Aller au contenu principal

Référence du connecteur Microsoft Entra ID

info

Bêta

Cette fonctionnalité est en version Bêta. Pour l’utiliser, un administrateur de workspace doit activer Lakeflow Connect pour Microsoft Entra ID depuis la page Prévisualisations . Consultez Gérer les aperçus Databricks.

Cette page contient des informations de référence sur le connecteur Microsoft Entra ID géré, notamment les tables sources prises en charge et les schémas de table de destination.

Tables sources prises en charge​

Le connecteur Microsoft Entra ID prend en charge les tables sources suivantes, toutes sous le schéma source default :

Table source

Clé primaire

Description

Mode de synchronisation

Champ de curseur

users

id

Utilisateurs du tenant, y compris le manager de chaque utilisateur.

Refresh complète uniquement

groups

id

Groupes dans le tenant.

Refresh complète uniquement

group_members

group_id, id

Membres directs de chaque groupe.

Refresh complète uniquement

group_owner

group_id, id

Propriétaires de chaque groupe.

Refresh complète uniquement

applications

id

Inscriptions d’applications dans le tenant.

Refresh complète uniquement

serviceprincipals

id

Service Principal (applications d'entreprise) dans le tenant.

Refresh complète uniquement

directoryroles

id

Rôles d'annuaire activés dans le tenant.

Refresh complète uniquement

directory_role_member

role_id, id

Membres de chaque rôle de répertoire activé.

Refresh complète uniquement

directoryroletemplates

id

Template des rôles de répertoire intégrés.

Refresh complète uniquement

directoryaudits

id

Événements de journal d'audit de répertoire.

Incrémentiel

activityDateTime

signins

id

Événements des Logs de connexion de l'utilisateur.

Incrémentiel

createdDateTime

user_registration_detail

id

Méthodes d’authentification que chaque utilisateur a enregistrées.

Refresh complète uniquement

identityproviders

id

Fournisseurs d’identité configurés dans le tenant.

Refresh complète uniquement

adminconsentrequestpolicy

policy_id

La politique de demande de consentement de l'administrateur du tenant.

Refresh complète uniquement

role_eligibility_schedule

id

Calendriers d'éligibilité aux rôles Privileged Identity Management (PIM) pour les rôles d'annuaire.

Refresh complète uniquement

Table source

Clé primaire

Description

Mode de synchronisation

Champ de curseur

users

id

Utilisateurs du tenant, y compris le manager de chaque utilisateur.

Refresh complète uniquement

groups

id

Groupes dans le tenant.

Refresh complète uniquement

group_members

group_id, id

Membres directs de chaque groupe.

Refresh complète uniquement

group_owner

group_id, id

Propriétaires de chaque groupe.

Refresh complète uniquement

applications

id

Inscriptions d’applications dans le tenant.

Refresh complète uniquement

serviceprincipals

id

Service Principal (applications d'entreprise) dans le tenant.

Refresh complète uniquement

directoryroles

id

Rôles d'annuaire activés dans le tenant.

Refresh complète uniquement

directory_role_member

role_id, id

Membres de chaque rôle de répertoire activé.

Refresh complète uniquement

directoryroletemplates

id

Template des rôles de répertoire intégrés.

Refresh complète uniquement

directoryaudits

id

Événements de journal d'audit de répertoire.

Incrémentiel

activityDateTime

signins

id

Événements des Logs de connexion de l'utilisateur.

Incrémentiel

createdDateTime

user_registration_detail

id

Méthodes d’authentification que chaque utilisateur a enregistrées.

Refresh complète uniquement

identityproviders

id

Fournisseurs d’identité configurés dans le tenant.

Refresh complète uniquement

adminconsentrequestpolicy

policy_id

La politique de demande de consentement de l'administrateur du tenant.

Refresh complète uniquement

role_eligibility_schedule

id

Calendriers d'éligibilité aux rôles Privileged Identity Management (PIM) pour les rôles d'annuaire.

Refresh complète uniquement

Options du connecteur​

Le connecteur Microsoft Entra ID prend en charge l’option de niveau pipeline suivante. Pour l’utilisation, voir Exemples.

Option

Type

Portée

Obligatoire

S'applique à

Description

start_datetime

Chaîne

Pipeline

Non

directoryaudits, signins

Heure de début de l'événement à ingérer lors de la première synchronisation, sous la forme d'un Timestamp RFC 3339, par exemple 2026-09-15T00:00:00Z. Le connecteur limite la valeur à une période comprise entre 30 jours et 1 jour avant la synchronisation. La valeur default est 30 jours avant la synchronisation.

