

here id – object id of application

Response –
{
"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#applications('xxxe7035-47d1-xxx-xxx-ffa55xxxx')/extensionProperties/$entity",
"id": "837d4292-87e6-41c4-8f35-f4f0bef9c1d3",
"deletedDateTime": null,
"appDisplayName": ".Net Core Graph Tutorial",
"dataType": "String",
"isSyncedFromOnPremises": false,
"name": "extension_49f9b798fcb9421dbb107cf9c8f03fd5_extensionName",
"targetObjects": [
"User"
]
}

Update custom attribute using
Patch request:
https://graph.microsoft.com/v1.0/users/{user id}

{
"extension_49f9b798fcb9421dbb107cf9c8f03fd5_extensionName": "isPresent"
}

Delete custom attribute using

DELETE https://graph.microsoft.com/v1.0/applications/{application ObjectId}/extensionProperties/{id}

Reference: https://learn.microsoft.com/en-us/graph/api/resources/extensionproperty?view=graph-rest-1.0

Hope this will help.

Thanks,
Shweta

-----------------------------------

Please remember to "Accept Answer" if answer helped you.

Answer 2

Hi @Ajithkumar M ,

I think you can explore the custom attribute for AAD Users and also the Graph Explorer process is listed here so have a look here - custom-security-attributes-overview

==
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 3

Hi @Ajithkumar M ,

Directory schema extensions cannot be used for authorization scenarios and attributes because the access control for the extension attributes is tied to the Azure AD object. Custom security attributes can be used for authorization and attributes needing access control because the custom security attributes can be managed and protected through separate permissions.

Directory schema extensions are tied to an application and share the lifecycle of an application. Custom security attributes are tenant wide and not tied to an application.

Directory schema extensions support assigning a single value to an attribute. Custom security attributes support assigning multiple values to an attribute.

Hope this will help.

Thanks,
Shweta

Answer 4

@JimmySalian-2011 I searched through internet and i got below details.

https://learn.microsoft.com/en-us/previous-versions/azure/ad/graph/howto/azure-ad-graph-api-directory-schema-extensions

what is the difference between this and link you have shared?