メインコンテンツまでスキップ

Microsoft Entra IDコネクタのリファレンス

備考

ベータ版

この機能はベータ版です。これを使用するには、ワークスペース管理者が [プレビュー] ページから Lakeflow Connect for Microsoft Entra ID を有効にする必要があります。Databricksのプレビューを管理するを参照してください。

このページには、サポートされているソーステーブルや宛先テーブルのスキーマなど、マネージドMicrosoft Entra IDコネクタのリファレンス情報が記載されています。

サポートされているソーステーブル​

Microsoft Entra ID コネクタは、以下のソーステーブルをサポートしています。すべて default ソーススキーマの下にあります。

ソーステーブル

プライマリーキー

説明

同期モード

カーソルフィールド

users

id

テナント内のユーザー(各ユーザーのマネージャーを含む)。

フル更新のみ

groups

id

テナント内のグループ。

フル更新のみ

group_members

group_id, id

各グループの直接のメンバー。

フル更新のみ

group_owner

group_id, id

各グループの所有者。

フル更新のみ

applications

id

テナント内のアプリケーション登録。

フル更新のみ

serviceprincipals

id

テナント内のService Principal(エンタープライズアプリケーション)。

フル更新のみ

directoryroles

id

テナントでアクティブ化されているディレクトリロール。

フル更新のみ

directory_role_member

role_id, id

アクティブ化された各ディレクトリロールのメンバー。

フル更新のみ

directoryroletemplates

id

組み込みディレクトリロールのTemplate。

フル更新のみ

directoryaudits

id

ディレクトリ監査ログイベント。

インクリメンタル

activityDateTime

signins

id

ユーザーサインインのログイベント。

インクリメンタル

createdDateTime

user_registration_detail

id

各ユーザーが登録した認証方法。

フル更新のみ

identityproviders

id

テナントに構成されたIDプロバイダー。

フル更新のみ

adminconsentrequestpolicy

policy_id

テナントの管理者同意リクエストポリシー。

フル更新のみ

role_eligibility_schedule

id

ディレクトリ ロールの特権 ID 管理(PIM)ロールの適格性スケジュール。

フル更新のみ

ソーステーブル

プライマリーキー

説明

同期モード

カーソルフィールド

users

id

テナント内のユーザー(各ユーザーのマネージャーを含む)。

フル更新のみ

groups

id

テナント内のグループ。

フル更新のみ

group_members

group_id, id

各グループの直接のメンバー。

フル更新のみ

group_owner

group_id, id

各グループの所有者。

フル更新のみ

applications

id

テナント内のアプリケーション登録。

フル更新のみ

serviceprincipals

id

テナント内のService Principal(エンタープライズアプリケーション)。

フル更新のみ

directoryroles

id

テナントでアクティブ化されているディレクトリロール。

フル更新のみ

directory_role_member

role_id, id

アクティブ化された各ディレクトリロールのメンバー。

フル更新のみ

directoryroletemplates

id

組み込みディレクトリロールのTemplate。

フル更新のみ

directoryaudits

id

ディレクトリ監査ログイベント。

インクリメンタル

activityDateTime

signins

id

ユーザーサインインのログイベント。

インクリメンタル

createdDateTime

user_registration_detail

id

各ユーザーが登録した認証方法。

フル更新のみ

identityproviders

id

テナントに構成されたIDプロバイダー。

フル更新のみ

adminconsentrequestpolicy

policy_id

テナントの管理者同意リクエストポリシー。

フル更新のみ

role_eligibility_schedule

id

ディレクトリ ロールの特権 ID 管理(PIM)ロールの適格性スケジュール。

フル更新のみ

コネクターオプション​

Microsoft Entra IDコネクタは、以下のパイプラインレベルのオプションをサポートしています。使用方法については、例を参照してください。

オプション

Type

スコープ

必須

適用対象

説明

start_datetime

String

パイプライン

No

directoryaudits, signins

最初の同期で取り込む最も早いイベント時刻(RFC 3339形式のTimestamp)。例:2026-09-15T00:00:00Z。コネクタにより、値は同期の30日前から1日前までに制限されます。defaultでは、同期の30日前です。

オプション

Type

スコープ

必須

適用対象

説明

start_datetime

String

パイプライン

No

directoryaudits, signins

最初の同期で取り込む最も早いイベント時刻(RFC 3339形式のTimestamp)。例:2026-09-15T00:00:00Z。コネクタにより、値は同期の30日前から1日前までに制限されます。defaultでは、同期の30日前です。

