Microsoft Entra ID connector thinklet

Configure Microsoft Entra ID connector thinklets to take specific actions in your workflow.

Configure API credentials to connect Microsoft Graph API with the Nexthink platform. For detailed instructions, refer to the Entra ID integration documentation for Workflows.

Refer to the Permissions section in the Microsoft documentation to view the required authorizations.

Action: Get user UUID

Get user UUID retrieves a user Universally Unique Identifier (UUID).

The Microsoft Entra ID connector thinklet relies on the Get a User API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • Username: Active Directory username

• Outputs: View the outputs of the connector thinklet.

  • UUID (uuid): User ID

Action: Check if a user is in a group

Check if a user is in the group verifies whether a user belongs to the Entra ID group. If the system finds the user within the group, the Outputs field remains empty. If the user is absent from the group or you submit an unsupported query, the Outputs field produces either the Request_ResourceNotFound or Request_UnsupportedQuery error accordingly.

The Microsoft Entra ID connector thinklet relies on the List a user's direct memberships API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • Group UUID: Active Directory group ID

  • User UUID: Entra ID user UUID

• Outputs: View the outputs of the connector thinklet.

  • Error code (groupPresenceErrorCode): Error code

Action: Check if a device is member of a group

Check if a device is member of a group verifes whether a device belongs to the Entra ID group. If the system finds the user within the group, the Outputs field remains empty. If the user is absent from the group or you submit an unsupported query, the Outputs field produces either the Request_ResourceNotFound or Request_UnsupportedQuery error accordingly.

The Microsoft Entra ID connector thinklet relies on the List device memberships API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • Device object ID: Device Azure ID

  • Group UUID: Active Directory group ID

• Outputs: View the outputs of the connector thinklet.

  • Error code (groupPresenceErrorCode): Error code

Action: Add user to group

Add user to group adds a user to the Entra ID group.

The Microsoft Entra ID connector thinklet relies on the Add members API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • User UUID: User Azure ID

  • Group UUID: UUID of the Entra ID group to which you want to add the user

• Outputs: View the outputs of the connector thinklet.

Action: Remove a user from a group

Remove a user from a group removes the user from the Entra ID group.

The Microsoft Entra ID connector thinklet relies on the Remove member API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • User UUID: User Azure ID

  • Group UUID: UUID of the Entra ID group from which you want the user removed

• Outputs: View the outputs of the connector thinklet.

Action: Get user manager

Get user manager retrieves the user manager information.

The Microsoft Entra ID connector thinklet relies on the List manager API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • AD user name: Active Directory username

• Outputs: View the outputs of the connector thinklet.

  • Manager user UUID (ManagerUserUUID): Manager user UUID

  • Manager UPN (User Principal Name) (ManagerUPN): Manager User Principal Name (UPN)

  • Manager email address (ManagerEmailAddress): Manager email address

Action: Check user license

Check user license verifies whether a specific user has a particular license assigned in Azure.

The Microsoft Entra ID connector thinklet relies on the List licenseDetails API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • AD user name: Active Directory username

  • Software license SKU Part Number: skuPartNumber property of global workflow parameter SKU Part Number

• Outputs: View the outputs of the connector thinklet.

  • Software license SKU part number (outputSkuPartNumber): Software license SKU part number

  • SKU ID (skuId): SKU internal ID

Action: Get user details

Get user details retrieves user details such as job title, mobile phone number and office location.

The Microsoft Entra ID connector thinklet relies on the Get user API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • AD user name: Active Directory username

• Outputs: View the outputs of the connector thinklet.

  • User job title (UserJobTitle): User job title

  • User mobile phone (UserMobilePhone): User mobile phone

  • User office location (UserOfficeLocation): User office location

Action: Get device object ID

Get device object ID retrieves the device UUID.

The Microsoft Entra ID connector thinklet relies on the List devices API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • Device name: Active Directory device name

• Outputs: View the outputs of the connector thinklet.

  • Device object ID (DeviceObjectID): Device object ID

Action: Add device to the group

Add device to the group adds the device to the group.

The Microsoft Entra ID connector thinklet relies on the Add members API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • Device object ID: Entra ID device ID

  • Group UUID: UUID of the Entra ID group to which you want to add the device

• Outputs: View the outputs of the connector thinklet.

Action: Remove device from the group

Remove device from the group removes the device from the group.

The Microsoft Entra ID connector thinklet relies on the Remove member API endpoint provided by Microsoft Graph.

• Parameters: Configure the data used as parameters for this action. Hover over the tooltip icon for more information on how the parameter is mapped and what data is required.

  • Device object ID: Entra ID device ID

  • Group UUID: UUID of the Entra ID group from which you want to remove the device

Refer to the Configuring connector thinklets documentation for more information about connector thinklets.