Option

Type

Portée

Obligatoire

S'applique à

Description

start_datetime

Chaîne

Pipeline

Non

directoryaudits, signins

Heure de début de l'événement à ingérer lors de la première synchronisation, sous la forme d'un Timestamp RFC 3339, par exemple 2026-09-15T00:00:00Z. Le connecteur limite la valeur à une période comprise entre 30 jours et 1 jour avant la synchronisation. La valeur default est 30 jours avant la synchronisation.

Schémas de table de destination​

users​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

displayName

STRING

givenName

STRING

surname

STRING

userPrincipalName

STRING

mail

STRING

jobTitle

STRING

mobilePhone

STRING

officeLocation

STRING

preferredLanguage

STRING

accountEnabled

BOOLEAN

userType

STRING

createdDateTime

TIMESTAMP

lastPasswordChangeDateTime

TIMESTAMP

department

STRING

companyName

STRING

employeeId

STRING

employeeType

STRING

employeeHireDate

TIMESTAMP

employeeOrgData

STRUCT<costCenter:STRING, division:STRING>

securityIdentifier

STRING

usageLocation

STRING

city

STRING

state

STRING

country

STRING

postalCode

STRING

streetAddress

STRING

externalUserState

STRING

externalUserStateChangeDateTime

TIMESTAMP

creationType

STRING

onPremisesSyncEnabled

BOOLEAN

businessPhones

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

imAddresses

ARRAY<STRING>

otherMails

ARRAY<STRING>

refreshTokensValidFromDateTime

TIMESTAMP

signInSessionsValidFromDateTime

TIMESTAMP

onPremisesImmutableId

STRING

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesUserPrincipalName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

identities

ARRAY<STRUCT<issuer:STRING, issuerAssignedId:STRING, signInType:STRING>>

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

assignedPlans

ARRAY<STRUCT<assignedDateTime:TIMESTAMP, capabilityStatus:STRING, service:STRING, servicePlanId:STRING>>

licenseAssignmentStates

ARRAY<STRUCT<assignedByGroup:STRING, disabledPlans:ARRAY<STRING>, error:STRING, lastUpdatedDateTime:TIMESTAMP, skuId:STRING, state:STRING>>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

ageGroup

STRING

consentProvidedForMinor

STRING

legalAgeGroupClassification

STRING

faxNumber

STRING

mailNickname

STRING

preferredDataLocation

STRING

onPremisesDistinguishedName

STRING

passwordPolicies

STRING

isManagementRestricted

BOOLEAN

isResourceAccount

BOOLEAN

showInAddressList

BOOLEAN

deletedDateTime

TIMESTAMP

employeeLeaveDateTime

TIMESTAMP

customSecurityAttributes

VARIANT

passwordProfile

STRUCT<forceChangePasswordNextSignIn:BOOLEAN, forceChangePasswordNextSignInWithMfa:BOOLEAN>

provisionedPlans

ARRAY<STRUCT<capabilityStatus:STRING, provisioningStatus:STRING, service:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

signInActivity

STRUCT<lastNonInteractiveSignInDateTime:TIMESTAMP, lastNonInteractiveSignInRequestId:STRING, lastSignInDateTime:TIMESTAMP, lastSignInRequestId:STRING, lastSuccessfulSignInDateTime:TIMESTAMP, lastSuccessfulSignInRequestId:STRING>

authorizationInfo

STRUCT<certificateUserIds:ARRAY<STRING>>

identityParentId

STRING

manager

STRUCT<@odata.type:STRING, id:STRING, displayName:STRING, userPrincipalName:STRING, mail:STRING, jobTitle:STRING, givenName:STRING, surname:STRING, mobilePhone:STRING, officeLocation:STRING, preferredLanguage:STRING, businessPhones:ARRAY<STRING>>