アップグレード先テーブルのスキーマ​

users​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

displayName

STRING

givenName

STRING

surname

STRING

userPrincipalName

STRING

mail

STRING

jobTitle

STRING

mobilePhone

STRING

officeLocation

STRING

preferredLanguage

STRING

accountEnabled

BOOLEAN

userType

STRING

createdDateTime

TIMESTAMP

lastPasswordChangeDateTime

TIMESTAMP

department

STRING

companyName

STRING

employeeId

STRING

employeeType

STRING

employeeHireDate

TIMESTAMP

employeeOrgData

STRUCT<costCenter:STRING, division:STRING>

securityIdentifier

STRING

usageLocation

STRING

city

STRING

state

STRING

country

STRING

postalCode

STRING

streetAddress

STRING

externalUserState

STRING

externalUserStateChangeDateTime

TIMESTAMP

creationType

STRING

onPremisesSyncEnabled

BOOLEAN

businessPhones

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

imAddresses

ARRAY<STRING>

otherMails

ARRAY<STRING>

refreshTokensValidFromDateTime

TIMESTAMP

signInSessionsValidFromDateTime

TIMESTAMP

onPremisesImmutableId

STRING

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesUserPrincipalName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

identities

ARRAY<STRUCT<issuer:STRING, issuerAssignedId:STRING, signInType:STRING>>

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

assignedPlans

ARRAY<STRUCT<assignedDateTime:TIMESTAMP, capabilityStatus:STRING, service:STRING, servicePlanId:STRING>>

licenseAssignmentStates

ARRAY<STRUCT<assignedByGroup:STRING, disabledPlans:ARRAY<STRING>, error:STRING, lastUpdatedDateTime:TIMESTAMP, skuId:STRING, state:STRING>>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

ageGroup

STRING

consentProvidedForMinor

STRING

legalAgeGroupClassification

STRING

faxNumber

STRING

mailNickname

STRING

preferredDataLocation

STRING

onPremisesDistinguishedName

STRING

passwordPolicies

STRING

isManagementRestricted

BOOLEAN

isResourceAccount

BOOLEAN

showInAddressList

BOOLEAN

deletedDateTime

TIMESTAMP

employeeLeaveDateTime

TIMESTAMP

customSecurityAttributes

VARIANT

passwordProfile

STRUCT<forceChangePasswordNextSignIn:BOOLEAN, forceChangePasswordNextSignInWithMfa:BOOLEAN>

provisionedPlans

ARRAY<STRUCT<capabilityStatus:STRING, provisioningStatus:STRING, service:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

signInActivity

STRUCT<lastNonInteractiveSignInDateTime:TIMESTAMP, lastNonInteractiveSignInRequestId:STRING, lastSignInDateTime:TIMESTAMP, lastSignInRequestId:STRING, lastSuccessfulSignInDateTime:TIMESTAMP, lastSuccessfulSignInRequestId:STRING>

authorizationInfo

STRUCT<certificateUserIds:ARRAY<STRING>>

identityParentId

STRING

manager

STRUCT<@odata.type:STRING, id:STRING, displayName:STRING, userPrincipalName:STRING, mail:STRING, jobTitle:STRING, givenName:STRING, surname:STRING, mobilePhone:STRING, officeLocation:STRING, preferredLanguage:STRING, businessPhones:ARRAY<STRING>>

フィールド

データ型

id

STRING

displayName

STRING

givenName

STRING

surname

STRING

userPrincipalName

STRING

mail

STRING

jobTitle

STRING

mobilePhone

STRING

officeLocation

STRING

preferredLanguage

STRING

accountEnabled

BOOLEAN

userType

STRING

createdDateTime

TIMESTAMP

lastPasswordChangeDateTime

TIMESTAMP

department

STRING

companyName

STRING

employeeId

STRING

employeeType

STRING

employeeHireDate

TIMESTAMP

employeeOrgData

STRUCT<costCenter:STRING, division:STRING>

securityIdentifier

STRING

usageLocation

STRING

city

STRING

state

STRING

country

STRING

postalCode

STRING

streetAddress

STRING

externalUserState

STRING

externalUserStateChangeDateTime

TIMESTAMP

creationType

STRING

onPremisesSyncEnabled

BOOLEAN

businessPhones

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

imAddresses

ARRAY<STRING>

otherMails

ARRAY<STRING>

refreshTokensValidFromDateTime

TIMESTAMP

signInSessionsValidFromDateTime

TIMESTAMP

onPremisesImmutableId

STRING

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesUserPrincipalName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

