Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
12,059 questions
Microsoft Graph API equivalent for Azure AD Graph API endpoints
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 19%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBS%3C/text%3E%3C/svg%3E)
Brian Stetson
41
Reputation points
I have been using some Azure AD Graph API endpoints in my reporting, the same API endpoints Microsoft still uses in its Entra ID GUI to get data, but recently they all stopped working with a 401 unauthorized. No changes occurred in my tenant on the app I am using for access and my token is not expired. all of my Microsoft Graph API endpoints still work. So with the push to move everything to the Microsoft Graph API Endpoint, does any know the equivalent for these Azure AD Endpoints? Thanks.
https://graph.windows.net/myorganization/activities/getConditionalAccessDailySummary(period='D7',authenticationRequirement='*',clientApp='*',deviceState='*',devicePlatform='*',signInRisk='*',userType='*',policy='*',authenticationStrength='*')?api-version=beta
https://graph.windows.net/myorganization/activities/getConditionalAccessSecurityAlerts?api-version=beta
https://graph.windows.net/myorganization/activities/getConditionalAccessTopUnprotectedApps?api-version=beta
https://graph.windows.net/myorganization/activities/getSignInUsageByAuthMethodSummary(period='D7')?api-version=beta"
"https://graph.windows.net/myorganization/activities/getSignInMfaUsageSummary(period='D7')?api-version=beta"
"https://graph.windows.net/myorganization/activities/getAuthenticationMethodUsageSummary(period='D1')?api-version=beta"
"https://graph.windows.net/myorganization/activities/getPasswordResetsAndAccountUnlocksSummary(period='D1')?api-version=beta
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC3%3C/text%3E%3C/svg%3E)
Carolyne-3676 211 Reputation points2024-04-10T09:59:41.37+00:00 Hello!
Here are some to get you started. Revieiwing a couple more and will share on the thread.- /auditLogs/directoryAudits
- /identityProtection/riskyUsers
- /reports/credentialUserRegistrationDetails - should show if mfa registered
- /reports/credentialUsageSummary for those using SSPR
-
Brian Stetson 41 Reputation points
2024-04-10T18:02:49.2333333+00:00 I can verify that this one is a direct replacement so far. It's almost a one for one replacement but is missing a few registration counts.
"https://graph.microsoft.com/beta/reports/getCredentialUsageSummary(period='D1')"
"https://graph.windows.net/myorganization/activities/getAuthenticationMethodUsageSummary(period='D1')?api-version=beta"
Azure AD Graph - Registration Microsoft Graph - Registration email email mobilePhone mobileCall mobileSMS officePhone officePhone alternateMobileCall alternateMobilePhone securityQuestion securityQuestion softwareOneTimePasscode appCode fido2SecurityKey hardwareOneTimePasscode temporaryAccessPass windowsHelloForBusiness microsoftAuthenticatorPasswordless Azure AD Graph - Resets Microsoft Graph - Resets email email mobilePhone mobileCall officePhone officePhone alternateMobilePhone securityQuestion securityQuestion microsoftAuthenticatorPush appNotification oneTimePasscode appCode sms mobileSMS
Sign in to comment
Sign in to answer