Champ

Type de données

id

STRING

displayName

STRING

givenName

STRING

surname

STRING

userPrincipalName

STRING

mail

STRING

jobTitle

STRING

mobilePhone

STRING

officeLocation

STRING

preferredLanguage

STRING

accountEnabled

BOOLEAN

userType

STRING

createdDateTime

TIMESTAMP

lastPasswordChangeDateTime

TIMESTAMP

department

STRING

companyName

STRING

employeeId

STRING

employeeType

STRING

employeeHireDate

TIMESTAMP

employeeOrgData

STRUCT<costCenter:STRING, division:STRING>

securityIdentifier

STRING

usageLocation

STRING

city

STRING

state

STRING

country

STRING

postalCode

STRING

streetAddress

STRING

externalUserState

STRING

externalUserStateChangeDateTime

TIMESTAMP

creationType

STRING

onPremisesSyncEnabled

BOOLEAN

businessPhones

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

imAddresses

ARRAY<STRING>

otherMails

ARRAY<STRING>

refreshTokensValidFromDateTime

TIMESTAMP

signInSessionsValidFromDateTime

TIMESTAMP

onPremisesImmutableId

STRING

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesUserPrincipalName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

identities

ARRAY<STRUCT<issuer:STRING, issuerAssignedId:STRING, signInType:STRING>>

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

assignedPlans

ARRAY<STRUCT<assignedDateTime:TIMESTAMP, capabilityStatus:STRING, service:STRING, servicePlanId:STRING>>

licenseAssignmentStates

ARRAY<STRUCT<assignedByGroup:STRING, disabledPlans:ARRAY<STRING>, error:STRING, lastUpdatedDateTime:TIMESTAMP, skuId:STRING, state:STRING>>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

ageGroup

STRING

consentProvidedForMinor

STRING

legalAgeGroupClassification

STRING

faxNumber

STRING

mailNickname

STRING

preferredDataLocation

STRING

onPremisesDistinguishedName

STRING

passwordPolicies

STRING

isManagementRestricted

BOOLEAN

isResourceAccount

BOOLEAN

showInAddressList

BOOLEAN

deletedDateTime

TIMESTAMP

employeeLeaveDateTime

TIMESTAMP

customSecurityAttributes

VARIANT

passwordProfile

STRUCT<forceChangePasswordNextSignIn:BOOLEAN, forceChangePasswordNextSignInWithMfa:BOOLEAN>

provisionedPlans

ARRAY<STRUCT<capabilityStatus:STRING, provisioningStatus:STRING, service:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

signInActivity

STRUCT<lastNonInteractiveSignInDateTime:TIMESTAMP, lastNonInteractiveSignInRequestId:STRING, lastSignInDateTime:TIMESTAMP, lastSignInRequestId:STRING, lastSuccessfulSignInDateTime:TIMESTAMP, lastSuccessfulSignInRequestId:STRING>

authorizationInfo

STRUCT<certificateUserIds:ARRAY<STRING>>

identityParentId

STRING

manager

STRUCT<@odata.type:STRING, id:STRING, displayName:STRING, userPrincipalName:STRING, mail:STRING, jobTitle:STRING, givenName:STRING, surname:STRING, mobilePhone:STRING, officeLocation:STRING, preferredLanguage:STRING, businessPhones:ARRAY<STRING>>

remarque

Cette table ne prend pas en charge le SCD de type 2 car elle contient des colonnes VARIANT.

groups​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

displayName

STRING

description

STRING

mail

STRING

mailNickname

STRING

mailEnabled

BOOLEAN

securityEnabled

BOOLEAN

visibility

STRING

createdDateTime

TIMESTAMP

renewedDateTime

TIMESTAMP

securityIdentifier

STRING

membershipRule

STRING

membershipRuleProcessingState

STRING

groupTypes

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

isAssignableToRole

BOOLEAN

expirationDateTime

TIMESTAMP

onPremisesSyncEnabled

BOOLEAN

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesNetBiosName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

creationOptions

ARRAY<STRING>

resourceProvisioningOptions

ARRAY<STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

classification

STRING

deletedDateTime

TIMESTAMP

infoCatalogs

ARRAY<STRING>

preferredDataLocation

STRING

preferredLanguage

STRING

resourceBehaviorOptions

ARRAY<STRING>

theme

STRING

uniqueName

STRING

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

isManagementRestricted

BOOLEAN

licenseProcessingState

STRUCT<state:STRING>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

Champ

Type de données

id

STRING

displayName

STRING

description

STRING

mail

STRING

mailNickname

STRING

mailEnabled

BOOLEAN

securityEnabled

BOOLEAN

visibility

STRING

createdDateTime

TIMESTAMP

renewedDateTime

TIMESTAMP

securityIdentifier

STRING

membershipRule

STRING

membershipRuleProcessingState

STRING

groupTypes

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

isAssignableToRole

BOOLEAN

expirationDateTime

TIMESTAMP

onPremisesSyncEnabled

BOOLEAN

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesNetBiosName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