identities

ARRAY<STRUCT<issuer:STRING, issuerAssignedId:STRING, signInType:STRING>>

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

assignedPlans

ARRAY<STRUCT<assignedDateTime:TIMESTAMP, capabilityStatus:STRING, service:STRING, servicePlanId:STRING>>

licenseAssignmentStates

ARRAY<STRUCT<assignedByGroup:STRING, disabledPlans:ARRAY<STRING>, error:STRING, lastUpdatedDateTime:TIMESTAMP, skuId:STRING, state:STRING>>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

ageGroup

STRING

consentProvidedForMinor

STRING

legalAgeGroupClassification

STRING

faxNumber

STRING

mailNickname

STRING

preferredDataLocation

STRING

onPremisesDistinguishedName

STRING

passwordPolicies

STRING

isManagementRestricted

BOOLEAN

isResourceAccount

BOOLEAN

showInAddressList

BOOLEAN

deletedDateTime

TIMESTAMP

employeeLeaveDateTime

TIMESTAMP

customSecurityAttributes

VARIANT

passwordProfile

STRUCT<forceChangePasswordNextSignIn:BOOLEAN, forceChangePasswordNextSignInWithMfa:BOOLEAN>

provisionedPlans

ARRAY<STRUCT<capabilityStatus:STRING, provisioningStatus:STRING, service:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

signInActivity

STRUCT<lastNonInteractiveSignInDateTime:TIMESTAMP, lastNonInteractiveSignInRequestId:STRING, lastSignInDateTime:TIMESTAMP, lastSignInRequestId:STRING, lastSuccessfulSignInDateTime:TIMESTAMP, lastSuccessfulSignInRequestId:STRING>

authorizationInfo

STRUCT<certificateUserIds:ARRAY<STRING>>

identityParentId

STRING

manager

STRUCT<@odata.type:STRING, id:STRING, displayName:STRING, userPrincipalName:STRING, mail:STRING, jobTitle:STRING, givenName:STRING, surname:STRING, mobilePhone:STRING, officeLocation:STRING, preferredLanguage:STRING, businessPhones:ARRAY<STRING>>

注記

このテーブルにはVARIANT列が含まれているため、SCDタイプ2はサポートされていません。

groups​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

displayName

STRING

description

STRING

mail

STRING

mailNickname

STRING

mailEnabled

BOOLEAN

securityEnabled

BOOLEAN

visibility

STRING

createdDateTime

TIMESTAMP

renewedDateTime

TIMESTAMP

securityIdentifier

STRING

membershipRule

STRING

membershipRuleProcessingState

STRING

groupTypes

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

isAssignableToRole

BOOLEAN

expirationDateTime

TIMESTAMP

onPremisesSyncEnabled

BOOLEAN

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesNetBiosName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

creationOptions

ARRAY<STRING>

resourceProvisioningOptions

ARRAY<STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

classification

STRING

deletedDateTime

TIMESTAMP

infoCatalogs

ARRAY<STRING>

preferredDataLocation

STRING

preferredLanguage

STRING

resourceBehaviorOptions

ARRAY<STRING>

theme

STRING

uniqueName

STRING

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

isManagementRestricted

BOOLEAN

licenseProcessingState

STRUCT<state:STRING>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

フィールド

データ型

id

STRING

displayName

STRING

description

STRING

mail

STRING

mailNickname

STRING

mailEnabled

BOOLEAN

securityEnabled

BOOLEAN

visibility

STRING

createdDateTime

TIMESTAMP

renewedDateTime

TIMESTAMP

securityIdentifier

STRING

membershipRule

STRING

membershipRuleProcessingState

STRING

groupTypes

ARRAY<STRING>

proxyAddresses

ARRAY<STRING>

isAssignableToRole

BOOLEAN

expirationDateTime

TIMESTAMP

onPremisesSyncEnabled

BOOLEAN

onPremisesSecurityIdentifier

STRING

onPremisesSamAccountName

STRING

onPremisesNetBiosName

STRING

onPremisesDomainName

STRING

onPremisesLastSyncDateTime

TIMESTAMP

creationOptions

ARRAY<STRING>

resourceProvisioningOptions

ARRAY<STRING>

onPremisesProvisioningErrors

ARRAY<STRUCT<category:STRING, occurredDateTime:TIMESTAMP, propertyCausingError:STRING, value:STRING>>

