category: Authentication & Identity Management provider: Microsoft sectionorder: - Connect commonfields: id: Microsoft Graph Groups version: -1 configuration: - defaultvalue: https://graph.microsoft.com display: Server URL name: url required: true type: 0 section: Connect - name: creds_auth_id type: 9 displaypassword: ID or Client ID hiddenusername: true section: Connect required: false - name: creds_tenant_id type: 9 displaypassword: Token or Tenant ID hiddenusername: true section: Connect required: false - name: _auth_id type: 0 section: Connect display: ID hidden: true required: false - display: Token name: _tenant_id type: 0 section: Connect hidden: true required: false - name: credentials type: 9 section: Connect displaypassword: Key or Client Secret hiddenusername: true required: false - additionalinfo: Used for certificate authentication. As appears in the "Certificates & secrets" page of the app. display: Certificate Thumbprint name: certificate_thumbprint type: 4 section: Connect hidden: true required: false - displaypassword: Certificate Thumbprint additionalinfo: Used for certificate authentication. As appears in the "Certificates & secrets" page of the app. name: credentials_certificate_thumbprint hiddenusername: true type: 9 section: Connect required: false - additionalinfo: Used for certificate authentication. The private key of the registered certificate. name: private_key type: 14 section: Connect display: Private Key required: false - display: Use Azure Managed Identities name: use_managed_identities type: 8 section: Connect additionalinfo: Relevant only if the integration is running on Azure VM. If selected, authenticates based on the value provided for the Azure Managed Identities Client ID field. If no value is provided for the Azure Managed Identities Client ID field, authenticates based on the System Assigned Managed Identity. For additional information, see the Help tab. required: false - name: managed_identities_client_id type: 9 section: Connect additionalinfo: The Managed Identities client ID for authentication - relevant only if the integration is running on Azure VM. displaypassword: Azure Managed Identities Client ID hiddenusername: true required: false - display: Trust any certificate (not secure) name: insecure type: 8 section: Connect required: false - display: Use system proxy settings name: proxy type: 8 section: Connect required: false - additionalinfo: Select this checkbox if you are using a self-deployed Azure application. display: Use a self-deployed Azure Application name: self_deployed type: 8 section: Connect required: false - display: Key (received from the admin consent - see Detailed Instructions (?) (Deprecated) name: enc_key type: 4 section: Connect hidden: true additionalinfo: Use the "Key" parameter instead. required: false - display: ID (received from the admin consent - see Detailed Instructions (?) (Deprecated) name: auth_id type: 4 section: Connect hidden: true additionalinfo: Use the "ID" parameter instead required: false - display: Token (received from the admin consent - see Detailed Instructions (?) (Deprecated) section) name: tenant_id type: 4 section: Connect hidden: true additionalinfo: Use the "Token" parameter instead. required: false - display: Suppress Errors for Non Found Groups name: handle_error defaultvalue: 'true' type: 8 section: Connect required: false - display: Application redirect URI (for Authorization Code flow mode) name: redirect_uri type: 0 section: Connect required: false - name: creds_auth_code type: 9 section: Connect displaypassword: Authorization code (for Authorization Code flow mode - received from the authorization step. see Detailed Instructions) hiddenusername: true required: false - display: Authorization code (for Authorization Code flow mode - received from the authorization step. see Detailed Instructions (?) section) name: auth_code type: 4 hidden: true section: Connect required: false description: Entra ID Groups integration (formely Azure Active Directory Groups) enables you to create and manage different types of groups and group functionality according to your requirements. display: Entra ID Groups name: Microsoft Graph Groups script: commands: - arguments: - description: 'Sorts groups in an organization by the field values. For example, displayName.' name: order_by - description: The URL to the next results page. name: next_link - defaultValue: '100' description: Sets the page size of the results. name: top - description: 'Filters group results. For example, startswith(displayName,''J''), groupTypes/any(c:c+eq+''Unified'').' name: filter