creationOptions

ARRAY<STRING>

resourceProvisioningOptions

ARRAY<STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

classification

STRING

deletedDateTime

TIMESTAMP

infoCatalogs

ARRAY<STRING>

preferredDataLocation

STRING

preferredLanguage

STRING

resourceBehaviorOptions

ARRAY<STRING>

theme

STRING

uniqueName

STRING

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

isManagementRestricted

BOOLEAN

licenseProcessingState

STRUCT<state:STRING>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

group_members​

Clé principale : group_id, id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

@odata.type

STRING

deletedDateTime

TIMESTAMP

Champ

Type de données

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

@odata.type

STRING

deletedDateTime

TIMESTAMP

group_owner​

Clé principale : group_id, id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

deletedDateTime

TIMESTAMP

Champ

Type de données

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

deletedDateTime

TIMESTAMP

applications​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

appId

STRING

displayName

STRING

description

STRING

signInAudience

STRING

publisherDomain

STRING

createdDateTime

TIMESTAMP

createdByAppId

STRING

isDisabled

BOOLEAN

disabledByMicrosoftStatus

STRING

isFallbackPublicClient

BOOLEAN

defaultRedirectUri

STRING

applicationTemplateId

STRING

identifierUris

ARRAY<STRING>

tags

ARRAY<STRING>

requiredResourceAccess

ARRAY<STRUCT<resourceAccess:ARRAY<STRUCT<id:STRING, type:STRING>>, resourceAppId:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

web

STRUCT<homePageUrl:STRING, implicitGrantSettings:STRUCT<enableAccessTokenIssuance:BOOLEAN, enableIdTokenIssuance:BOOLEAN>, logoutUrl:STRING, redirectUriSettings:ARRAY<STRUCT<index:BIGINT, uri:STRING>>, redirectUris:ARRAY<STRING>>

api

STRUCT<acceptMappedClaims:BOOLEAN, knownClientApplications:ARRAY<STRING>, oauth2PermissionScopes:ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>, preAuthorizedApplications:ARRAY<STRUCT<appId:STRING, delegatedPermissionIds:ARRAY<STRING>>>, requestedAccessTokenVersion:BIGINT>

servicePrincipalLockConfiguration

STRUCT<allProperties:BOOLEAN, credentialsWithUsageSign:BOOLEAN, credentialsWithUsageVerify:BOOLEAN, identifierUris:BOOLEAN, isEnabled:BOOLEAN, tokenEncryptionKeyId:BOOLEAN>

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

certification

STRUCT<certificationDetailsUrl:STRING, certificationExpirationDateTime:TIMESTAMP, isCertifiedByMicrosoft:BOOLEAN, isPublisherAttested:BOOLEAN, lastCertificationDateTime:TIMESTAMP>

deletedDateTime

TIMESTAMP

groupMembershipClaims

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDeviceOnlyAuthSupported

BOOLEAN

nativeAuthenticationApisEnabled

STRING

notes

STRING

optionalClaims

STRUCT<accessToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, idToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, saml2Token:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>>

parentalControlSettings

STRUCT<countriesBlockedForMinors:ARRAY<STRING>, legalAgeGroupRule:STRING>

publicClient

STRUCT<redirectUris:ARRAY<STRING>>

requestSignatureVerification

STRUCT<allowedWeakAlgorithms:STRING, isSignedRequestRequired:BOOLEAN>

samlMetadataUrl

STRING

serviceManagementReference

STRING

spa

STRUCT<redirectUris:ARRAY<STRING>>

tokenEncryptionKeyId

STRING

uniqueName

STRING

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

managerApplications

ARRAY<STRING>

authenticationBehaviors

STRUCT<blockAzureADGraphAccess:BOOLEAN, coopEnforcement:BOOLEAN, removeUnverifiedEmailClaim:BOOLEAN, requireClientServicePrincipal:BOOLEAN>