serviceProvisioningErrors

ARRAY<STRUCT<@odata.type:STRING, createdDateTime:TIMESTAMP, errorDetail:STRING, isResolved:BOOLEAN, serviceInstance:STRING>>

classification

STRING

deletedDateTime

TIMESTAMP

infoCatalogs

ARRAY<STRING>

preferredDataLocation

STRING

preferredLanguage

STRING

resourceBehaviorOptions

ARRAY<STRING>

theme

STRING

uniqueName

STRING

assignedLicenses

ARRAY<STRUCT<disabledPlans:ARRAY<STRING>, skuId:STRING>>

isManagementRestricted

BOOLEAN

licenseProcessingState

STRUCT<state:STRING>

onPremisesExtensionAttributes

STRUCT<extensionAttribute1:STRING, extensionAttribute10:STRING, extensionAttribute11:STRING, extensionAttribute12:STRING, extensionAttribute13:STRING, extensionAttribute14:STRING, extensionAttribute15:STRING, extensionAttribute2:STRING, extensionAttribute3:STRING, extensionAttribute4:STRING, extensionAttribute5:STRING, extensionAttribute6:STRING, extensionAttribute7:STRING, extensionAttribute8:STRING, extensionAttribute9:STRING>

group_members​

主キー: group_id、 id

同期モード: 全更新のみ

フィールド

データ型

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

@odata.type

STRING

deletedDateTime

TIMESTAMP

フィールド

データ型

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

@odata.type

STRING

deletedDateTime

TIMESTAMP

group_owner​

主キー: group_id、 id

同期モード: 全更新のみ

フィールド

データ型

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

deletedDateTime

TIMESTAMP

フィールド

データ型

group_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

deletedDateTime

TIMESTAMP

applications​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

appId

STRING

displayName

STRING

description

STRING

signInAudience

STRING

publisherDomain

STRING

createdDateTime

TIMESTAMP

createdByAppId

STRING

isDisabled

BOOLEAN

disabledByMicrosoftStatus

STRING

isFallbackPublicClient

BOOLEAN

defaultRedirectUri

STRING

applicationTemplateId

STRING

identifierUris

ARRAY<STRING>

tags

ARRAY<STRING>

requiredResourceAccess

ARRAY<STRUCT<resourceAccess:ARRAY<STRUCT<id:STRING, type:STRING>>, resourceAppId:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

web

STRUCT<homePageUrl:STRING, implicitGrantSettings:STRUCT<enableAccessTokenIssuance:BOOLEAN, enableIdTokenIssuance:BOOLEAN>, logoutUrl:STRING, redirectUriSettings:ARRAY<STRUCT<index:BIGINT, uri:STRING>>, redirectUris:ARRAY<STRING>>

api

STRUCT<acceptMappedClaims:BOOLEAN, knownClientApplications:ARRAY<STRING>, oauth2PermissionScopes:ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>, preAuthorizedApplications:ARRAY<STRUCT<appId:STRING, delegatedPermissionIds:ARRAY<STRING>>>, requestedAccessTokenVersion:BIGINT>

servicePrincipalLockConfiguration

STRUCT<allProperties:BOOLEAN, credentialsWithUsageSign:BOOLEAN, credentialsWithUsageVerify:BOOLEAN, identifierUris:BOOLEAN, isEnabled:BOOLEAN, tokenEncryptionKeyId:BOOLEAN>

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

certification

STRUCT<certificationDetailsUrl:STRING, certificationExpirationDateTime:TIMESTAMP, isCertifiedByMicrosoft:BOOLEAN, isPublisherAttested:BOOLEAN, lastCertificationDateTime:TIMESTAMP>

deletedDateTime

TIMESTAMP

groupMembershipClaims

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDeviceOnlyAuthSupported

BOOLEAN

nativeAuthenticationApisEnabled

STRING

notes

STRING

optionalClaims

STRUCT<accessToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, idToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, saml2Token:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>>

parentalControlSettings

STRUCT<countriesBlockedForMinors:ARRAY<STRING>, legalAgeGroupRule:STRING>

publicClient

STRUCT<redirectUris:ARRAY<STRING>>

requestSignatureVerification

STRUCT<allowedWeakAlgorithms:STRING, isSignedRequestRequired:BOOLEAN>

samlMetadataUrl

STRING

serviceManagementReference

STRING

spa

STRUCT<redirectUris:ARRAY<STRING>>

tokenEncryptionKeyId

STRING

uniqueName

STRING

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

managerApplications

ARRAY<STRING>

authenticationBehaviors

STRUCT<blockAzureADGraphAccess:BOOLEAN, coopEnforcement:BOOLEAN, removeUnverifiedEmailClaim:BOOLEAN, requireClientServicePrincipal:BOOLEAN>

