https://graph.microsoft.com/v1.0/$metadata#applications/$entity

Create a new group. It can be a Microsoft 365 group, dynamic group, or security group.

Create a subscription to receive notifications when changes occur in the specified object.

https://graph.microsoft.com/v1.0/$metadata#subscriptions/$entity

https://graph.microsoft.com/v1.0/$metadata#users/$entity

Product Marketing Manager

Delete all webhooks that point to a flow in this instance.

Read properties of an application object.

https://graph.microsoft.com/v1.0/$metadata#groups/$entity

Read properties of a subscription object.

Read properties and relationships of the User object.

Retail Manager

Retrieve the list of applications in the organization.

https://graph.microsoft.com/v1.0/$metadata#applications

Track changes in an object and its children over time.

https://graph.microsoft.com/v1.0/$metadata#users

https://graph.microsoft.com/v1.0/$metadata#groups

Get the direct members of this group from the members navigation property.

https://graph.microsoft.com/v1.0/$metadata#directoryObjects

https://graph.microsoft.com/v1.0/$metadata#subscriptions

Send raw HTTP request to Microsoft Entra ID.

Remove a member from a Microsoft 365 group or a security group through the members navigation property.

Updates a subscription expiration time for renewal and/or updates the notificationUrl for delivery.

Create a new application if it doesn't exist, or update the properties of an existing application.

Create a new group if it doesn't exist, or update the properties of an existing group.

This authentication method may be used when an App requires granting admin consent to API permissions, in addition to authorizing the integration with the App's configured client credentials.

The Microsoft Azure Active Directory component authenticates requests through the [Microsoft Graph API](https://docs.microsoft.com/en-us/graph/use-the-api).

### Creating an App Registration

To configure OAuth 2.0 you must first create an App through Active Directory in the [Microsoft Entra Admin Center](https://entra.microsoft.com/#home) or [Microsoft Azure Portal](https://portal.azure.com/#home).

1. Navigate to **App Registrations**
2. When creating the application you will be prompted to select **Supported account types**.
3. Select **Accounts in any organizational directory (Any Azure AD directory - Multitenant)**.
4. Navigate to **Redirect URI** and add the **Web** platform. Now enter the redirect URI as <OauthCallbackUrl />.
5. Select **Register** to complete.
6. In the App, navigate to **Certificates & Secrets** and select **New client secret**. Copy/save the **Value** for use in the connection configuration of your integration (the value will not be shown again).
7. Next, navigate to the **Overview** section and copy the **Application (client) ID**
8. Navigate to the **API Permissions** section to assign the proper permissions for the integration. Select **Add Permission**, select all permissions that are required for your desired integration
   and save these values for later. A full list of scopes can be found on
   the [Microsoft Graph API documentation](https://learn.microsoft.com/en-us/graph/permissions-reference) 1. Recommended scopes for Active Directory can be found in Microsoft Graph > Delegated permissions: 1. `Group.ReadWrite.All GroupMember.ReadWrite.All Application.ReadWrite.All User.Read.All offline_access`

### Configuring the Integration

Supply the following values to the **OAuth 2.0 Authorization Code** connection:

- **Client ID** enter the **Application (client) ID**
- **Client Secret** enter the **Value** provided (Do not use **Secret ID**)
- Provide the assigned API permissions as **Scopes** you assigned to your App. The default value will be set to the following:
  - Default example: `Group.ReadWrite.All GroupMember.ReadWrite.All Application.ReadWrite.All User.Read.All offline_access`
- If you didn't select Multitenant when creating the App, you will need to replace the **Authorize URL** and **Token URL** with ones specific to your tenant.


Microsoft Entra ID (Formerly Azure Active Directory) is a cloud-based identity and access management service from Microsoft that helps employees sign in and access resources. Use the Microsoft Entra ID component to manage your users, groups, and applications.

Microsoft Entra ID (Formerly Azure Active Directory) is a cloud-based identity and access management service from Microsoft that helps employees sign in and access resources.

Use the Microsoft Entra ID component to manage your users, groups, and applications.

#### API Documentation:

The component was built using the [Microsoft Graph REST API v1.0](https://learn.microsoft.com/en-us/graph/api/overview?view=graph-rest-1.0&preserve-view=true)


Get notified to this flow when a group changes.

Get notified to this flow when a user changes.

Receive and validate webhook requests from Microsoft Entra ID for webhooks you configure.