Champ

Type de données

id

STRING

appId

STRING

displayName

STRING

description

STRING

signInAudience

STRING

publisherDomain

STRING

createdDateTime

TIMESTAMP

createdByAppId

STRING

isDisabled

BOOLEAN

disabledByMicrosoftStatus

STRING

isFallbackPublicClient

BOOLEAN

defaultRedirectUri

STRING

applicationTemplateId

STRING

identifierUris

ARRAY<STRING>

tags

ARRAY<STRING>

requiredResourceAccess

ARRAY<STRUCT<resourceAccess:ARRAY<STRUCT<id:STRING, type:STRING>>, resourceAppId:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

web

STRUCT<homePageUrl:STRING, implicitGrantSettings:STRUCT<enableAccessTokenIssuance:BOOLEAN, enableIdTokenIssuance:BOOLEAN>, logoutUrl:STRING, redirectUriSettings:ARRAY<STRUCT<index:BIGINT, uri:STRING>>, redirectUris:ARRAY<STRING>>

api

STRUCT<acceptMappedClaims:BOOLEAN, knownClientApplications:ARRAY<STRING>, oauth2PermissionScopes:ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>, preAuthorizedApplications:ARRAY<STRUCT<appId:STRING, delegatedPermissionIds:ARRAY<STRING>>>, requestedAccessTokenVersion:BIGINT>

servicePrincipalLockConfiguration

STRUCT<allProperties:BOOLEAN, credentialsWithUsageSign:BOOLEAN, credentialsWithUsageVerify:BOOLEAN, identifierUris:BOOLEAN, isEnabled:BOOLEAN, tokenEncryptionKeyId:BOOLEAN>

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

certification

STRUCT<certificationDetailsUrl:STRING, certificationExpirationDateTime:TIMESTAMP, isCertifiedByMicrosoft:BOOLEAN, isPublisherAttested:BOOLEAN, lastCertificationDateTime:TIMESTAMP>

deletedDateTime

TIMESTAMP

groupMembershipClaims

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDeviceOnlyAuthSupported

BOOLEAN

nativeAuthenticationApisEnabled

STRING

notes

STRING

optionalClaims

STRUCT<accessToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, idToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, saml2Token:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>>

parentalControlSettings

STRUCT<countriesBlockedForMinors:ARRAY<STRING>, legalAgeGroupRule:STRING>

publicClient

STRUCT<redirectUris:ARRAY<STRING>>

requestSignatureVerification

STRUCT<allowedWeakAlgorithms:STRING, isSignedRequestRequired:BOOLEAN>

samlMetadataUrl

STRING

serviceManagementReference

STRING

spa

STRUCT<redirectUris:ARRAY<STRING>>

tokenEncryptionKeyId

STRING

uniqueName

STRING

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

managerApplications

ARRAY<STRING>

authenticationBehaviors

STRUCT<blockAzureADGraphAccess:BOOLEAN, coopEnforcement:BOOLEAN, removeUnverifiedEmailClaim:BOOLEAN, requireClientServicePrincipal:BOOLEAN>

serviceprincipals​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

appId

STRING

displayName

STRING

appDisplayName

STRING

servicePrincipalType

STRING

accountEnabled

BOOLEAN

appOwnerOrganizationId

STRING

appRoleAssignmentRequired

BOOLEAN

signInAudience

STRING

disabledByMicrosoftStatus

STRING

preferredSingleSignOnMode

STRING

servicePrincipalNames

ARRAY<STRING>

replyUrls

ARRAY<STRING>

alternativeNames

ARRAY<STRING>

tags

ARRAY<STRING>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

createdDateTime

TIMESTAMP

oauth2PermissionScopes

ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

resourceSpecificApplicationPermissions

ARRAY<STRUCT<description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, value:STRING>>

notificationEmailAddresses

ARRAY<STRING>

logoutUrl

STRING

applicationTemplateId

STRING

createdByAppId

STRING

description

STRING

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appDescription

STRING

deletedDateTime

TIMESTAMP

homepage

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDisabled

BOOLEAN

loginUrl

STRING

notes

STRING

preferredTokenSigningKeyThumbprint

STRING

samlSingleSignOnSettings

STRUCT<relayState:STRING>

tokenEncryptionKeyId

STRING

customSecurityAttributes

VARIANT

Champ

Type de données

id

STRING

appId

STRING

displayName

STRING

appDisplayName

STRING

servicePrincipalType

STRING

accountEnabled

BOOLEAN

appOwnerOrganizationId

STRING

appRoleAssignmentRequired

BOOLEAN

signInAudience

STRING

disabledByMicrosoftStatus

STRING

preferredSingleSignOnMode

STRING

servicePrincipalNames

ARRAY<STRING>

replyUrls

ARRAY<STRING>

alternativeNames

ARRAY<STRING>

tags

ARRAY<STRING>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

createdDateTime

TIMESTAMP

oauth2PermissionScopes

ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

resourceSpecificApplicationPermissions

ARRAY<STRUCT<description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, value:STRING>>