フィールド

データ型

id

STRING

appId

STRING

displayName

STRING

description

STRING

signInAudience

STRING

publisherDomain

STRING

createdDateTime

TIMESTAMP

createdByAppId

STRING

isDisabled

BOOLEAN

disabledByMicrosoftStatus

STRING

isFallbackPublicClient

BOOLEAN

defaultRedirectUri

STRING

applicationTemplateId

STRING

identifierUris

ARRAY<STRING>

tags

ARRAY<STRING>

requiredResourceAccess

ARRAY<STRUCT<resourceAccess:ARRAY<STRUCT<id:STRING, type:STRING>>, resourceAppId:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

web

STRUCT<homePageUrl:STRING, implicitGrantSettings:STRUCT<enableAccessTokenIssuance:BOOLEAN, enableIdTokenIssuance:BOOLEAN>, logoutUrl:STRING, redirectUriSettings:ARRAY<STRUCT<index:BIGINT, uri:STRING>>, redirectUris:ARRAY<STRING>>

api

STRUCT<acceptMappedClaims:BOOLEAN, knownClientApplications:ARRAY<STRING>, oauth2PermissionScopes:ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>, preAuthorizedApplications:ARRAY<STRUCT<appId:STRING, delegatedPermissionIds:ARRAY<STRING>>>, requestedAccessTokenVersion:BIGINT>

servicePrincipalLockConfiguration

STRUCT<allProperties:BOOLEAN, credentialsWithUsageSign:BOOLEAN, credentialsWithUsageVerify:BOOLEAN, identifierUris:BOOLEAN, isEnabled:BOOLEAN, tokenEncryptionKeyId:BOOLEAN>

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

certification

STRUCT<certificationDetailsUrl:STRING, certificationExpirationDateTime:TIMESTAMP, isCertifiedByMicrosoft:BOOLEAN, isPublisherAttested:BOOLEAN, lastCertificationDateTime:TIMESTAMP>

deletedDateTime

TIMESTAMP

groupMembershipClaims

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDeviceOnlyAuthSupported

BOOLEAN

nativeAuthenticationApisEnabled

STRING

notes

STRING

optionalClaims

STRUCT<accessToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, idToken:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>, saml2Token:ARRAY<STRUCT<additionalProperties:ARRAY<STRING>, essential:BOOLEAN, name:STRING, source:STRING>>>

parentalControlSettings

STRUCT<countriesBlockedForMinors:ARRAY<STRING>, legalAgeGroupRule:STRING>

publicClient

STRUCT<redirectUris:ARRAY<STRING>>

requestSignatureVerification

STRUCT<allowedWeakAlgorithms:STRING, isSignedRequestRequired:BOOLEAN>

samlMetadataUrl

STRING

serviceManagementReference

STRING

spa

STRUCT<redirectUris:ARRAY<STRING>>

tokenEncryptionKeyId

STRING

uniqueName

STRING

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

managerApplications

ARRAY<STRING>

authenticationBehaviors

STRUCT<blockAzureADGraphAccess:BOOLEAN, coopEnforcement:BOOLEAN, removeUnverifiedEmailClaim:BOOLEAN, requireClientServicePrincipal:BOOLEAN>

serviceprincipals​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

appId

STRING

displayName

STRING

appDisplayName

STRING

servicePrincipalType

STRING

accountEnabled

BOOLEAN

appOwnerOrganizationId

STRING

appRoleAssignmentRequired

BOOLEAN

signInAudience

STRING

disabledByMicrosoftStatus

STRING

preferredSingleSignOnMode

STRING

servicePrincipalNames

ARRAY<STRING>

replyUrls

ARRAY<STRING>

alternativeNames

ARRAY<STRING>

tags

ARRAY<STRING>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

createdDateTime

TIMESTAMP

oauth2PermissionScopes

ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

resourceSpecificApplicationPermissions

ARRAY<STRUCT<description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, value:STRING>>

