Using Microsoft Entra ID actions in action flows

<div class="article-banners">
<div id="docs-wmp-link">
<a href="https://support.zendesk.com/hc/en-us/articles/5411234991258-plan" rel="noopener" target="_blank">What's my plan?</a>
</div>
<div class="article-banner" id="suite_all">
<table>
<tbody>
<tr>
<td>
<strong>All Suites</strong>
</td>
<td>Team, Growth, Professional, Enterprise, or Enterprise Plus</td>
</tr>
</tbody>
</table>
</div>
<div class="article-banner" id="support_all">
<table>
<tbody>
<tr>
<td>
<strong>Support</strong>
</td>
<td>Team, Professional, or Enterprise</td>
</tr>
</tbody>
</table>
</div>
</div>
<div id="docs-ai-summary">
<p id="docs-ai-summary-toggle">Verified AI summary <span id="up-triangle">◀</span><span id="down-triangle">▼</span></p>
<p id="docs-ai-summary-content">Integrate Microsoft Entra ID with action flows to automate workflows and enhance collaboration. Connect using a service account for security, and manage user and group details with actions like Lookup user, Lookup group, Add user to group, and Remove member from group. Follow best practices for secure credential management to protect your identity and access management system.</p>
</div>
<div class="body">
<div class="p">By connecting the <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/8855513857306" target="_blank">action builder</a> to external systems, such as Microsoft Entra
ID, admins can integrate Zendesk with external systems in automated workflows, improving
collaboration and maintaining a seamless experience across multiple platforms.<div class="note" id="zug_action_flow_external_microsoftentra__note_dqk_2d5_p3c">
<span class="notetitle">Note:</span> The steps associated with external systems in action flows are
referred to collectively as <em class="ph i">external actions</em>.</div>
</div>
<div class="p">This article contains the following topics:<ul class="ul" id="zug_action_flow_external_microsoftentra__ul_ysp_sn4_zgc">
<li class="li"><a class="xref" href="#topic_fcs_gtn_g3c">Connecting Microsoft Entra ID to action builder</a></li>
<li class="li"><a class="xref" href="#topic_z1q_htn_g3c">Using Microsoft Entra ID actions in action flows</a></li>
</ul>
</div>
</div>
<div aria-labelledby="ariaid-title2" class="topic nested1" id="topic_fcs_gtn_g3c">
<h2 class="title topictitle2" id="ariaid-title2">Connecting Microsoft Entra ID to action builder</h2>
<div class="body">
<p class="p">Before you can include external actions in your action flows, you must connect the
action builder to the external system.</p>
<div class="p">When connecting to external systems for use in action flows, the following best practices are recommended:<ul class="ul" id="topic_fcs_gtn_g3c__d8e13">
<li class="li">All external actions performed by an action flow are attributed to the user who connected the
external system. Therefore, it's a best practice to use a dedicated service
account rather than personal credentials when connecting to each external
system.</li>
<li class="li">All integrations request access to necessary scopes. However, it's important that you review and validate the scopes before authorizing the connection to the external system.</li>
<li class="li">When managing credentials for API key-based tools, such as OpenAI, it's best to store keys in a secure vault or credential manager.</li>
</ul>
</div>
<div class="p">
<strong class="ph b">To connect action builder to Microsoft Entra ID</strong><ol class="ol" id="topic_fcs_gtn_g3c__ol_psh_lk4_zgc">
<li class="li"><span class="ph">In <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/4581766374554#topic_hfg_dyz_1hb" target="_blank">Admin Center</a>, click <img class="image" src="https://zen-marketing-documentation.s3.amazonaws.com/docs/en/ac_apps_integrations_icon.png">
<strong class="ph b">Apps and integrations</strong> in the sidebar, then select <strong class="ph b">Actions &gt; Action
flows</strong>.</span></li>
<li class="li">
