API calls for Microsoft 365
The Microsoft 365 connector makes API calls to Microsoft Graph API to retrieve data.
Authentication token
The call uses the POST operation to retrieve an auth token used in other Graph API calls.
URI:https://login.microsoftonline.com/{tenant}/oauth2/v2.0/token
See Microsoft Graph docs for more information.
Users
The call uses the GET operation to retrieve information about M365 users. The call differs depending on how the Domains field is populated when adding the connector.
URI when populated with *: https://graph.microsoft.com/v1.0/users?$select=accountEnabled,assignedLicenses,displayName,givenName,id,mail,onPremisesImmutableId,onPremisesLastSyncDateTime,surname,userPrincipalName,userType,createdDateTime,country,department&$top=999
URI when populated with domains: https://graph.microsoft.com/v1.0/users?$select=accountEnabled,assignedLicenses,displayName,givenName,id,mail,onPremisesImmutableId,onPremisesLastSyncDateTime,surname,userPrincipalName,userType,createdDateTime,country,department&$top=999&$count=true&ConsistencyLevel=eventual&$filter=endswith(userPrincipalName,'domain1') OR endswith(userPrincipalName,'domains2') ... for all domains added
See Microsoft Graph docs for more information.
Subscribed SKU
The call uses the GET operation to retrieve information about a service SKU company is subscribed to.
URI:https://graph.microsoft.com/v1.0/subscribedSkus
See Microsoft Graph docs for more information.
User changes
The call uses the GET operation to retrieve newly created, updated, or deleted users without having to perform a full read of the entire user collection.
URI:https://graph.microsoft.com/v1.0/users/delta
See Microsoft Graph docs for more information.
Reports
The call uses the GET operation to retrieve information about applications activity and usage.
URI:https://graph.microsoft.com/v1.0/reports/
See Microsoft Graph docs for more information.