notificationEmailAddresses

ARRAY<STRING>

logoutUrl

STRING

applicationTemplateId

STRING

createdByAppId

STRING

description

STRING

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appDescription

STRING

deletedDateTime

TIMESTAMP

homepage

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDisabled

BOOLEAN

loginUrl

STRING

notes

STRING

preferredTokenSigningKeyThumbprint

STRING

samlSingleSignOnSettings

STRUCT<relayState:STRING>

tokenEncryptionKeyId

STRING

customSecurityAttributes

VARIANT

フィールド

データ型

id

STRING

appId

STRING

displayName

STRING

appDisplayName

STRING

servicePrincipalType

STRING

accountEnabled

BOOLEAN

appOwnerOrganizationId

STRING

appRoleAssignmentRequired

BOOLEAN

signInAudience

STRING

disabledByMicrosoftStatus

STRING

preferredSingleSignOnMode

STRING

servicePrincipalNames

ARRAY<STRING>

replyUrls

ARRAY<STRING>

alternativeNames

ARRAY<STRING>

tags

ARRAY<STRING>

appRoles

ARRAY<STRUCT<allowedMemberTypes:ARRAY<STRING>, description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, value:STRING>>

createdDateTime

TIMESTAMP

oauth2PermissionScopes

ARRAY<STRUCT<adminConsentDescription:STRING, adminConsentDisplayName:STRING, id:STRING, isEnabled:BOOLEAN, origin:STRING, type:STRING, userConsentDescription:STRING, userConsentDisplayName:STRING, value:STRING>>

verifiedPublisher

STRUCT<addedDateTime:TIMESTAMP, displayName:STRING, verifiedPublisherId:STRING>

keyCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, key:STRING, keyId:STRING, startDateTime:TIMESTAMP, type:STRING, usage:STRING>>

passwordCredentials

ARRAY<STRUCT<customKeyIdentifier:STRING, displayName:STRING, endDateTime:TIMESTAMP, hint:STRING, keyId:STRING, startDateTime:TIMESTAMP>>

resourceSpecificApplicationPermissions

ARRAY<STRUCT<description:STRING, displayName:STRING, id:STRING, isEnabled:BOOLEAN, value:STRING>>

notificationEmailAddresses

ARRAY<STRING>

logoutUrl

STRING

applicationTemplateId

STRING

createdByAppId

STRING

description

STRING

addIns

ARRAY<STRUCT<id:STRING, properties:ARRAY<STRUCT<key:STRING, value:STRING>>, type:STRING>>

appDescription

STRING

deletedDateTime

TIMESTAMP

homepage

STRING

info

STRUCT<logoUrl:STRING, marketingUrl:STRING, privacyStatementUrl:STRING, supportUrl:STRING, termsOfServiceUrl:STRING>

isDisabled

BOOLEAN

loginUrl

STRING

notes

STRING

preferredTokenSigningKeyThumbprint

STRING

samlSingleSignOnSettings

STRUCT<relayState:STRING>

tokenEncryptionKeyId

STRING

customSecurityAttributes

VARIANT

注記

このテーブルにはVARIANT列が含まれているため、SCDタイプ2はサポートされていません。

directoryroles​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

displayName

STRING

description

STRING

roleTemplateId

STRING

deletedDateTime

TIMESTAMP

フィールド

データ型

id

STRING

displayName

STRING

description

STRING

roleTemplateId

STRING

deletedDateTime

TIMESTAMP

directory_role_member​

主キー: role_id、 id

同期モード: 全更新のみ

フィールド

データ型

role_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

deletedDateTime

TIMESTAMP

フィールド

データ型

role_id

STRING

id

STRING

displayName

STRING

userPrincipalName

STRING

@odata.type

STRING

mail

STRING

givenName

STRING

surname

STRING

businessPhones

ARRAY<STRING>

deletedDateTime

TIMESTAMP

directoryroletemplates​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

displayName

STRING

description

STRING

deletedDateTime

TIMESTAMP

フィールド

データ型

id

STRING

displayName

STRING

description

STRING

deletedDateTime

TIMESTAMP

directoryaudits​

プライマリーキー: id

カーソルフィールド: activityDateTime

フィールド

データ型

id

STRING

activityDateTime

TIMESTAMP

activityDisplayName

STRING

category

STRING

correlationId

STRING

loggedByService

STRING

operationType

STRING

result

STRING

resultReason

STRING

initiatedBy

STRUCT<app:STRUCT<appId:STRING, displayName:STRING, servicePrincipalId:STRING, servicePrincipalName:STRING>, user:STRUCT<agentType:STRING, displayName:STRING, homeTenantId:STRING, homeTenantName:STRING, id:STRING, ipAddress:STRING, userPrincipalName:STRING, userType:STRING>>