notificationEmailAddresses

ARRAY<STRING>

logoutUrl

STRING

applicationTemplateId

STRING

createdByAppId

STRING

description

STRING

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appDescription

STRING

deletedDateTime

TIMESTAMP

homepage

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDisabled

BOOLEAN

loginUrl

STRING

notes

STRING

preferredTokenSigningKeyThumbprint

STRING

samlSingleSignOnSettings

STRUCT<relayState:STRING>

tokenEncryptionKeyId

STRING

customSecurityAttributes

VARIANT

remarque

Cette table ne prend pas en charge le SCD de type 2 car elle contient des colonnes VARIANT.

directoryroles​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

displayName

STRING

description

STRING

roleTemplateId

STRING

deletedDateTime

TIMESTAMP

Champ

Type de données

id

STRING

displayName

STRING

description

STRING

roleTemplateId

STRING

deletedDateTime

TIMESTAMP

directory_role_member​

Clé principale : role_id, id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

role_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

deletedDateTime

TIMESTAMP

Champ

Type de données

role_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

deletedDateTime

TIMESTAMP

directoryroletemplates​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

displayName

STRING

description

STRING

deletedDateTime

TIMESTAMP

Champ

Type de données

id

STRING

displayName

STRING

description

STRING

deletedDateTime

TIMESTAMP

directoryaudits​

Clé primaire : id

Champ de curseur : activityDateTime

Champ

Type de données

id

STRING

activityDateTime

TIMESTAMP

activityDisplayName

STRING

category

STRING

correlationId

STRING

loggedByService

STRING

operationType

STRING

result

STRING

resultReason

STRING

initiatedBy

STRUCT<app:STRUCT<appId:STRING, displayName:STRING, servicePrincipalId:STRING, servicePrincipalName:STRING>, user:STRUCT<agentType:STRING, displayName:STRING, homeTenantId:STRING, homeTenantName:STRING, id:STRING, ipAddress:STRING, userPrincipalName:STRING, userType:STRING>>

targetResources

ARRAY<STRUCT<displayName:STRING, groupType:STRING, id:STRING, modifiedProperties:ARRAY<STRUCT<displayName:STRING, newValue:STRING, oldValue:STRING>>, type:STRING, userPrincipalName:STRING>>

additionalDetails

ARRAY<STRUCT<key:STRING, value:STRING>>

Champ

Type de données

id

STRING

activityDateTime

TIMESTAMP

activityDisplayName

STRING

category

STRING

correlationId

STRING

loggedByService

STRING

operationType

STRING

result

STRING

resultReason

STRING

initiatedBy

STRUCT<app:STRUCT<appId:STRING, displayName:STRING, servicePrincipalId:STRING, servicePrincipalName:STRING>, user:STRUCT<agentType:STRING, displayName:STRING, homeTenantId:STRING, homeTenantName:STRING, id:STRING, ipAddress:STRING, userPrincipalName:STRING, userType:STRING>>

targetResources

ARRAY<STRUCT<displayName:STRING, groupType:STRING, id:STRING, modifiedProperties:ARRAY<STRUCT<displayName:STRING, newValue:STRING, oldValue:STRING>>, type:STRING, userPrincipalName:STRING>>

additionalDetails

ARRAY<STRUCT<key:STRING, value:STRING>>

signins​

Clé primaire : id

Champ de curseur : createdDateTime

Champ

Type de données

id

STRING

createdDateTime

TIMESTAMP

userDisplayName

STRING

userPrincipalName

STRING

userId

STRING

appId

STRING

appDisplayName

STRING

ipAddress

STRING

clientAppUsed

STRING

correlationId

STRING

conditionalAccessStatus

STRING

isInteractive

BOOLEAN

resourceDisplayName

STRING

resourceId

STRING

status

STRUCT<additionalDetails:STRING, errorCode:BIGINT, failureReason:STRING>

location

STRUCT<city:STRING, countryOrRegion:STRING, geoCoordinates:STRUCT<altitude:DOUBLE, latitude:DOUBLE, longitude:DOUBLE>, state:STRING>

