Microsoft Copilot security directory

Microsoft Entra ID

Published by Microsoft

High risk

Microsoft Entra ID is an Identity and Access Management cloud solution that extends your on-premises directories to the cloud and provides single sign-on to thousands of cloud (SaaS) apps and access to web apps you run on-premises.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Reads your private information: This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.
  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can permanently delete data: This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.

Available capabilities

This add-on exposes 14 tools or capabilities.

  • Add user to group
  • Assign manager
  • Check group membership (V2)
  • Check group membership [DEPRECATED]
  • Create group
  • Create Office 365 group
  • Create security group
  • Create user
  • Get group
  • Get group members
  • Get groups of a user (V2)
  • Get groups of a user [DEPRECATED]
  • Get user
  • Refresh tokens
  • Remove Member From Group
  • Update user

The interactive security report will load automatically.