description: Provides a list of groups. name: msgraph-groups-list-groups outputs: - contextPath: MSGraphGroups.Classification description: A classification for the group (such as low, medium or high business impact). type: String - contextPath: MSGraphGroups.CreatedDateTime description: The timestamp when the group was created. type: String - contextPath: MSGraphGroups.DeletedDateTime description: The timestamp when the group was deleted. type: String - contextPath: MSGraphGroups.Description description: An optional description for the group. type: String - contextPath: MSGraphGroups.GroupTypes description: |- Specifies the group type and its membership. If the group collection contains a Unified value, the group is an Office 365 group; otherwise it's a security group. If the collection includes DynamicMembership, the group has dynamic membership; otherwise, membership is static. type: String - contextPath: MSGraphGroups.ID description: The unique identifier for the group. type: String - contextPath: MSGraphGroup.IsAssignableToRole description: Whether the group assigned to a specific role. type: String - contextPath: MSGraphGroup.Mail description: The SMTP address for the group. For example, "serviceadmins@contoso.onmicrosoft.com". type: String - contextPath: MSGraphGroup.MailEnabled description: Specifies whether the group is mail-enabled. type: Boolean - contextPath: MSGraphGroup.MailNickname description: The mail alias for the group, which is unique in the organization. type: String - contextPath: MSGraphGroup.OnPremisesDomainName description: Contains the on-premises domain FQDN. Also called dnsDomainName, which is synchronized from the on-premises directory. type: String - contextPath: MSGraphGroup.OnPremisesLastSyncDateTime description: 'Indicates the last time at which the group was synced with the on-premises directory. The Timestamp type represents date and time information using ISO 8601 format in UTC time. For example, midnight UTC on Jan 1, 2019 is ''2019-01-01T00:00:00Z''.' type: String - contextPath: MSGraphGroup.OnPremisesSyncEnabled description: | Whether this group is synced from an on-premises directory (true). This group was originally synced from an on-premises directory but is no longer synced (false). Null if this object has never been synced from an on-premises directory (default). type: String - contextPath: MSGraphGroup.ProxyAddresses description: 'Email addresses for the group that directs to the same group mailbox. For example: ["SMTP: example@demisto.com", "smtp: example@demisto.com"].' type: String - contextPath: MSGraphGroup.RenewedDateTime description: 'Timestamp of when the group was last renewed, which represents the time and date information using ISO 8601 format. Always in UTC time. For example, midnight UTC on Jan 1, 2019 is ''2019-01-01T00:00:00Z''.' type: String - contextPath: MSGraphGroup.SecurityEnabled description: Specifies whether the group is a security group. type: Boolean - contextPath: MSGraphGroup.Visibility description: 'Specifies the visibility of an Office 365 group. Can be: "Private", "Public", or "Hiddenmembership". Blank values are treated as public.' type: String - contextPath: MSGraphGroupsNextLink.GroupsNextLink description: The URL of the next results page. type: String - arguments: - description: The ID of the group. name: group_id required: true description: Returns details of a group. name: msgraph-groups-get-group outputs: - contextPath: MSGraphGroups.Classification description: A classification for the group (such as low, medium or high business impact). type: String - contextPath: MSGraphGroups.CreatedDateTime description: The timestamp when the group was created. type: String - contextPath: MSGraphGroups.DeletedDateTime description: The timestamp when the group was deleted. type: String - contextPath: MSGraphGroups.Description description: An optional description for the group. type: String - contextPath: MSGraphGroups.GroupTypes description: |- Specifies the group type and its membership. If the group collection contains a Unified value, the group is an Office 365 group; otherwise it's a security group. If the collection includes DynamicMembership, the group has dynamic membership; otherwise, membership is static. type: String - contextPath: MSGraphGroups.ID description: The unique identifier for the group. type: String - contextPath: MSGraphGroup.IsAssignableToRole description: Whether the group assigned to a specific role. type: String - contextPath: MSGraphGroup.Mail description: The SMTP address for the group. For example, "serviceadmins@contoso.onmicrosoft.com". type: String - contextPath: MSGraphGroup.MailEnabled description: Specifies whether the group is mail-enabled. type: Boolean - contextPath: MSGraphGroup.MailNickname description: The mail alias for the group, unique in the organization. type: String - contextPath: MSGraphGroup.OnPremisesDomainName description: Contains the on-premises domain FQDN. Also called dnsDomainName, which is synchronized from the on-premises directory. type: String - contextPath: MSGraphGroup.OnPremisesLastSyncDateTime description: 'Indicates the last time at which the group was synced with the on-premises directory.The Timestamp type represents date and time information using ISO 8601 format in UTC time. For example, midnight UTC on Jan 1, 2019 is ''2019-01-01T00:00:00Z''.' type: String - contextPath: MSGraphGroup.OnPremisesSyncEnabled description: | Whether the group is synced from an on-premises directory (true). This group was originally synced from an on-premises directory but is no longer synced (false). Null if this object has never been synced from an on-premises directory (default). type: String - contextPath: MSGraphGroup.ProxyAddresses description: 'Email addresses for the group that directs to the same group mailbox. For example: ["SMTP: example@demisto.com", "smtp: example@demisto.com"].' type: String - contextPath: MSGraphGroup.RenewedDateTime description: 'The timestamp of when the group was last renewed. This cannot be modified directly and is only updated via the renew service action. The Timestamp type represents date and time information using ISO 8601 format in UTC time. For example, midnight UTC on Jan 1, 2019 is ''2019-01-01T00:00:00Z''.' type: String - contextPath: MSGraphGroup.SecurityEnabled description: Specifies whether the group is a security group. type: Boolean - contextPath: MSGraphGroup.Visibility description: 'Specifies the visibility of an Office 365 group. Possible values are: Private, Public, or Hiddenmembership. Blank values are treated as public.' type: String - arguments: - description: The display name of the group. name: display_name required: true - auto: PREDEFINED description: Set to true for mail-enabled groups. False for groups without an email. name: mail_enabled predefined: - 'false' - 'true' - description: The mail alias for the group. name: mail_nickname required: true - auto: PREDEFINED description: Set to true for security groups. False for non security groups (regular groups). name: security_enabled predefined: - 'false' - 'true' required: true description: Create a group. name: msgraph-groups-create-group outputs: - contextPath: MSGraphGroups.Classification description: A classification for the group (such as low, medium or high business impact). type: String - contextPath: MSGraphGroups.CreatedDateTime description: The timestamp when the group was created. type: String - contextPath: MSGraphGroups.DeletedDateTime description: The timestamp when the group was deleted. type: String - contextPath: MSGraphGroups.Description description: An optional description for the group. type: String - contextPath: MSGraphGroups.GroupTypes description: |- Specifies the group type and its membership. If the group collection contains a Unified value, the group is an Office 365 group; otherwise it's a security group. If the group collection includes DynamicMembership, the group has dynamic membership; otherwise, membership is static. type: String - contextPath: MSGraphGroups.ID description: The unique identifier for the group. type: String - contextPath: MSGraphGroup.IsAssignableToRole description: Whether the group is assigned to a specific role. type: String - contextPath: MSGraphGroup.Mail description: The SMTP address for the group. For example, "serviceadmins@contoso.onmicrosoft.com". type: String - contextPath: MSGraphGroup.MailEnabled description: Specifies whether the group is mail-enabled. type: Boolean - contextPath: MSGraphGroup.MailNickname description: The mail alias for the group, unique in the organization. type: String - contextPath: MSGraphGroup.OnPremisesDomainName description: Contains the on-premises domain FQDN. Also called dnsDomainName, which is synchronized from the on-premises directory. type: String - contextPath: MSGraphGroup.OnPremisesLastSyncDateTime description: 'Indicates the last time at which the group was synced with the on-premises directory.The Timestamp type represents date and time information using ISO 8601 format in UTC time. For example, midnight UTC on Jan 1, 2019 is ''2019-01-01T00:00:00Z''.' type: String - contextPath: MSGraphGroup.OnPremisesSyncEnabled description: | Whether this group is synced from an on-premises directory (true). This group was originally synced from an on-premises directory but is no longer synced (false). Null if this object has never been synced from an on-premises directory (default). type: String - contextPath: MSGraphGroup.ProxyAddresses description: 'Email addresses for the group that directs to the same group mailbox. For example, ["SMTP: example@demisto.com", "smtp: example@demisto.com"].' type: String - contextPath: MSGraphGroup.RenewedDateTime description: 'Timestamp of when the group was last renewed. This cannot be modified directly and is only updated via the renew service action. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 would look like this: ''2014-01-01T00:00:00Z''.' type: String - contextPath: MSGraphGroup.SecurityEnabled description: Specifies whether the group is a security group. type: Boolean - contextPath: MSGraphGroup.Visibility description: 'Specifies the visibility of an Office 365 group. Possible values are: Private, Public, or Hiddenmembership; blank values are treated as public.' type: String - arguments: - description: The group ID. name: group_id required: true description: Deletes a group. name: msgraph-groups-delete-group outputs: - contextPath: MSGraphGroups.ID description: The unique identifier for the group. type: String - contextPath: MSGraphGroup.Deleted description: Specifies whether the group was deleted. type: Boolean - arguments: - description: The group ID. name: group_id required: true - description: The URL for the next results page. name: next_link - defaultValue: '100' description: Sets the page size of results. name: top - description: 'Filters members results. For example, startswith(displayName,''user'').' name: filter - description: Retrieves the total count of matching resources. name: count auto: PREDEFINED predefined: - 'true' description: Lists group members. name: msgraph-groups-list-members outputs: - contextPath: MSGraphGroups.Members.BussinessPhones description: The telephone numbers for the user. type: String - contextPath: MSGraphGroups.Members.GivenName description: The given name (first name) of the user. type: String - contextPath: MSGraphGroups.Members.MobilePhone description: The primary mobile telephone number for the user. type: String - contextPath: MSGraphGroups.Members.DisplayName description: |- The name displayed in the address book for the user. Usually the combination of the user's first name, middle initial and last name. type: String - contextPath: MSGraphGroups.Members.UserPrincipalName description: |- The user principal name (UPN) of the user. The UPN is an Internet-style login name for the user based on the Internet standard RFC 822. By convention, this should map to the user's email name. The general format is alias@domain, where the domain must be present in the tenant’s collection of verified domains. type: Unknown - contextPath: MSGraphGroups.Members.OfficeLocation description: The office location in the user's place of business. type: String - contextPath: MSGraphGroups.Members.Mail description: The SMTP address for the user. For example, "jeff@contoso.onmicrosoft.com". type: String - contextPath: MSGraphGroups.Members.PreferredLanguage description: The preferred language for the user. Should follow ISO 639-1 Code. For example, "en-US". type: String - contextPath: MSGraphGroups.Members.Surname description: The user's surname (family name or last name). type: String - contextPath: MSGraphGroups.Members.JobTitle description: The user’s job title. type: String - contextPath: MSGraphGroups.Members.ID description: The unique identifier for the user. type: String - contextPath: MSGraphGroups.MembersNextLink description: The URL to the next results page. type: String - arguments: - description: The group ID. name: group_id required: true - description: The user ID. name: user_id required: true description: Add a member to a group. name: msgraph-groups-add-member - arguments: - description: The group ID. name: group_id required: true - description: The user ID. name: user_id required: true description: Removes a member from a group. name: msgraph-groups-remove-member - description: Generate the login url used for Authorization code flow. name: msgraph-groups-generate-login-url arguments: [] - description: Run this command if for some reason you need to rerun the authentication process. execution: false name: msgraph-groups-auth-reset arguments: [] dockerimage: demisto/crypto:1.0.0.10120494 runonce: false script: '-' subtype: python3 type: python tests: - Microsoft Graph Groups - Test fromversion: 5.0.0