deviceDetail

STRUCT<browser:STRING, deviceId:STRING, displayName:STRING, isCompliant:BOOLEAN, isManaged:BOOLEAN, operatingSystem:STRING, trustType:STRING>

authenticationAppDeviceDetails

STRUCT<appVersion:STRING, clientApp:STRING, deviceId:STRING, operatingSystem:STRING>

appliedConditionalAccessPolicies

ARRAY<STRUCT<displayName:STRING, enforcedGrantControls:ARRAY<STRING>, enforcedSessionControls:ARRAY<STRING>, id:STRING, result:STRING>>

riskDetail

STRING

riskLevelAggregated

STRING

riskLevelDuringSignIn

STRING

riskState

STRING

riskEventTypes

ARRAY<STRING>

userAgent

STRING

homeTenantId

STRING

resourceTenantId

STRING

servicePrincipalId

STRING

riskEventTypes_v2

ARRAY<STRING>

servicePrincipalName

STRING

_observed_at

TIMESTAMP

Champ

Type de données

id

STRING

createdDateTime

TIMESTAMP

userDisplayName

STRING

userPrincipalName

STRING

userId

STRING

appId

STRING

appDisplayName

STRING

ipAddress

STRING

clientAppUsed

STRING

correlationId

STRING

conditionalAccessStatus

STRING

isInteractive

BOOLEAN

resourceDisplayName

STRING

resourceId

STRING

status

STRUCT<additionalDetails:STRING, errorCode:BIGINT, failureReason:STRING>

location

STRUCT<city:STRING, countryOrRegion:STRING, geoCoordinates:STRUCT<altitude:DOUBLE, latitude:DOUBLE, longitude:DOUBLE>, state:STRING>

deviceDetail

STRUCT<browser:STRING, deviceId:STRING, displayName:STRING, isCompliant:BOOLEAN, isManaged:BOOLEAN, operatingSystem:STRING, trustType:STRING>

authenticationAppDeviceDetails

STRUCT<appVersion:STRING, clientApp:STRING, deviceId:STRING, operatingSystem:STRING>

appliedConditionalAccessPolicies

ARRAY<STRUCT<displayName:STRING, enforcedGrantControls:ARRAY<STRING>, enforcedSessionControls:ARRAY<STRING>, id:STRING, result:STRING>>

riskDetail

STRING

riskLevelAggregated

STRING

riskLevelDuringSignIn

STRING

riskState

STRING

riskEventTypes

ARRAY<STRING>

userAgent

STRING

homeTenantId

STRING

resourceTenantId

STRING

servicePrincipalId

STRING

riskEventTypes_v2

ARRAY<STRING>

servicePrincipalName

STRING

_observed_at

TIMESTAMP

user_registration_detail​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

userPrincipalName

STRING

userDisplayName

STRING

userType

STRING

isAdmin

BOOLEAN

isSsprRegistered

BOOLEAN

isSsprEnabled

BOOLEAN

isSsprCapable

BOOLEAN

isMfaRegistered

BOOLEAN

isMfaCapable

BOOLEAN

isPasswordlessCapable

BOOLEAN

isSystemPreferredAuthenticationMethodEnabled

BOOLEAN

userPreferredMethodForSecondaryAuthentication

STRING

lastUpdatedDateTime

TIMESTAMP

methodsRegistered

ARRAY<STRING>

systemPreferredAuthenticationMethods

ARRAY<STRING>

Champ

Type de données

id

STRING

userPrincipalName

STRING

userDisplayName

STRING

userType

STRING

isAdmin

BOOLEAN

isSsprRegistered

BOOLEAN

isSsprEnabled

BOOLEAN

isSsprCapable

BOOLEAN

isMfaRegistered

BOOLEAN

isMfaCapable

BOOLEAN

isPasswordlessCapable

BOOLEAN

isSystemPreferredAuthenticationMethodEnabled

BOOLEAN

userPreferredMethodForSecondaryAuthentication

STRING

lastUpdatedDateTime

TIMESTAMP

methodsRegistered

ARRAY<STRING>

systemPreferredAuthenticationMethods

ARRAY<STRING>

identityproviders​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

displayName

STRING

identityProviderType

STRING

@odata.type

STRING

Champ

Type de données

id

STRING

displayName

STRING

identityProviderType

STRING

@odata.type

STRING

adminconsentrequestpolicy​

Clé primaire : policy_id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

policy_id

STRING

isEnabled

BOOLEAN

notifyReviewers

BOOLEAN

remindersEnabled

BOOLEAN

requestDurationInDays

BIGINT

version

BIGINT

reviewers

ARRAY<STRUCT<query:STRING, queryRoot:STRING, queryType:STRING, reviewerId:STRING, scopeType:STRING>>

