Help on APIs to fetch users info

Question

Our users are synced from on-premises AD to Entra ID. I want to fetch only those accounts in Entra, using APIs, where on-premises sync is enabled = true (i.e., users that are created on-prem and synchronized to Entra).

I do not want to include any mail contacts, distribution lists, or mail-enabled security groups that are synced from on-prem. I only need to retrieve user accounts. please guide me.

Answer 1

Use Microsoft Graph /users and filter for synced accounts: GET https://graph.microsoft.com/v1.0/users?$filter=onPremisesSyncEnabled eq true&$select=id,displayName,userPrincipalName,onPremisesSyncEnabled — this returns user objects only (not contacts/groups), and limits results to accounts currently synced from on-prem.