MicrosoftGraphApplications

Use the Entra ID Applications integration (formerly Azure Active Directory Applications) to manage authorized applications.
This integration was integrated and tested with version v1.0 of Microsoft Graph Services API.

Configure Entra ID Applications in Cortex

Commands

You can execute these commands from the CLI, as part of an automation, or in a playbook.
After you successfully execute a command, a DBot message appears in the War Room with the command details.

msgraph-apps-auth-start

Run this command to start the authorization process and follow the instructions in the command results.

msgraph-apps-auth-complete

Run this command to complete the authorization process. Should be used after running the msgraph-apps-auth-start command.

msgraph-apps-auth-reset

Run this command if for some reason you need to rerun the authentication process.

msgraph-apps-auth-test

Tests connectivity to Microsoft.

msgraph-apps-service-principal-list

Retrieves a list of applications.

Base Command

msgraph-apps-service-principal-list

Input

Context Output

Command Example

!msgraph-apps-service-principal-list limit=1

Context Example

{
    "MSGraphApplication": {
        "accountEnabled": true,
        "addIns": [],
        "alternativeNames": [],
        "appDescription": null,
        "appDisplayName": "Common Data Service",
        "appId": "00000007-0000-0000-c000-000000000000",
        "appOwnerOrganizationId": ":app-owner-organization-id:",
        "appRoleAssignmentRequired": false,
        "appRoles": [],
        "applicationTemplateId": null,
        "createdDateTime": "2019-12-11T11:35:03Z",
        "deletedDateTime": null,
        "description": null,
        "displayName": "Common Data Service",
        "homepage": null,
        "id": ":id:",
        "info": {
            "logoUrl": null,
            "marketingUrl": null,
            "privacyStatementUrl": null,
            "supportUrl": null,
            "termsOfServiceUrl": null
        },
        "keyCredentials": [],
        "loginUrl": null,
        "logoutUrl": null,
        "notes": null,
        "notificationEmailAddresses": [],
        "oauth2PermissionScopes": [
            {
                "adminConsentDescription": "Allows the application to access Common Data Service acting as users in the organization.",
                "adminConsentDisplayName": "Access Common Data Service as organization users",
                "id": ":id:",
                "isEnabled": true,
                "type": "User",
                "userConsentDescription": "Allows the application to access Common Data Service as you.",
                "userConsentDisplayName": "Access Common Data Service as you",
                "value": "user_impersonation"
            }
        ],
        "passwordCredentials": [],
        "preferredSingleSignOnMode": null,
        "preferredTokenSigningKeyThumbprint": null,
        "replyUrls": [
            "https://admin.example.com/",
            "https://port.example..com/",
            "https://cloudredirector.example.com/"
        ],
        "resourceSpecificApplicationPermissions": [],
        "samlSingleSignOnSettings": null,
        "servicePrincipalNames": [
            "https://admin.example.com/",
            "https://port.example.com/",
            "https://cloudredirector.example.com/"
        ],
        "servicePrincipalType": "Application",
        "signInAudience": "AzureADMultipleOrgs",
        "tags": [],
        "tokenEncryptionKeyId": null,
        "verifiedPublisher": {
            "addedDateTime": null,
            "displayName": null,
            "verifiedPublisherId": null
        }
    }
}

Human Readable Output

Available services (applications)

id	appId	appDisplayName	accountEnabled
:id:	00000007-0000-0000-c000-000000000000	Common Data Service	true

msgraph-apps-service-principal-remove

Removes an application from the directory.

Base Command

msgraph-apps-service-principal-remove

Input

Context Output

There is no context output for this command.

Command Example

!msgraph-apps-service-principal-remove id=ID_TEST

Human Readable Output

Service ID_TEST was deleted.

msgraph-apps-service-principal-get

Retrieve the properties and relationships of a servicePrincipal object.

Base Command

msgraph-apps-service-principal-get

Input

Context Output

Command Example

!msgraph-apps-service-principal-get id=TEST

Context Example

{'@odata.context': 'https://graph.microsoft.com/v1.0/$metadata#servicePrincipals/$entity',
                                  'id': 'XXXX', 'deletedDateTime': None, 'accountEnabled': True, 'alternativeNames': [],
                                  'appDisplayName': 'Test', 'appDescription': None,
                                  'appId': 'XXXX', 'applicationTemplateId': None, 'appOwnerOrganizationId': 'XXXX',
                                  'appRoleAssignmentRequired': False, 'createdDateTime': '', 'description': None,
                                  'disabledByMicrosoftStatus': None, 'displayName': 'Test', 'homepage': None, 'loginUrl': None,
                                  'logoutUrl': None, 'notes': None, 'notificationEmailAddresses': [],
                                  'preferredSingleSignOnMode': None, 'preferredTokenSigningKeyThumbprint': None, 'replyUrls': [],
                                  'servicePrincipalNames': ['XXXX'], 'servicePrincipalType': 'Application',
                                  'signInAudience': 'AzureADMyOrg',
                                  'tags': ['HideApp', 'WindowsAzureActiveDirectoryIntegratedApp'], 'tokenEncryptionKeyId': None,
                                  'samlSingleSignOnSettings': None, 'addIns': [], 'appRoles': [],
                                  'info': {'logoUrl': None, 'marketingUrl': None, 'privacyStatementUrl': None, 'supportUrl': None,
                                           'termsOfServiceUrl': None}, 'keyCredentials': [], 'oauth2PermissionScopes': [],
                                  'passwordCredentials': [], 'resourceSpecificApplicationPermissions': [],
                                  'verifiedPublisher': {'displayName': None, 'verifiedPublisherId': None, 'addedDateTime': None}}

msgraph-apps-service-principal-update

Update the properties of servicePrincipal object.

Base Command

msgraph-apps-service-principal-update

Input

Context Output

There is no context output for this command.

Command Example

!msgraph-apps-service-principal-update id=TEST account_enabled=true

Human Readable Output

Service TEST was updated successfully.

msgraph-apps-service-principal-password-add

Add a strong password or secret to a service principal.

Base Command

msgraph-apps-service-principal-password-add

Input

Context Output

Command Example

!msgraph-apps-service-principal-password-add id=TEST display_name='TEST'

Context Example

{'@odata.context': '',
 'customKeyIdentifier': None,
  'displayName': 'TEST',
   'endDateTime': '',
    'hint': '', 
    'keyId': '',
     'secretText': '',
     'startDateTime': ''}

Human Readable Output

A password was added to application TEST successfully.

msgraph-apps-service-principal-password-remove

Remove a password from a service principal.

Base Command

msgraph-apps-service-principal-password-remove

Input

Context Output

There is no context output for this command.

Command Example

!msgraph-apps-service-principal-password-remove id=TEST key_id=KEY_TEST

Human Readable Output

The password of the unique identifier KEY_TEST was removed successfully.

msgraph-apps-service-principal-unlock-configuration

Unlock configuration of a service principal.

Base Command

msgraph-apps-service-principal-unlock-configuration

Input

Context Output

There is no context output for this command.

Command Example

!msgraph-apps-service-principal-unlock-configuration id=TEST

Human Readable Output

The configuration of TEST was unlocked successfully.

msgraph-apps-service-principal-lock-configuration

Lock configuration of a service principal.

Base Command

msgraph-apps-service-principal-lock-configuration

Input

Context Output

There is no context output for this command.

Command Example

!msgraph-apps-service-principal-lock-configuration id=TEST

Human Readable Output

The configuration of TEST was locked successfully.