<a class="xref" href="https://support.zendesk.com/hc/en-us/articles/8855601898266" target="_blank">Create</a> or <a class="xref" href="https://support.zendesk.com/hc/en-us/articles/9052312956570" target="_blank">edit</a> an action flow.</li>
<li class="li">Open the step sidebar.</li>
<li class="li">Under <strong class="ph b">External actions</strong>, click <strong class="ph b">Microsoft Entra</strong>.</li>
<li class="li">Click <strong class="ph b">Connect</strong>.</li>
<li class="li">Use Microsoft to authenticate the account.<p class="p">The following Microsoft Graph
API scopes and permissions must be authorized during the OAuth
connection process: <code class="ph codeph">User.Read.All</code>,
<code class="ph codeph">Group.Read.All</code>,
<code class="ph codeph">GroupMember.Read.All</code>,
<code class="ph codeph">GroupMember.ReadWrite.All</code>.</p>
<div class="note" id="topic_fcs_gtn_g3c__note_shj_gd5_p3c">
<span class="notetitle">Note:</span> All external actions performed by an action flow
are attributed to the user who connected the external system. Therefore,
it is a best practice to use a dedicated service account rather than
personal credentials when connecting to each external
system.</div>
</li>
</ol>
</div>
<p class="p">After you've connected to the system, you'll see an indicator that it's connected and
details about the instance you're connected to, as well as the actions available for
Microsoft Entra ID.</p>
<div class="note important" id="topic_fcs_gtn_g3c__note_m2y_l2y_q3c">
<span class="importanttitle">Important:</span> Use the Microsoft Entra ID connector with
caution, as it interacts directly with your Identity and Access Management system
and handles sensitive authentication and authorization information. Misconfiguration
or improper use can lead to unauthorized access, breaches, or compromise of your
platform security. Follow best security practices, including the principle of least
privilege and secure credential management.</div>
</div>
</div>
<div aria-labelledby="ariaid-title3" class="topic nested1" id="topic_z1q_htn_g3c">
<h2 class="title topictitle2" id="ariaid-title3">Using Microsoft Entra ID actions in action flows</h2>
<div class="body">
<p class="p">Microsoft Entra ID action steps can be used to search users, look up user and group
details, manage group memberships, and perform identity management tasks.</p>
<div class="p">The following Microsoft Entra ID actions are available:<ul class="ul" id="topic_z1q_htn_g3c__ul_jby_q44_zgc">
<li class="li"><a class="xref" href="#topic_wtj_yg5_p3c">Lookup user</a></li>
<li class="li"><a class="xref" href="#topic_dbj_zg5_p3c">Lookup group</a></li>
<li class="li"><a class="xref" href="#topic_gjp_zg5_p3c">Add user to group</a></li>
<li class="li"><a class="xref" href="#topic_h1s_zg5_p3c">Remove member from
group</a></li>
</ul>
</div>
</div>
<div aria-labelledby="ariaid-title4" class="topic nested2" id="topic_wtj_yg5_p3c">
<h3 class="title topictitle3" id="ariaid-title4">Looking up a user</h3>
<div class="body">
<p class="p">Use the <em class="ph i">Lookup user</em> action to look up a user.</p>
<p class="p">This action has the following inputs and outputs:</p>
<div class="p">
<div class="tablenoborder">
<table border="1" cellpadding="4" cellspacing="0" class="table" frame="border" id="topic_wtj_yg5_p3c__table_xtj_yg5_p3c" rules="all" summary="">
<colgroup>
<col>
<col>
</colgroup>
<thead class="thead" style="text-align:left;">
<tr class="row">
<th class="entry cellrowborder" id="d89e218" style="text-align:left;vertical-align:top;"> </th>
<th class="entry cellrowborder" id="d89e220" style="text-align:left;vertical-align:top;">Variables</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row">
<td class="entry cellrowborder" headers="d89e218" style="text-align:left;vertical-align:top;">Inputs</td>
<td class="entry cellrowborder" headers="d89e220" style="text-align:left;vertical-align:top;">Required: <code class="ph codeph">User ID</code><p class="p">Optional:
<code class="ph codeph">User principal name</code>,
<code class="ph codeph">Email</code></p>
