How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Need help?

Contact us
Microsoft Entra ID (formerly Azure AD)

Microsoft Entra ID Directory Objects API

Generic directory object operations - check member groups and objects, resolve objects by id, validate properties - plus the tenant public key infrastructure.

Documentation Provider Profile APIs.io OpenAPI GitHub

Microsoft Entra ID Directory Objects API is one of 10 APIs that Microsoft Entra ID (formerly Azure AD) publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Directory. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and a changelog.

This API exposes 31 operations across 20 paths, organized into 4 resource areas, and defines 15 schemas. It is described by OpenAPI 3.0.4, at version v1.0.

Requests are made against a single base URL, https://graph.microsoft.com/v1.0/.

31 operations 20 paths 15 schemas 4 DELETE11 GET4 PATCH12 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.4
API Version
v1.0
Base URL
https://graph.microsoft.com/v1.0
Authentication
OAuth 2.0
Resource Areas
4

Authentication & Security 1

Microsoft Entra ID Directory Objects API declares 1 security scheme for authenticating requests. It supports OAuth 2.0 (azureaadv2) using the authorizationCode flow. By default, every request must be authenticated.

Paths & Operations 31

Across 20 paths, the API surfaces 31 operations — 4 DELETE, 11 GET, 4 PATCH, 12 POST. They span 4 resource areas: directory.publicKeyInfrastructureRoot, directoryObjects.directoryObject, directoryObjects.directoryObject.Actions, directoryObjects.directoryObject.Functions. Each is listed below with its method, path, parameters, and response codes.

directory.publicKeyInfrastructureRoot 16
GET
/directory/publicKeyInfrastructure
Get publicKeyInfrastructure from directory
directory_GetPublicKeyInfrastructure 2 params → 2XXdefault
PATCH
/directory/publicKeyInfrastructure
Update the navigation property publicKeyInfrastructure in directory
directory_UpdatePublicKeyInfrastructure body → 2XXdefault
DELETE
/directory/publicKeyInfrastructure
Delete navigation property publicKeyInfrastructure for directory
directory_DeletePublicKeyInfrastructure 1 param → 2XXdefault
GET
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations
List certificateBasedAuthPki objects
directory.publicKeyInfrastructure_ListCertificateBasedAuthConfiguration 8 params → 2XXdefault
POST
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations
Create certificateBasedAuthPki
directory.publicKeyInfrastructure_CreateCertificateBasedAuthConfiguration body → 2XXdefault
GET
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}
Get certificateBasedAuthPki
directory.publicKeyInfrastructure_GetCertificateBasedAuthConfiguration 3 params → 2XXdefault
PATCH
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}
Update certificateBasedAuthPki
directory.publicKeyInfrastructure_UpdateCertificateBasedAuthConfiguration 1 param body → 2XXdefault
DELETE
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}
Delete certificateBasedAuthPki
directory.publicKeyInfrastructure_DeleteCertificateBasedAuthConfiguration 2 params → 2XXdefault
GET
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities
List certificateAuthorityDetail objects
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration_ListCertificateAuthority 9 params → 2XXdefault
POST
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities
Create certificateAuthorityDetail
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration_CreateCertificateAuthority 1 param body → 2XXdefault
GET
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/{certificateAuthorityDetail-id}
Get certificateAuthorities from directory
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration_GetCertificateAuthority 4 params → 2XXdefault
PATCH
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/{certificateAuthorityDetail-id}
Update certificateAuthorityDetail
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration_UpdateCertificateAuthority 2 params body → 2XXdefault
DELETE
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/{certificateAuthorityDetail-id}
Delete certificateAuthorityDetail
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration_DeleteCertificateAuthority 3 params → 2XXdefault
GET
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/certificateAuthorities/$count
Get the number of the resource
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration.certificateAuthority_GetCount 3 params → 2XXdefault
POST
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/{certificateBasedAuthPki-id}/microsoft.graph.upload
Invoke action upload
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration_upload 1 param body → 2XXdefault
GET
/directory/publicKeyInfrastructure/certificateBasedAuthConfigurations/$count
Get the number of the resource
directory.publicKeyInfrastructure.certificateBasedAuthConfiguration_GetCount 2 params → 2XXdefault
directoryObjects.directoryObject 6
GET
/directoryObjects
Get entities from directoryObjects
directoryObject_ListDirectoryObject 9 params → 2XXdefault
POST
/directoryObjects
Add new entity to directoryObjects
directoryObject_CreateDirectoryObject body → 2XXdefault
GET
/directoryObjects/{directoryObject-id}
Get directoryObject
directoryObject_GetDirectoryObject 3 params → 2XXdefault
PATCH
/directoryObjects/{directoryObject-id}
Update entity in directoryObjects
directoryObject_UpdateDirectoryObject 1 param body → 2XXdefault
DELETE
/directoryObjects/{directoryObject-id}
Delete directoryObject
directoryObject_DeleteDirectoryObject 2 params → 2XXdefault
GET
/directoryObjects/$count
Get the number of the resource
directoryObject_GetCount 3 params → 2XXdefault
directoryObjects.directoryObject.Actions 8
POST
/directoryObjects/{directoryObject-id}/microsoft.graph.checkMemberGroups
Invoke action checkMemberGroups
directoryObject_checkMemberGroup 1 param body → 2XXdefault
POST
/directoryObjects/{directoryObject-id}/microsoft.graph.checkMemberObjects
Invoke action checkMemberObjects
directoryObject_checkMemberObject 1 param body → 2XXdefault
POST
/directoryObjects/{directoryObject-id}/microsoft.graph.getMemberGroups
Invoke action getMemberGroups
directoryObject_getMemberGroup 1 param body → 2XXdefault
POST
/directoryObjects/{directoryObject-id}/microsoft.graph.getMemberObjects
Invoke action getMemberObjects
directoryObject_getMemberObject 1 param body → 2XXdefault
POST
/directoryObjects/{directoryObject-id}/microsoft.graph.restore
Invoke action restore
directoryObject_restore 1 param → 2XXdefault
POST
/directoryObjects/microsoft.graph.getAvailableExtensionProperties
Invoke action getAvailableExtensionProperties
directoryObject_getAvailableExtensionProperty body → 2XXdefault
POST
/directoryObjects/microsoft.graph.getByIds
Invoke action getByIds
directoryObject_getGraphBPreId body → 2XXdefault
POST
/directoryObjects/microsoft.graph.validateProperties
Invoke action validateProperties
directoryObject_validateProperty body → 2XXdefault
directoryObjects.directoryObject.Functions 1
GET
/directoryObjects/microsoft.graph.delta()
Invoke function delta
directoryObject_delta 8 params → 2XXdefault

