Scenario
You are using Exclaimer and wish to manually query Azure AD for specific user data, which Exclaimer synchronizes.
Resolution
Follow the steps below to use the Graph Explorer tool to view specific user data currently held in Azure:
CAUTION! To complete the steps described below, you will need:
Microsoft 365 Global Administrator credentials
- Browse to the Azure AD Graph Explorer (https://developer.microsoft.com/en-us/graph/graph-explorer)
- Click Login and sign in with your Office 365 Global Administrator account.
- If prompted, accept the permissions request:
- Change the API from V1 to Beta:
-
In the query box enter the following:
https://graph.microsoft.com/beta/users/<UPN of user required>- enter the User Principal Name (UPN) of the user.
-
Click Run Query.
The results page displays an output similar to this:
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#users/$entity",
"id": "15ac7e2b-703f-4cb4-978f-2910721ecc91",
"deletedDateTime": null,
"accountEnabled": true,
"ageGroup": null,
"businessPhones": [
"8006427676"
],
"city": null,
"createdDateTime": "2020-11-14T19:37:36Z",
"creationType": null,
"companyName": null,
"consentProvidedForMinor": null,
"country": "GB",
"department": null,
"displayName": "MOD Administrator",
"employeeId": null,
"employeeHireDate": null,
"employeeOrgData": null,
"employeeType": null,
"faxNumber": null,
"givenName": "MOD",
"imAddresses": [
"admin@M365x944314.onmicrosoft.com"
],
........NOTE: In some cases, you can get an error when running the query prompting that you have insufficient privileges.
To resolve this:
- Please make sure you are logged in as a Global Admin.
- Navigate to the Modify permissions (Preview) tab and grant consent to the Directory.ReadWrite.All permission.
Example:
- If this relates to your support ticket, copy the content of the output to a text file and send it to Exclaimer Support to help troubleshoot any issues you may have.