{ "opencollection": "1.0.0", "info": { "name": "Microsoft Graph Admin Admin.admin users.user.Actions API", "version": "1.0.0" }, "items": [ { "info": { "name": "users.user.Actions", "type": "folder" }, "items": [ { "info": { "name": "Microsoft Graph Invoke action assignLicense", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/assignLicense", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Add or remove licenses for the user to enable or disable their use of Microsoft cloud offerings that the company has licenses to. For example, an organization can have a Microsoft 365 Enterprise E3 subscription with 100 licenses, and this request assigns one of those licenses to a specific user. You can also enable and disable specific plans associated with a subscription. Direct user licensing method is an alternative to group-based licensing." }, { "info": { "name": "Microsoft Graph Invoke action changePassword", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/changePassword", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Update the signed-in user's password. Any user can update their password without belonging to any administrator role.\r\nTo update another user's password in either delegated or app-only scenarios, update the passwordProfile property of the user instead. See Example 3: Update the passwordProfile of a user and reset their password." }, { "info": { "name": "Microsoft Graph Invoke action checkMemberGroups", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/checkMemberGroups", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Check for membership in a specified list of group IDs, and return from that list the IDs of groups where a specified object is a member. The specified object can be of one of the following types:\r\n- user\r\n- group\r\n- service principal\r\n- organizational contact\r\n- device\r\n- directory object This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups" }, { "info": { "name": "Microsoft Graph Invoke action checkMemberObjects", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/checkMemberObjects", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Microsoft Graph Invoke action checkMemberObjects" }, { "info": { "name": "Microsoft Graph Invoke action exportPersonalData", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/exportPersonalData", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Submit a data policy operation request from a company administrator or an application to export an organizational user's data. This data includes the user's data stored in OneDrive and their activity reports. For more information about exporting data while complying with regulations, see Data Subject Requests and the GDPR and CCPA." }, { "info": { "name": "Microsoft Graph Invoke action findMeetingTimes", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/findMeetingTimes", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Suggest meeting times and locations based on organizer and attendee availability, and time or location constraints specified as parameters. If findMeetingTimes cannot return any meeting suggestions, the response would indicate a reason in the emptySuggestionsReason property.\r\nBased on this value, you can better adjust the parameters and call findMeetingTimes again. The algorithm used to suggest meeting times and locations undergoes fine-tuning from time to time. In scenarios like test environmen" }, { "info": { "name": "Microsoft Graph Invoke action getMailTips", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/getMailTips", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Get the MailTips of one or more recipients as available to the signed-in user. Note that by making a POST call to the getMailTips action, you can request specific types of MailTips to\r\nbe returned for more than one recipient at one time. The requested MailTips are returned in a mailTips collection." }, { "info": { "name": "Microsoft Graph Invoke action getMemberGroups", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/getMemberGroups", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead." }, { "info": { "name": "Microsoft Graph Invoke action getMemberObjects", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/getMemberObjects", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Return all IDs for the groups, administrative units, and directory roles that an object of one of the following types is a member of:\r\n- user\r\n- group\r\n- service principal\r\n- organizational contact\r\n- device\r\n- directory object This function is transitive. Only users and role-enabled groups can be members of directory roles." }, { "info": { "name": "Microsoft Graph Invoke action removeAllDevicesFromManagement", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/removeAllDevicesFromManagement", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ] }, "docs": "Retire all devices from management for this user" }, { "info": { "name": "Microsoft Graph Invoke action reprocessLicenseAssignment", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/reprocessLicenseAssignment", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ] }, "docs": "Reprocess all group-based license assignments for the user. To learn more about group-based licensing, see What is group-based licensing in Microsoft Entra ID. Also see Identify and resolve license assignment problems for a group in Microsoft Entra ID for more details." }, { "info": { "name": "Microsoft Graph Invoke action restore", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/restore", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ] }, "docs": "Restore a recently deleted application, group, servicePrincipal, administrative unit, or user object from deleted items. Restore a recently deleted directory object from deleted items. The following types are supported:\r\n- administrativeUnit\r\n- application\r\n- certificateBasedAuthPki\r\n- certificateAuthorityDetail\r\n- group\r\n- servicePrincipal\r\n- user If an item is accidentally deleted, you can fully restore the item. Additionally, restoring an application doesn't automatically restore the associa" }, { "info": { "name": "Microsoft Graph Invoke action retryServiceProvisioning", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/retryServiceProvisioning", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ] }, "docs": "Retry the provisioning of a user object in Microsoft Entra ID." }, { "info": { "name": "Microsoft Graph Invoke action revokeSignInSessions", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/revokeSignInSessions", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ] }, "docs": "Invalidates all the refresh tokens issued to applications for a user (and session cookies in a user's browser), by resetting the signInSessionsValidFromDateTime user property to the current date-time. Typically, this operation is performed (by the user or an administrator) if the user has a lost or stolen device. This operation prevents access to the organization's data through applications on the device by requiring the user to sign in again to all applications that they consented to previously" }, { "info": { "name": "Microsoft Graph Invoke action sendMail", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/sendMail", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Send the message specified in the request body using either JSON or MIME format. When using JSON format, you can include a file attachment in the same sendMail action call. When using MIME format: This method saves the message in the Sent Items folder. Alternatively, create a draft message to send later. To learn more about the steps involved in the backend before a mail is delivered to recipients, see here." }, { "info": { "name": "Microsoft Graph Invoke action translateExchangeIds", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/translateExchangeIds", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Translate identifiers of Outlook-related resources between formats." }, { "info": { "name": "Microsoft Graph Invoke action wipeManagedAppRegistrationsByDeviceTag", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/:user-id/wipeManagedAppRegistrationsByDeviceTag", "params": [ { "name": "user-id", "value": "", "type": "path", "description": "The unique identifier of user" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Issues a wipe operation on an app registration with specified device tag." }, { "info": { "name": "Microsoft Graph Invoke action getAvailableExtensionProperties", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/getAvailableExtensionProperties", "body": { "type": "json", "data": "{}" } }, "docs": "Return all directory extension definitions that are registered in a directory, including through multitenant apps. The following entities support extension properties:" }, { "info": { "name": "Microsoft Graph Invoke action getByIds", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/getByIds", "body": { "type": "json", "data": "{}" } }, "docs": "Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:" }, { "info": { "name": "Microsoft Graph Invoke action validateProperties", "type": "http" }, "http": { "method": "POST", "url": "https://graph.microsoft.com/v1.0/users/validateProperties", "body": { "type": "json", "data": "{}" } }, "docs": "Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:\r\n1. Validate the prefix and suffix naming policy\r\n2. Validate the custom ban" } ] } ], "bundled": true }