</td>
</tr>
<tr class="row">
<td class="entry cellrowborder" headers="d89e218" style="text-align:left;vertical-align:top;">Output</td>
<td class="entry cellrowborder" headers="d89e220" style="text-align:left;vertical-align:top;">User details such as <code class="ph codeph">id</code>,
<code class="ph codeph">displayName</code>,
<code class="ph codeph">givenName</code>, <code class="ph codeph">surname</code>,
<code class="ph codeph">mail</code>,
<code class="ph codeph">userPrincipalName</code>,
<code class="ph codeph">jobTitle</code>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
<div aria-labelledby="ariaid-title5" class="topic nested2" id="topic_dbj_zg5_p3c">
<h3 class="title topictitle3" id="ariaid-title5">Looking up a group</h3>
<div class="body">
<p class="p">Use the <em class="ph i">Lookup group</em> action to look up a group.</p>
<p class="p">This action has the following inputs and outputs:</p>
<div class="p">
<div class="tablenoborder">
<table border="1" cellpadding="4" cellspacing="0" class="table" frame="border" id="topic_dbj_zg5_p3c__table_ebj_zg5_p3c" rules="all" summary="">
<colgroup>
<col>
<col>
</colgroup>
<thead class="thead" style="text-align:left;">
<tr class="row">
<th class="entry cellrowborder" id="d89e311" style="text-align:left;vertical-align:top;"> </th>
<th class="entry cellrowborder" id="d89e313" style="text-align:left;vertical-align:top;">Variables</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row">
<td class="entry cellrowborder" headers="d89e311" style="text-align:left;vertical-align:top;">Inputs</td>
<td class="entry cellrowborder" headers="d89e313" style="text-align:left;vertical-align:top;">Required: <code class="ph codeph">Group ID</code>
</td>
</tr>
<tr class="row">
<td class="entry cellrowborder" headers="d89e311" style="text-align:left;vertical-align:top;">Output</td>
<td class="entry cellrowborder" headers="d89e313" style="text-align:left;vertical-align:top;">
<p class="p" dir="ltr">User details such as <code class="ph codeph">id</code>,
<code class="ph codeph">displayName</code>,
<code class="ph codeph">description</code>, <code class="ph codeph">mail</code>,
<code class="ph codeph">mailEnabled</code>,
<code class="ph codeph">securityEnabled</code></p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
<div aria-labelledby="ariaid-title6" class="topic nested2" id="topic_gjp_zg5_p3c">
<h3 class="title topictitle3" id="ariaid-title6">Adding a user to a group</h3>
<div class="body">
<p class="p">Use the <em class="ph i">Add user to group</em> action to add a user to a group.</p>
<p class="p">This action has the following inputs and outputs:</p>
<div class="p">
<div class="tablenoborder">
<table border="1" cellpadding="4" cellspacing="0" class="table" frame="border" id="topic_gjp_zg5_p3c__table_hjp_zg5_p3c" rules="all" summary="">
<colgroup>
<col>
<col>
</colgroup>
<thead class="thead" style="text-align:left;">
<tr class="row">
<th class="entry cellrowborder" id="d89e397" style="text-align:left;vertical-align:top;"> </th>
<th class="entry cellrowborder" id="d89e399" style="text-align:left;vertical-align:top;">Variables</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row">
<td class="entry cellrowborder" headers="d89e397" style="text-align:left;vertical-align:top;">Inputs</td>
<td class="entry cellrowborder" headers="d89e399" style="text-align:left;vertical-align:top;">Required: <code class="ph codeph">User ID</code>, <code class="ph codeph">Group
ID</code>
</td>
</tr>
<tr class="row">
<td class="entry cellrowborder" headers="d89e397" style="text-align:left;vertical-align:top;">Output</td>
<td class="entry cellrowborder" headers="d89e399" style="text-align:left;vertical-align:top;">Success or failure</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
<div aria-labelledby="ariaid-title7" class="topic nested2" id="topic_h1s_zg5_p3c">
<h3 class="title topictitle3" id="ariaid-title7">Removing a member from a group</h3>
<div class="body">
