How to check user properties in Entra ID (Azure AD) with Graph Explorer

Problem:

You want to manually check Microsoft 365 user attributes and custom attributes data stored in Microsoft Entra ID (Azure Active Directory). This data is used e.g. in email signatures added by CodeTwo Email Signatures 365.

Solution:

To view user data currently stored in Entra ID (Azure AD), you can use the Graph Explorer tool. To do so, follow the steps below:

1. Go to the https://developer.microsoft.com/en-us/graph/graph-explorer website.
2. Sign in to Graph Explorer with your Microsoft 365 global admin account (Fig. 1.). When asked, accept the necessary permissions.

Fig. 1. You need to sign in with global admin credentials to be able to access the Entra ID attributes of other users in your tenant.

3. In the upper part of the website, select GET from the query operators drop-down menu and beta from the API version drop-down menu (Fig. 2.).

Fig. 2. Selecting a query operator and the API version.

4. In the query box, enter the following URL:

   https://graph.microsoft.com/beta/me

   to retrieve the Entra ID data of the signed in user, or enter:

   https://graph.microsoft.com/beta/users/<email address>

   to retrieve the Entra ID data of any user in your tenant. Instead of <email address>, enter the email address of a specific user, e.g.

   https://graph.microsoft.com/beta/users/[email protected]

5. Open the Modify permissions tab and click the Consent button next to all the required permissions (Fig. 3.). If the status reads Consented, it means the necessary consent has already been granted. Each consent needs to be granted separately.

Fig. 3. Granting the necessary consents to the Graph API.

6. Click Run query to pull the required information from Entra ID. You will find the results under Response preview (Fig. 4.).

Fig. 4. Results of a query run for the selected Microsoft 365 user.

How to find the Entra ID (Azure AD) attributes used in CodeTwo software

The names of the Entra ID attributes shown in Graph Explorer are slightly different than the names of placeholders used in signatures added by CodeTwo Email Signatures 365. Refer to the table below to find the correct attribute in the query results. For a more comprehensive list, refer to this article.

To quickly find the value of a given Entra ID attribute in the query results, use Ctrl+F on the Response preview tab.

https://graph.microsoft.com/beta/users/<email address>/<Azure AD attribute name>

https://graph.microsoft.com/beta/users/[email protected]/givenName

How to get users’ Microsoft 365 profile picture data using Graph Explorer

The query results shown in Fig. 4. are missing the information about the user’s Microsoft 365 profile picture. To check, if a given user has a profile picture added in their Entra ID (Azure AD), enter the following URL in the query box:

https://graph.microsoft.com/beta/users/<email address>/photo/

If the photo exists, the query will return similar information to that shown in Fig. 6. below.

Fig. 6. Checking if a given user has a profile picture added in their Entra ID.

If you want Graph Explorer to display the photo (Fig. 7.), use the following URL:

https://graph.microsoft.com/beta/users/[email protected]/photo/$value

Fig. 7. Using Graph Explorer to display the user's Microsoft 365 profile picture.

See also:

• Learn how to use CodeTwo’s Attributes manager to manage user details used in email signatures in an easier and more efficient way