Where is the documentation that describes how to create different types of users?

Sam Wheat 406 Reputation points
2020-12-04T01:26:17.033+00:00

Overview of user accounts in Azure Active Directory B2C gives us three kinds of accounts:

Work account

  • A work account can access resources in a tenant, and with an administrator role, can manage tenants.

    Guest account

    • A guest account can only be a Microsoft account or an Azure Active Directory user that can be used to access applications or manage tenants.

      Consumer account

    • A consumer account is used by a user of the applications you've registered with Azure AD B2C. Consumer accounts can be created by:

Overview of user accounts in Azure Active Directory B2C also tells us how each can be created:

  • The user going through a sign-up user flow in an Azure AD B2C application
  • Using Microsoft Graph API
  • Using the Azure portal

Click on Manage Azure AD B2C user accounts with Microsoft Graph

Click on Create a User

Example 1 - of the three types of accounts described above, which one are we creating here?

Example 2 - of the three types of accounts described above, which one are we creating here?

the following table lists the properties that are required when you create a user.

What kind of user? Where is the table that shows what properties I need to set when creating a work account? A guest account? A consumer account?

For a B2C local account identity, only passwordProfile is required,

Is "B2C local account identity" a work account, a guest account, a consumer account, all the above, or none of the above?

See also.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
12,023 questions
Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,880 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,775 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Riley Carney 1 Reputation point
    2020-12-04T01:44:17+00:00

    Good Afternoon @Sam Wheat ,

    Great questions. I'm not too familiar with the account types, but from the documentation I'm guessing the following:
    Example 1 -
    Looks like you're either creating a work account or consumer accounts, work account typically or if it's a local B2C account/social identity, then a consumer account.

    "For a B2C local account identity, only passwordProfile is required, and passwordPolicy must be set to DisablePasswordExpiration. For a social identity, none of the properties are required."

    https://learn.microsoft.com/en-us/graph/api/user-post-users?view=graph-rest-1.0&tabs=csharp#request-body

    Example 2 -
    See above, under the request body there is information regarding what creates the specific account.
    With the Microsoft Graph, it appears you have three options:

    • Creating a work account
    • Creating a B2C local account identity (consumer account)
    • Creating a social identity (consumer account)

    With above, I believe B2C local account is a consumer account based on the following picture of what it is:
    identities.png

    0 comments No comments

  2. Sam Wheat 406 Reputation points
    2020-12-04T02:21:12.333+00:00

    My point is the index breaks the subject matter into three types. That's great it makes it easy to think about the different kinds of users.
    However the rest of the documentation makes no mention of the type distinctions.
    What are the practical differences? functional differences? What fields are required and what should the values be when creating a user of a certain type in code?

    I'm guessing the following:

    I am not anywhere as good a guesser as you unfortunately. I spent five days trying to figure out how to add a user to ms graph. This should have been two lines of code and twenty minutes. Please don't make us resort to guessing.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.