This article covers every workflow action available through the Microsoft Entra ID (formerly Azure Active Directory) integration — looking up and creating users, managing group membership, and disabling or deleting user accounts. See Microsoft Entra ID Triggers and Actions in HappyFox Workflows to get an overview.
Validation note legend
| Term | Meaning |
|---|---|
| Required | The workflow will not run this action if the field is missing or blank. |
| Optional | The field can be left empty; the action will still run. |
| Text | A plain text string. |
| Yes/No toggle | A boolean true/false switch. |
| Settings group | A structured field whose value can be entered as a plain name, email, UPN, or ID. The action resolves it automatically to the correct Entra ID record at runtime. |
Note on tenant, user, and group fields: Fields of type Settings group accept a human-readable identifier — a tenant name or primary domain, a user's display name, email address, user principal name (UPN), or Azure object ID, or a group's display name, email, or object ID. The integration looks up the matching record in Entra ID and resolves it to the correct internal ID before calling the API. You don't need to know or enter raw GUIDs.
Actions
Get User Info
Looks up a user in Microsoft Entra ID and returns their profile details — name, job title, contact info, preferred language, and more — along with the list of groups they belong to. The action fetches the user record first, then fetches their group memberships in a second call and merges the results.
| Field | Description | Validation |
|---|---|---|
| Tenant | The Entra ID tenant to look up the user in. Enter the tenant name, primary domain, or its object ID. | Required · Settings group |
| User | The user to look up. Enter their display name, email address, UPN, or object ID. | Required · Settings group |
| Additional Filters | An advanced Microsoft Graph API search expression to narrow down the user lookup when the name or email alone is ambiguous (for example, "department:Engineering"). The expression must be wrapped in double quotes and parentheses. |
Optional · Text |
Get Or Create User
Checks whether a user with the given User Principal Name (UPN) already exists in Entra ID. If found, it returns the existing user's details. If not found, it creates a new user account with a randomly generated temporary password and sends a confirmation email containing the password to the address in Email. The new user is required to change their password on first sign-in.
| Field | Description | Validation |
|---|---|---|
| Tenant | The Entra ID tenant where the user will be looked up or created. Enter the tenant name, primary domain, or its object ID. | Required · Settings group |
| User Principal Name | The sign-in name for the account, in the format [email protected]. |
Required · Text |
| The user's email address. If a new account is created, the temporary password confirmation email is sent here. | Required · Text | |
| Display Name | The user's full name as it will appear in Entra ID. | Required · Text |
| Mail Nick Name | The alias portion of the user's email address (the part before the @). |
Required · Text |
| Account Enabled | Whether the new account is active and the user can sign in immediately. | Required · Yes/No toggle |
Note: User Principal Name is automatically sanitized before use — any character that isn't a letter, digit, or one of
' . @ _ ! # ~ ^ -is stripped. Mail Nick Name has spaces removed automatically before being saved to Entra ID. If your workflow builds either value from ticket or contact data, expect the saved value in Entra ID to differ slightly from what you entered if it contained unsupported characters or spaces.
Add Member to Group
Adds a user to an Entra ID group. Both the group and the user are looked up by name, email, or object ID before the action runs.
| Field | Description | Validation |
|---|---|---|
| Tenant | The Entra ID tenant that contains the group and the user. | Required · Settings group |
| Group | The group to add the user to. Enter the group's display name, email address, or object ID. | Required · Settings group |
| User | The user to add to the group. Enter their display name, email address, UPN, or object ID. | Required · Settings group |
| Additional Filters | An advanced Microsoft Graph API search expression to narrow down the user lookup if needed (for example, "department:Sales"). |
Optional · Text |
Remove Member from Group
Removes a user from an Entra ID group. Both the group and the user are looked up by name, email, or object ID before the action runs.
| Field | Description | Validation |
|---|---|---|
| Tenant | The Entra ID tenant that contains the group and the user. | Required · Settings group |
| Group | The group to remove the user from. Enter the group's display name, email address, or object ID. | Required · Settings group |
| User | The user to remove from the group. Enter their display name, email address, UPN, or object ID. | Required · Settings group |
| Additional Filters | An advanced Microsoft Graph API search expression to narrow down the user lookup if needed. | Optional · Text |
Delete User
Permanently deletes a user account from Microsoft Entra ID.
| Field | Description | Validation |
|---|---|---|
| Tenant | The Entra ID tenant where the user account lives. | Required · Settings group |
| User | The user to delete. Enter their display name, email address, UPN, or object ID. | Required · Settings group |
| Additional Filters | An advanced Microsoft Graph API search expression to narrow down the user lookup if the provided name or email matches more than one record. | Optional · Text |
Warning: This action cannot be undone from within the workflow. Once the user account is deleted, it cannot be recovered through HappyFox Workflows. If you want to revoke access without permanently removing the account, use Disable User instead.
Disable User
Disables a user's account in Microsoft Entra ID by setting accountEnabled to false. The account is not deleted — the user simply cannot sign in until the account is re-enabled.
| Field | Description | Validation |
|---|---|---|
| Tenant | The Entra ID tenant where the user account lives. | Required · Settings group |
| User | The user to disable. Enter their display name, email address, UPN, or object ID. | Required · Settings group |
| Additional Filters | An advanced Microsoft Graph API search expression to narrow down the user lookup if needed. | Optional · Text |
Your workflow can now look up, create, disable, and delete Microsoft Entra ID users, and manage their group memberships.