Context: Our team is working on provisioning for a product. We need to make Graph calls. I have a couple of questions to ask: We need a "region" field from MS Graph for a tenant. https://learn.microsoft.com/en-us/graph/api/managedtenants-tenantdetailedinformation-get?view=graph-rest-beta&tabs=http Is this end point stable to call? I also see "NA" for "region" attribute. We need to identify if our tenant is located in US or EU region. We also need a list of global admins for a tenant. https://learn.microsoft.com/en-us/graph/api/rbacapplication-list-roleassignments?view=graph-rest-1.0&tabs=http In response, there is one object with "mail", but other two objects don't. If "mail" is configured for a user of a tenant in AAD, could we retrieve for each users?

Hello Gambhir Kunwar, Thank you for your post in this Q&A forum. For your first question, We need a "region" field from MS Graph for a tenant. https://learn.microsoft.com/en-us/graph/api/managedtenants-tenantdetailedinformation-get?view=graph-rest-beta&tabs=http Is this end point stable to call? This API still in beta version, the endpoint may be functional, it is not considered to be stable for production use. Definitely, not recommended to use for production. For your second question;- do you want to know if you have multiple Global admin users with with mail object, with the endpoint retrieve all?

Hi @ Gambhir Kunwar If you want to use the graph API to get the tenant's country/region field, then you should call the /organization endpoint instead of the /tenantDetailedInformation endpoint, because the /tenantDetailedInformation endpoint is used to get the managed tenant's information. Yes, if you have set mail property for user then you will be able to retrieve user using that property. Hope this helps. If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment .

Tenant Detailed Information Get Endpoint

Gambhir Kunwar 25 Microsoft Employee

Context: Our team is working on provisioning for a product. We need to make Graph calls.

I have a couple of questions to ask:

We need a "region" field from MS Graph for a tenant. https://learn.microsoft.com/en-us/graph/api/managedtenants-tenantdetailedinformation-get?view=graph-rest-beta&tabs=http Is this end point stable to call? I also see "NA" for "region" attribute. We need to identify if our tenant is located in US or EU region.
We also need a list of global admins for a tenant. https://learn.microsoft.com/en-us/graph/api/rbacapplication-list-roleassignments?view=graph-rest-1.0&tabs=http
In response, there is one object with "mail", but other two objects don't. If "mail" is configured for a user of a tenant in AAD, could we retrieve for each users?

CarlZhao-MSFT 40,311 Reputation points

2023-05-16T05:56:08.32+00:00

Hi @Gambhir Kunwar

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Gambhir Kunwar 25 Reputation points Microsoft Employee

2023-05-22T18:09:45.1233333+00:00

Hi @CarlZhao-MSFT, Thank you for your post. I have follow-up questions I posted below.

Accepted answer

Ab-8756 800 Reputation points

2023-05-12T18:58:32.0366667+00:00

Hello Gambhir Kunwar,
Thank you for your post in this Q&A forum.
For your first question, We need a "region" field from MS Graph for a tenant. https://learn.microsoft.com/en-us/graph/api/managedtenants-tenantdetailedinformation-get?view=graph-rest-beta&tabs=http Is this end point stable to call?
This API still in beta version, the endpoint may be functional, it is not considered to be stable for production use. Definitely, not recommended to use for production.

For your second question;- do you want to know if you have multiple Global admin users with with mail object, with the endpoint retrieve all?
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

1 additional answer

CarlZhao-MSFT 40,311 Reputation points

2023-05-15T09:37:26+00:00
Hi @Gambhir Kunwar

If you want to use the graph API to get the tenant's country/region field, then you should call the /organization endpoint instead of the /tenantDetailedInformation endpoint, because the /tenantDetailedInformation endpoint is used to get the managed tenant's information.

Yes, if you have set mail property for user then you will be able to retrieve user using that property.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Please sign in to rate this answer.
Gambhir Kunwar 25 Reputation points Microsoft Employee

2023-05-22T18:08:08.0466667+00:00

Hi @CarlZhao-MSFT,

We decided to go with the /organization endpoint. I have a couple of follow up questions.

How can I check required fields in this API? Our provisioning will need tenantId, companyName, and region from this API response.

Is there a way to populate these fields if they are nullable?

For question 2 from the previous post, we decided to /roleManagement/directory/roleAssignments?$filter=roleDefinitionId eq '{roleDefinition id}' to retrive global admin id and use this id to

get a list of global admins using /roleManagement/directory/roleAssignments?$filter=roleDefinitionId eq '{roleDefinition id}'

Is the role id for global admin stable? Will there be a scenario where global admin id from role management directory will change?

CarlZhao-MSFT 40,311 Reputation points

2023-05-23T08:21:47.34+00:00

Hi @Gambhir Kunwar

How can I check required fields in this API? Our provisioning will need tenantId, companyName, and region from this API response.

You can call this endpoint: https://graph.microsoft.com/v1.0/organization?$select=id,country,city,displayName

Is there a way to populate these fields if they are nullable?

These properties are set when the tenant is created, and if they are empty, we currently cannot populate them.

Is the role id for global admin stable? Will there be a scenario where global admin id from role management directory will change?

The global administrator role ID at the directory (Azure AD) level is built-in and is a unique identifier that refers to a global administrator, so it will not change.

Hope this helps.

If it helps you, don't forget to click "Accept Answer".

Thanks,

Carl

Gambhir Kunwar 25 Reputation points Microsoft Employee

2023-05-23T15:51:35.1266667+00:00

Hi @CarlZhao-MSFT,

Thanks for your response.

We need to identify if a tenant is EU or US region to provision. How can we make sure we can identify the region? We're considering setting up a region claim and retrieving the value.

Could you help me to find a response schema for https://graph.microsoft.com/v1.0/organization? My team wants to know what are required attributes that comes from MS Graph endpoints?

Gambhir Kunwar 25 Reputation points Microsoft Employee

2023-05-23T16:03:00.02+00:00

Hi @CarlZhao-MSFT,

I have few more questions.

We need to identify if a tenant exists in EU or US region. How can we retrieve these regions? We are considering setting up a tenant region claim and get a region based on that claim.

How can we know required fields as a response from https://graph.microsoft.com/v1.0/organization or other MS Graph end points?
Sign in to comment

Share via

Tenant Detailed Information Get Endpoint

1 additional answer