targetResources

ARRAY<STRUCT<displayName:STRING, groupType:STRING, id:STRING, modifiedProperties:ARRAY<STRUCT<displayName:STRING, newValue:STRING, oldValue:STRING>>, type:STRING, userPrincipalName:STRING>>

additionalDetails

ARRAY<STRUCT<key:STRING, value:STRING>>

フィールド

データ型

id

STRING

activityDateTime

TIMESTAMP

activityDisplayName

STRING

category

STRING

correlationId

STRING

loggedByService

STRING

operationType

STRING

result

STRING

resultReason

STRING

initiatedBy

STRUCT<app:STRUCT<appId:STRING, displayName:STRING, servicePrincipalId:STRING, servicePrincipalName:STRING>, user:STRUCT<agentType:STRING, displayName:STRING, homeTenantId:STRING, homeTenantName:STRING, id:STRING, ipAddress:STRING, userPrincipalName:STRING, userType:STRING>>

targetResources

ARRAY<STRUCT<displayName:STRING, groupType:STRING, id:STRING, modifiedProperties:ARRAY<STRUCT<displayName:STRING, newValue:STRING, oldValue:STRING>>, type:STRING, userPrincipalName:STRING>>

additionalDetails

ARRAY<STRUCT<key:STRING, value:STRING>>

signins​

プライマリーキー: id

カーソルフィールド: createdDateTime

フィールド

データ型

id

STRING

createdDateTime

TIMESTAMP

userDisplayName

STRING

userPrincipalName

STRING

userId

STRING

appId

STRING

appDisplayName

STRING

ipAddress

STRING

clientAppUsed

STRING

correlationId

STRING

conditionalAccessStatus

STRING

isInteractive

BOOLEAN

resourceDisplayName

STRING

resourceId

STRING

status

STRUCT<additionalDetails:STRING, errorCode:BIGINT, failureReason:STRING>

location

STRUCT<city:STRING, countryOrRegion:STRING, geoCoordinates:STRUCT<altitude:DOUBLE, latitude:DOUBLE, longitude:DOUBLE>, state:STRING>

deviceDetail

STRUCT<browser:STRING, deviceId:STRING, displayName:STRING, isCompliant:BOOLEAN, isManaged:BOOLEAN, operatingSystem:STRING, trustType:STRING>

authenticationAppDeviceDetails

STRUCT<appVersion:STRING, clientApp:STRING, deviceId:STRING, operatingSystem:STRING>

appliedConditionalAccessPolicies

ARRAY<STRUCT<displayName:STRING, enforcedGrantControls:ARRAY<STRING>, enforcedSessionControls:ARRAY<STRING>, id:STRING, result:STRING>>

riskDetail

STRING

riskLevelAggregated

STRING

riskLevelDuringSignIn

STRING

riskState

STRING

riskEventTypes

ARRAY<STRING>

userAgent

STRING

homeTenantId

STRING

resourceTenantId

STRING

servicePrincipalId

STRING

riskEventTypes_v2

ARRAY<STRING>

servicePrincipalName

STRING

_observed_at

TIMESTAMP

フィールド

データ型

id

STRING

createdDateTime

TIMESTAMP

userDisplayName

STRING

userPrincipalName

STRING

userId

STRING

appId

STRING

appDisplayName

STRING

ipAddress

STRING

clientAppUsed

STRING

correlationId

STRING

conditionalAccessStatus

STRING

isInteractive

BOOLEAN

resourceDisplayName

STRING

resourceId

STRING

status

STRUCT<additionalDetails:STRING, errorCode:BIGINT, failureReason:STRING>

location

STRUCT<city:STRING, countryOrRegion:STRING, geoCoordinates:STRUCT<altitude:DOUBLE, latitude:DOUBLE, longitude:DOUBLE>, state:STRING>

deviceDetail

STRUCT<browser:STRING, deviceId:STRING, displayName:STRING, isCompliant:BOOLEAN, isManaged:BOOLEAN, operatingSystem:STRING, trustType:STRING>

