Entra User & Group Lifecycle Automation

$2.99Official

Use when onboarding, transferring, disabling or offboarding Microsoft Entra ID users, their group memberships and their licenses through Microsoft Graph.

cloudentraidentitymicrosoft-graphprovisioningoffboardingrbacautomation· by SkillingMain

What you get

✓10-step procedure
✓Runnable Python / JSON included
✓9-point quality checklist
✓10 pitfalls to avoid
✓Installs into 6 tools

Version: v1 →
Last updated: today
Length: 11 min read
Requires: Best with a strong model (claude-opus-4-6)

Works in: Claude Code, Codex, Cline, opencode, OpenClaw, Hermes · Built for large codebases

What you'll need to set up

Some setup · 20-35 min

Register a single-tenant Entra application, give it a client secret or certificate, grant it the Microsoft Graph application permissions below with tenant-wide admin consent, and assign its service principal the User Administrator directory role so it may act on other users.

AZURE_TENANT_IDAZURE_CLIENT_IDAZURE_CLIENT_SECRETAZURE_CLIENT_CERTIFICATE_PATHGRAPH_BASE_URLENTRA_MANAGED_GROUP_PREFIX

Full setup guide · 20 API calls →

Preview

When to use

Invoke this skill for identity lifecycle work in Microsoft Entra ID (formerly Azure AD) driven through Microsoft Graph:

Joiner — "onboard Priya as a Solutions Engineer", "create these 40 users from the HR export", "give the new hire the standard EMEA engineering access".
Mover — "Marcus moved from Support to Platform, fix his groups", "reassign this team to a new manager", "reconcile memberships against the HRIS role mapping".
Leaver — "offboard Dana today", "disable and revoke sessions for a terminated contractor", "reclaim licenses for everyone who left last quarter", "restore the account we deleted on Tuesday".
Reconcile — diff the directory agains

…

🔒 Buy once ($2.99) to unlock the full playbook, download it, and install it in every tool you use.