Microsoft Copilot security directory

Microsoft Graph Add Users (Independent Publisher)

Published by Troy Taylor

Medium risk

Creates internal users or invites an external users using Microsoft Graph. The created user can then be added to a group.

Security assessment

Plutonium assessed this connector for permissions, capabilities, and security-relevant behavior.

  • Can change or update your information: This connector can edit, rename, overwrite, or otherwise modify records in the connected service. If a request gets manipulated, your data could be altered without you noticing.
  • Can send messages as you: This connector can post messages, emails, or notifications on your behalf. Recipients will believe the message came from you, which makes phishing or social-engineering risks higher.

Available capabilities

This add-on exposes 3 tools or capabilities.

  • Add members to group
  • Create a user
  • Invite external user

The interactive security report will load automatically.