microsoft-entra-id

# Microsoft Entra ID

Microsoft Entra ID (formerly Azure AD) is a cloud-based identity and access management service. It's used by organizations to manage user identities and control access to applications and resources.

Official docs: https://learn.microsoft.com/en-us/entra/identity/

## Microsoft Entra ID Overview

- **User**
  - **User's License**
- **Group**
  - **Group Membership**
- **Application**
- **Device**
- **Audit Log**
- **Sign-in Log**
- **Entitlement Management Access Package Assignment**
- **Entitlement Management Access Package**
- **Identity Governance Task**
- **Role Assignment**
- **Custom Security Attribute**

Use action names and parameters as needed.

## Working with Microsoft Entra ID

This skill uses the Membrane CLI to interact with Microsoft Entra ID. Membrane handles authentication and credentials refresh automatically — so you can focus on the integration logic rather than auth plumbing.

### Install the CLI

Install the Membrane CLI so you can run `membrane` from the terminal:

```bash
npm install -g @membranehq/cli
```

### First-time setup

```bash
membrane login --tenant
```

A browser window opens for authentication.

**Headless environments:** Run the command, copy the printed URL for the user to open in a browser, then complete with `membrane login complete <code>`.

### Connecting to Microsoft Entra ID

1. **Create a new connection:**
   ```bash
   membrane search microsoft-entra-id --elementType=connector --json
   ```
   Take the connector ID from `output.items[0].element?.id`, then:
   ```bash
   membrane connect --connectorId=CONNECTOR_ID --json
   ```
   The user completes authentication in the browser. The output contains the new connection id.

### Getting list of existing connections
When you are not sure if connection already exists:
1. **Check existing connections:**
   ```bash
   membrane connection list --json
   ```
   If a Microsoft Entra ID connection exists, note its `connectionId`


### Searching for actions

W...