Azure Active Directory
Manage users, groups, and licenses in Microsoft Entra ID (Azure AD) via Microsoft Graph.
Connect it
In Keystile Automations → Connections → New connection, choose Azure Active Directory and sign in. Your AI tools and workflows then use it through Keystile; they never see the password or key.How connecting works.
Try it from your AI tool
Using Keystile, in Azure Active Directory: add or remove user license (Assigns or removes licenses for a user. Use addLicenses to add (include disabledPlans to disable specific service plans) and removeLicenses to remove by SkuId).What it can do (17 actions)
| Action | What it does | Changes data |
|---|---|---|
| Add Member to Group | Adds a user or group as a member of an Azure AD group. | Yes |
| Add or Remove User License | Assigns or removes licenses for a user. Use addLicenses to add (include disabledPlans to disable specific service plans) and removeLicenses to remove by SkuId. | |
| Create Group | Creates a new group in Azure Active Directory. | Yes |
| Create User | Creates a new user in Microsoft Entra ID. | Yes |
| Custom API Call | Make a custom API call to a specific endpoint | Yes |
| Delete Group | Deletes an Azure AD group by ID. | |
| Delete User | Deletes a user from Azure Active Directory. | |
| Get Enabled Users | Retrieves a single page of enabled users (accountEnabled eq true). | |
| Get Group by ID | Retrieves an Azure AD group by its object ID. | |
| Get Group Custom Attributes | Gets extension and custom attributes for an Azure AD group. Returns schema extensions and open extensions. | |
| Get User by ID | Retrieves an Azure AD user by object ID or user principal name. | |
| List Enabled Users | Lists all enabled users in the directory, following nextLink for pagination. | |
| List Group Members | Lists members of an Azure AD group. | |
| List Users | Lists users in the directory. Supports optional filter and top (page size). | |
| Reset Custom Attributes | Clears extension/custom attributes on a user or group. Provide the resource type and ID, and the extension property names to clear. | |
| Revoke Sign-in Session | Revokes all refresh tokens for the user, forcing them to sign in again. | |
| Update User | Updates an Azure AD user. Only provide fields you want to change. | Yes |
Start a workflow when… (3 triggers)
- New Deleted User — Triggers when a user is deleted from Microsoft Entra ID.
- New Group — Triggers when a new group is created in Microsoft Entra ID.
- New User — Triggers when a new user is created in Microsoft Entra ID.
How Keystile protects it
Every Azure Active Directory action is checked before it runs, whether it comes from an AI tool or a workflow. 5 of its actions change data; your rules, limits and budgets decide whether each is allowed, held for a person or stopped, and it all goes into the signed record.
Use Azure Active Directory with your AI assistant — safelyClaude, Cursor or ChatGPT do the work; Keystile checks every action first.
Get early access