Schemas 15

The contract defines 15 schemas that model the data the API accepts and returns. The most detailed are microsoft.graph.ODataErrors.MainError (5 properties), microsoft.graph.ODataErrors.ErrorDetails (3 properties), microsoft.graph.directoryObjectCollectionResponse (2 properties), microsoft.graph.certificateAuthorityDetailCollectionResponse (2 properties). Each schema is shown below with its type and property counts.

microsoft.graph.publicKeyInfrastructureRoot
microsoft.graph.certificateBasedAuthPki
microsoft.graph.certificateAuthorityDetail
microsoft.graph.directoryObject
microsoft.graph.extensionProperty
microsoft.graph.entity
object
1 property
microsoft.graph.certificateAuthorityType
string
microsoft.graph.ODataErrors.ODataError
object
1 property 1 required
microsoft.graph.certificateBasedAuthPkiCollectionResponse
object
2 properties
microsoft.graph.certificateAuthorityDetailCollectionResponse
object
2 properties
ODataCountResponse
integer
microsoft.graph.directoryObjectCollectionResponse
object
2 properties
microsoft.graph.ODataErrors.MainError
object
5 properties 2 required
microsoft.graph.ODataErrors.ErrorDetails
object
3 properties 2 required
microsoft.graph.ODataErrors.InnerError
object
The structure of this object is service-specific

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

azure-ad-graph-directoryobjects-openapi.yml Raw ↑

Other APIs Microsoft Entra ID (formerly Azure AD) publishes across the network.

Azure AD B2C API
AE Profile APIs.io
Azure Active Directory Applications API
AE Profile APIs.io
Azure Active Directory Directory API
AE Profile APIs.io
Azure Active Directory Groups API
AE Profile APIs.io
Azure Active Directory Me API
AE Profile APIs.io
Azure Active Directory Users API
AE Profile APIs.io
Microsoft Entra ID Sign-Ins and Policies API
AE Profile APIs.io
Microsoft Entra ID Governance API
AE Profile APIs.io
Microsoft Entra ID Change Notifications API
AE Profile APIs.io
#Directory
← Back to M APIs
API Details
ID
azure-ad:azure-ad-directory-objects-api
Base URL
https://graph.microsoft.com/v1.0
Docs
https://learn.microsoft.com/en-us/graph/api/resources/directoryobject
Provider
Microsoft Entra ID (formerly Azure AD)
APIs.io →  GitHub →
Explore more
All APIs Providers APIs.io Network
Work with this as data

Every API here is available over the API and to AI agents over MCP. APIs is not yet its own endpoint on the v1 API. Reach this content through network search and the tag graph, or the MCP server below.

Installs https://mcp.apievangelist.com/mcp in Claude, Cursor, VS Code and the rest — one button, every client.

MCP tools for apis
4 tools reach this content
  • search_api_evangelistSearch every content type across the network at once.
  • find_relatedThe shared-tag relevance graph — what else covers this.
  • get_tagEverything one tag labels, across all content types.
  • guide_topicPRO — a curated bundle for a topic: area, guidance, rules, papers, stories, services.
All tools & prompts
Call it yourself
curl for this page
Search the network for this 
curl "https://api.apievangelist.com/v1/search?q=azure-ad-directory-objects-api&limit=10"
Everything under a tag 
curl "https://api.apievangelist.com/v1/tags/azure-ad-directory-objects-api"

Discovery needs no key. Full bodies and the synthesis endpoints are Pro.

Get an API key

Free tier, no email required. Sign in with whichever identity you already have.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have. Your account

Where this information came from

This is an independent, third-party profile of Microsoft Entra ID Directory Objects API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.