All Users

Manage Microsoft Entra ID users for the selected tenant. View, create, edit, and delete user accounts with full access to profile properties, licenses, and group memberships.

Note: This page operates within a specific tenant context. Select a tenant from the tenant switcher before managing users. Changes are made directly to Microsoft Entra ID.

User List

The user table displays all Entra ID users with:

User Types

Member Users

Regular employees with full tenant membership. Created directly in Entra ID or synced from on-premises Active Directory.

Guest Users

External collaborators invited via B2B. Limited access based on guest policies. Managed separately under Guest Users.

Service Accounts

Non-human accounts for applications and services. Should have interactive sign-in blocked and no M365 licenses.

Creating a User

Click “Add User” to create a new member user:

Basic Information

• First Name / Last Name — Required
• Display Name — Auto-generated or custom
• User Principal Name — username@domain.com
• Password — Auto-generate or specify (must meet policy)

Profile Details

• Job Title, Department, Company Name
• Manager (select from user list)
• Office Location, Phone Numbers
• Employee ID, Employee Type

Licenses

Assign one or more M365 licenses. Usage location must be set before licenses can be assigned due to regional availability restrictions.

Groups

Add user to security groups, M365 groups, or distribution lists. Can also apply group-based licenses through group membership.

User Detail View

Click on a user to access the full detail panel with tabs:

Overview

Profile card, MFA status, license summary, sign-in activity chart, group count.

Profile

All Entra ID profile properties. Editable for cloud-only users. Read-only for AD-synced attributes (must edit in on-premises AD).

Licenses

Assigned licenses with service plan toggle. Enable/disable specific services within a license (e.g., disable Yammer but keep Teams).

Groups

All group memberships including Security, M365, Distribution, and Dynamic. Add or remove group memberships directly.

Devices

Entra ID registered and Intune managed devices owned by this user.

Authentication Methods

Registered MFA methods: phone, email, authenticator app, FIDO2 keys. Can reset or delete methods.

Sign-in Logs

Recent sign-in attempts with location, device, app, and result. Requires Azure AD Premium.

Mailbox

Exchange mailbox properties if user has a mailbox. Size, delegates, forwarding rules, OOF settings.

Quick Actions

• Reset Password — Generate temporary password, optionally force change on login
• Block Sign-in — Disable account, revoke all tokens immediately
• Revoke Sessions — Invalidate all refresh tokens without blocking account
• Assign Manager — Set or change the reporting manager
• Convert to Shared Mailbox — Convert to shared mailbox and remove license
• Offboard User — Full offboarding workflow (disable, remove licenses, delegate mailbox)

Bulk Operations

• CSV Import — Create multiple users from CSV file
• Bulk License Assignment — Assign licenses to selected users
• Bulk Group Add — Add selected users to a group
• Export Users — Download user list as CSV or Excel
• Bulk Disable — Disable multiple accounts

Graph API Endpoints

• GET /users — List users with pagination
• POST /users — Create new user
• GET /users/{id} — Get user details
• PATCH /users/{id} — Update user properties
• DELETE /users/{id} — Delete user (soft delete)
• POST /users/{id}/assignLicense — Assign licenses
• POST /users/{id}/revokeSignInSessions — Revoke sessions
• GET /users/{id}/memberOf — Get group memberships

API Reference

• GET /api/user-management-identity/users — List users with filtering and search
• POST /api/user-management-identity/users — Create a new user
• GET /api/user-management-identity/users/:userId — Get user details including licenses and groups
• PUT /api/user-management-identity/users/:userId — Update user properties
• POST /api/user-management-identity/users/:userId/reset-password — Reset user password
• POST /api/user-management-identity/users/bulk — Bulk user creation from CSV
• POST /api/user-management-identity/users/:userId/offboard — Execute offboarding workflow