Knowledge Base

How to check user properties in Azure AD with Graph Explorer

Problem:

You want to manually check Microsoft 365 user attributes and custom attributes data stored in Azure Active Directory. This data is used e.g. in email signatures added by CodeTwo Email Signatures for Office 365.

Solution:

To view user data currently stored in Azure AD, you can use the Graph Explorer tool. To do so, follow the steps below:

  1. Go to the https://developer.microsoft.com/en-us/graph/graph-explorer website.
  2. Sign in to Graph Explorer with your Microsoft 365 global admin account (Fig. 1.). When asked, accept the necessary permissions.

895-1 Sign in to Graph Explorer
Fig. 1. You need to sign in with global admin credentials to be able to access the Azure AD attributes of other users in your tenant.

  1. In the upper part of the website, select GET from the query operators drop-down menu and beta from the API version drop-down menu (Fig. 2.).

895-2 Query operator and API version
Fig. 2. Selecting a query operator and the API version.

Important

By selecting the beta version of the API, you also will be able to get the information on Azure AD custom attributes.

  1. In the query box, enter the following URL:
    https://graph.microsoft.com/beta/me
    to retrieve the Azure AD data of the signed in user, or enter:
    https://graph.microsoft.com/beta/users/<email address>
    to retrieve the Azure AD data of any user in your tenant. Instead of <email address>, enter the email address of a specific user, e.g.
    https://graph.microsoft.com/beta/users/[email protected]
  2. Open the Modify permissions tab and click the Consent button next to all the required permissions (Fig. 3.). If the status reads Consented, it means the necessary consent has already been granted. Each consent needs to be granted separately.

895-3 Granting the necessary consents
Fig. 3. Granting the necessary consents to the Graph API.

  1. Click Run query to pull the required information from Azure AD. You will find the results under Response preview (Fig. 4.).

895-4 Query results
Fig. 4. Results of a query run for the selected Microsoft 365 user.

How to find the Azure AD attributes used in CodeTwo software

The names of the Azure AD attributes are slightly different to the names of placeholders used in signatures added by CodeTwo Email Signatures for Office 365. Refer to the table below to find the correct attribute in the query results.

Azure ADCodeTwo Email Signatures for Office 365
cityCity
companyNameCompany
countryCountry
departmentDepartment
displayNameDisplay name
mailE-mail
givenNameFirst Name
surnameLast name
officeLocationOffice
Learn morePhoto
postalCodePostal code
stateState
streetAddressStreet
jobTitleTitle
faxNumberFax
mobilePhoneMobile
businessPhonesPhone
extensionAttribute1-15CustomAttribute1-15

To quickly find the value of a given Azure AD attribute in the query results, use Ctrl+F on the Response preview tab.

Tip

If you want the query to return a specific Azure AD attribute value only, use the following URL:

https://graph.microsoft.com/beta/users/<email address>/<Azure AD attribute name>
For example, the following URL:
https://graph.microsoft.com/beta/users/[email protected]/givenName

will return Adele’s first name only (as provided in Azure AD), as shown in Fig. 5.

895-5 Query specific attribute
Fig. 5. Results of a query run for a specific Azure AD attribute only.

How to get users’ Microsoft 365 profile picture data using Graph Explorer

The query results shown in Fig. 4. are missing the information about the user’s Microsoft 365 profile picture. To check, if a given user has a profile picture added in their Azure AD, enter the following URL in the query box:

https://graph.microsoft.com/beta/users/<email address>/photo/

If the photo exists, the query will return similar information to that shown in Fig. 6. below.

895-6 Query photo
Fig. 6. Checking if a given user has a profile picture added in their Azure AD.

If you want Graph Explorer to display the photo (Fig. 7.), use the following URL:

https://graph.microsoft.com/beta/users/[email protected]/photo/$value

895-7 Graph Explorer gets user photo
Fig. 7. Using Graph Explorer to display the user's Microsoft 365 profile picture.

Was this information useful?