What can I automate with Azure AD in Sim?

You can list users, get user, create user, update user, and delete user with Azure AD in Sim, plus 31 more Azure AD tools listed on this page. Each runs as a tool inside an AI agent, so the agent can combine Azure AD with any other connected service and apply LLM reasoning between steps.

How do I connect Azure AD to Sim?

(1) Create a free account at sim.ai. (2) Create an agent in your workspace. (3) Drag an Azure AD block onto the workflow builder. (4) Connect your Azure AD account with one-click OAuth, with no credentials to copy. (5) Pick a tool such as "List Users", wire up its inputs, and click Run.

How do I list users with Azure AD in Sim?

Add an Azure AD block to your agent and select "List Users" as the tool. List users in Azure AD (Microsoft Entra ID). Fill in the required fields. Inputs can reference outputs from earlier steps, such as text generated by an AI block or data fetched from another integration.

Back to Integrations

Azure AD integration for AI agents

Manage identities, licenses, roles, and access in Azure AD (Microsoft Entra ID)

View docs

Last updated October 14, 2026

What Sim agents can do with Azure AD

Create, update, and delete users and groups, manage group memberships, assign and remove licenses, reset passwords, revoke sign-in sessions, read sign-in and directory audit logs, grant and revoke app and directory roles, and read registered devices and conditional access policies. Device writes are not supported.

Category: Security
Authentication: OAuth
Tools: 36
Triggers: 0
Documentation: Azure AD docs

How to automate Azure AD with Sim

Create a free account
Sign up at sim.ai in seconds. No credit card required. Your workspace is ready immediately.
Add an Azure AD block
Open your workspace, drag an Azure AD block onto the workflow builder, and connect your account with one-click OAuth.
Configure, connect, and run
Pick the tool you need, wire in an AI agent for reasoning or data transformation, and run. Your Azure AD automation is live.

Agent templates

Ready-to-use templates featuring Azure AD. Click any to build it instantly.

Azure AD tools

36 Azure AD tools available to Sim agents.

List Users

List users in Azure AD (Microsoft Entra ID)

Get User

Get a user by ID or user principal name from Azure AD

Create User

Create a new user in Azure AD (Microsoft Entra ID)

Update User

Update user properties in Azure AD (Microsoft Entra ID)

Delete User

Delete a user from Azure AD (Microsoft Entra ID). The user is moved to a temporary container and can be restored within 30 days.

List Groups

List groups in Azure AD (Microsoft Entra ID)

Get Group

Get a group by ID from Azure AD (Microsoft Entra ID)

Create Group

Create a new group in Azure AD (Microsoft Entra ID)

Update Group

Update group properties in Azure AD (Microsoft Entra ID)

Delete Group

Delete a group from Azure AD (Microsoft Entra ID). Microsoft 365 groups can be restored within 30 days. Cloud security-group recovery is a public-cloud preview with tenant restrictions; confirm eligibility before deleting.

List Group Members

List members of a group in Azure AD (Microsoft Entra ID)

Add Group Member

Add a member to a group in Azure AD (Microsoft Entra ID)

Remove Group Member

Remove a member from a group in Azure AD (Microsoft Entra ID)

Assign License

Add or remove subscription licenses (SKUs) on a user in Microsoft Entra ID. Removing a license immediately revokes the access it granted to the associated services.

List User Licenses

List the subscription licenses assigned to a user in Microsoft Entra ID

List Subscribed SKUs

List the subscription SKUs the tenant owns, including how many license units are prepaid and how many are consumed

Revoke Sign-In Sessions

Invalidate every refresh token and session cookie issued to a user, forcing them to sign in again on all applications and devices. Revocation can take a few minutes to take effect and does not apply to external users.

Set Password

Set a specific password on a user by updating their password profile. Cannot be used for federated users. Requires an administrator role in Microsoft Entra ID.

Reset Password

Reset another user's password through their password authentication method. Leave the new password empty to have Microsoft generate one and return it. The user is prompted to change the password at their next sign-in. Cannot be run against your own account.

List Authentication Methods

List the authentication methods a user has registered, such as passwords, phone numbers, FIDO2 keys, and authenticator apps

List Sign-Ins

List sign-in events from the Microsoft Entra ID sign-in logs, newest first. Requires a Microsoft Entra ID P1 or P2 license. Apply a date filter to keep large queries from timing out.

List Directory Audits

List directory audit records showing who changed what in Microsoft Entra ID, such as user creation, group membership changes, and role assignments

List User App Role Assignments

List the application role assignments granted to a user, including assignments the user inherits from groups they are a direct member of

Grant App Role To User

Grant a user an application role on a service principal, giving them access to that application

Revoke App Role From User

Revoke an application role assignment from a user, removing their access to that application. Takes the assignment's own ID, not the app role ID.

List Service Principals

List the enterprise applications and service principals in the tenant, including the app roles each one exposes

List Application Assignments

List every user, group, and service principal assigned to an application, by reading the app role assignments on its service principal. Recently granted or removed assignments can take time to appear.

List Directory Roles

List the administrator roles that are activated in the tenant, such as Global Administrator and User Administrator. Roles that have never been activated are not returned.

List Directory Role Members

List the principals holding an administrator role. Returns up to 1000 members; this endpoint does not support paging.

Add Directory Role Member

Grant a user an administrator role in Microsoft Entra ID. This is a privileged change that expands what the user can do across the tenant.

Remove Directory Role Member

Revoke an administrator role from a user in Microsoft Entra ID. Removes only the role membership; the user account itself is not deleted.

List Devices

List the devices registered in Microsoft Entra ID

Get Device

Get a registered device by its object ID from Microsoft Entra ID

List User Devices

List the devices a user has registered or owns. Devices the caller cannot read are returned with only their ID and the remaining fields null.

List Conditional Access Policies

List the conditional access policies configured in the tenant, including their state and the conditions and controls they enforce. Read-only.

Get Conditional Access Policy

Get a single conditional access policy by ID, including the conditions it matches and the controls it enforces. Read-only.

Frequently asked questions

Sim's Azure AD integration adds 36 tools to the AI agents you build in Sim's visual workflow builder. Manage identities, licenses, roles, and access in Azure AD (Microsoft Entra ID).