<p class="p">Use the <em class="ph i">Remove member from group</em> action to remove a member from a
group.</p>
<p class="p">This action has the following inputs and outputs:</p>
<div class="p">
<div class="tablenoborder">
<table border="1" cellpadding="4" cellspacing="0" class="table" frame="border" id="topic_h1s_zg5_p3c__table_i1s_zg5_p3c" rules="all" summary="">
<colgroup>
<col>
<col>
</colgroup>
<thead class="thead" style="text-align:left;">
<tr class="row">
<th class="entry cellrowborder" id="d89e466" style="text-align:left;vertical-align:top;"> </th>
<th class="entry cellrowborder" id="d89e468" style="text-align:left;vertical-align:top;">Variables</th>
</tr>
</thead>
<tbody class="tbody">
<tr class="row">
<td class="entry cellrowborder" headers="d89e466" style="text-align:left;vertical-align:top;">Inputs</td>
<td class="entry cellrowborder" headers="d89e468" style="text-align:left;vertical-align:top;">Required: <code class="ph codeph">User ID</code>, <code class="ph codeph">Group
ID</code>
</td>
</tr>
<tr class="row">
<td class="entry cellrowborder" headers="d89e466" style="text-align:left;vertical-align:top;">Output</td>
<td class="entry cellrowborder" headers="d89e468" style="text-align:left;vertical-align:top;">Success or failure</td>
</tr>
</tbody>
</table>
</div>
</div>
</div>
</div>
</div>
<script id="docs-schema-markup" type="application/ld+json">{
"@context": "https://schema.org",
"@type": "TechArticle",
"@id": "https://support.zendesk.com/hc/en-us/articles/10445230176154",
"url": "https://support.zendesk.com/hc/en-us/articles/10445230176154-Using-Microsoft-Entra-ID-actions-in-action-flows",
"headline": "Using Microsoft Entra ID actions in action flows",
"description": "You can connect Microsoft Entra ID to action flows to automate identity and group management tasks such as looking up users and groups, and managing group memberships while following security best practices.",
"articleSection": "Extending Zendesk",
"datePublished": "2026-03-19T22:25:40+00:00",
"dateModified": "2026-03-23T16:56:41+00:00",
"inLanguage": "en-US",
"mainEntityOfPage": {
"@type": "WebPage",
"@id": "https://support.zendesk.com/hc/en-us/articles/10445230176154"
},
"author": {
"@type": "Organization",
"name": "Zendesk",
"@id": "https://www.zendesk.com"
},
"publisher": {
"@type": "Organization",
"name": "Zendesk",
"@id": "https://www.zendesk.com"
},
"isPartOf": {
"@type": "WebSite",
"name": "Zendesk Help",
"@id": "https://support.zendesk.com/hc/"
},
"about": {
"@type": "SoftwareApplication",
"name": "Zendesk",
"@id": "https://www.zendesk.com"
}
}</script><script id="ai-summary-script">
//<![CDATA[
const ai_summary_style = document.createElement('style');
ai_summary_style.innerHTML = `#styled-article-body{padding:0 0 0}#article-body #docs-ai-summary{background-color:#f3f3f3;border:1px solid #d3d3d3;padding:10px 10px 6px;margin-bottom:16px}#article-body #docs-ai-summary #docs-ai-summary-toggle{font-size:.9em;font-weight:700;margin-bottom:4px;cursor:pointer;display:flex;justify-content:space-between;align-items:center}#article-body #docs-ai-summary #docs-ai-summary-toggle #up-triangle{margin-left:auto;padding-right:10px;display:none}#article-body #docs-ai-summary #docs-ai-summary-toggle #down-triangle{margin-left:auto;padding-right:10px}#article-body #docs-ai-summary #docs-ai-summary-content{font-size:.9em;padding-left:25px;padding-right:25px;margin-bottom:12px}`;
document.head.appendChild(ai_summary_style);

const toggleAISummary = () => {
const summary = document.getElementById("docs-ai-summary-content");
const upTriangle = document.getElementById("up-triangle");
const downTriangle = document.getElementById("down-triangle");
if (summary.style.display === "none") {
summary.style.display = "block";
upTriangle.style.display = "none";
downTriangle.style.display = "inline";
} else {
summary.style.display = "none";
upTriangle.style.display = "inline";
downTriangle.style.display = "none";
}
};

document.getElementById("docs-ai-summary-toggle").addEventListener("click", toggleAISummary);
//]]>
</script>