Champ

Type de données

policy_id

STRING

isEnabled

BOOLEAN

notifyReviewers

BOOLEAN

remindersEnabled

BOOLEAN

requestDurationInDays

BIGINT

version

BIGINT

reviewers

ARRAY<STRUCT<query:STRING, queryRoot:STRING, queryType:STRING, reviewerId:STRING, scopeType:STRING>>

role_eligibility_schedule​

Clé primaire : id

Mode de synchronisation : Full refresh uniquement

Champ

Type de données

id

STRING

principalId

STRING

roleDefinitionId

STRING

directoryScopeId

STRING

appScopeId

STRING

createdUsing

STRING

createdDateTime

TIMESTAMP

modifiedDateTime

TIMESTAMP

status

STRING

memberType

STRING

scheduleInfo

STRUCT<expiration:STRUCT<duration:STRING, endDateTime:TIMESTAMP, type:STRING>, recurrence:STRUCT<pattern:STRUCT<dayOfMonth:INT, daysOfWeek:ARRAY<STRING>, firstDayOfWeek:STRING, index:STRING, interval:INT, month:INT, type:STRING>, range:STRUCT<endDate:DATE, numberOfOccurrences:INT, recurrenceTimeZone:STRING, startDate:DATE, type:STRING>>, startDateTime:TIMESTAMP>

Champ

Type de données

id

STRING

principalId

STRING

roleDefinitionId

STRING

directoryScopeId

STRING

appScopeId

STRING

createdUsing

STRING

createdDateTime

TIMESTAMP

modifiedDateTime

TIMESTAMP

status

STRING

memberType

STRING

scheduleInfo

STRUCT<expiration:STRUCT<duration:STRING, endDateTime:TIMESTAMP, type:STRING>, recurrence:STRUCT<pattern:STRUCT<dayOfMonth:INT, daysOfWeek:ARRAY<STRING>, firstDayOfWeek:STRING, index:STRING, interval:INT, month:INT, type:STRING>, range:STRUCT<endDate:DATE, numberOfOccurrences:INT, recurrenceTimeZone:STRING, startDate:DATE, type:STRING>>, startDateTime:TIMESTAMP>

Autorisations OAuth requises​

Accorder les permissions d'application Microsoft Graphe suivantes à l'enregistrement d'application Microsoft Entra ID, puis accorder le consentement de l'administrateur. Voir la référence des permissions Microsoft Graphe.

Autorisation

Requis pour

User.Read.All

users

AuditLog.Read.All

directoryaudits, signins, user_registration_detail et la colonne signInActivity de users

CustomSecAttributeAssignment.Read.All

La colonne customSecurityAttributes de users et serviceprincipals

Group.Read.All

groups

GroupMember.Read.All

group_members, group_owner

Application.Read.All

applications, serviceprincipals

RoleManagement.Read.Directory

directoryroles, directory_role_member, directoryroletemplates

RoleEligibilitySchedule.Read.Directory

role_eligibility_schedule

IdentityProvider.Read.All

identityproviders

Policy.Read.All

adminconsentrequestpolicy, et la colonne appliedConditionalAccessPolicies de signins

Autorisation

Requis pour

User.Read.All

users

AuditLog.Read.All

directoryaudits, signins, user_registration_detail et la colonne signInActivity de users

CustomSecAttributeAssignment.Read.All

La colonne customSecurityAttributes de users et serviceprincipals

Group.Read.All

groups

GroupMember.Read.All

group_members, group_owner

Application.Read.All

applications, serviceprincipals

RoleManagement.Read.Directory

directoryroles, directory_role_member, directoryroletemplates

RoleEligibilitySchedule.Read.Directory

role_eligibility_schedule

IdentityProvider.Read.All

identityproviders

Policy.Read.All

adminconsentrequestpolicy, et la colonne appliedConditionalAccessPolicies de signins