authenticationAppDeviceDetails

STRUCT<appVersion:STRING, clientApp:STRING, deviceId:STRING, operatingSystem:STRING>

appliedConditionalAccessPolicies

ARRAY<STRUCT<displayName:STRING, enforcedGrantControls:ARRAY<STRING>, enforcedSessionControls:ARRAY<STRING>, id:STRING, result:STRING>>

riskDetail

STRING

riskLevelAggregated

STRING

riskLevelDuringSignIn

STRING

riskState

STRING

riskEventTypes

ARRAY<STRING>

userAgent

STRING

homeTenantId

STRING

resourceTenantId

STRING

servicePrincipalId

STRING

riskEventTypes_v2

ARRAY<STRING>

servicePrincipalName

STRING

_observed_at

TIMESTAMP

user_registration_detail​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

userPrincipalName

STRING

userDisplayName

STRING

userType

STRING

isAdmin

BOOLEAN

isSsprRegistered

BOOLEAN

isSsprEnabled

BOOLEAN

isSsprCapable

BOOLEAN

isMfaRegistered

BOOLEAN

isMfaCapable

BOOLEAN

isPasswordlessCapable

BOOLEAN

isSystemPreferredAuthenticationMethodEnabled

BOOLEAN

userPreferredMethodForSecondaryAuthentication

STRING

lastUpdatedDateTime

TIMESTAMP

methodsRegistered

ARRAY<STRING>

systemPreferredAuthenticationMethods

ARRAY<STRING>

フィールド

データ型

id

STRING

userPrincipalName

STRING

userDisplayName

STRING

userType

STRING

isAdmin

BOOLEAN

isSsprRegistered

BOOLEAN

isSsprEnabled

BOOLEAN

isSsprCapable

BOOLEAN

isMfaRegistered

BOOLEAN

isMfaCapable

BOOLEAN

isPasswordlessCapable

BOOLEAN

isSystemPreferredAuthenticationMethodEnabled

BOOLEAN

userPreferredMethodForSecondaryAuthentication

STRING

lastUpdatedDateTime

TIMESTAMP

methodsRegistered

ARRAY<STRING>

systemPreferredAuthenticationMethods

ARRAY<STRING>

identityproviders​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

displayName

STRING

identityProviderType

STRING

@odata.type

STRING

フィールド

データ型

id

STRING

displayName

STRING

identityProviderType

STRING

@odata.type

STRING

adminconsentrequestpolicy​

プライマリーキー: policy_id

同期モード: 全更新のみ

フィールド

データ型

policy_id

STRING

isEnabled

BOOLEAN

notifyReviewers

BOOLEAN

remindersEnabled

BOOLEAN

requestDurationInDays

BIGINT

version

BIGINT

reviewers

ARRAY<STRUCT<query:STRING, queryRoot:STRING, queryType:STRING, reviewerId:STRING, scopeType:STRING>>

フィールド

データ型

policy_id

STRING

isEnabled

BOOLEAN

notifyReviewers

BOOLEAN

remindersEnabled

BOOLEAN

requestDurationInDays

BIGINT

version

BIGINT

reviewers

ARRAY<STRUCT<query:STRING, queryRoot:STRING, queryType:STRING, reviewerId:STRING, scopeType:STRING>>

role_eligibility_schedule​

プライマリーキー: id

同期モード: 全更新のみ

フィールド

データ型

id

STRING

principalId

STRING

roleDefinitionId

STRING

directoryScopeId

STRING

appScopeId

STRING

createdUsing

STRING

createdDateTime

TIMESTAMP

modifiedDateTime

TIMESTAMP

status

STRING

memberType

STRING

scheduleInfo

STRUCT<expiration:STRUCT<duration:STRING, endDateTime:TIMESTAMP, type:STRING>, recurrence:STRUCT<pattern:STRUCT<dayOfMonth:INT, daysOfWeek:ARRAY<STRING>, firstDayOfWeek:STRING, index:STRING, interval:INT, month:INT, type:STRING>, range:STRUCT<endDate:DATE, numberOfOccurrences:INT, recurrenceTimeZone:STRING, startDate:DATE, type:STRING>>, startDateTime:TIMESTAMP>

フィールド

データ型

id

STRING

principalId

STRING

roleDefinitionId

STRING

directoryScopeId

STRING

appScopeId

STRING

createdUsing

STRING

createdDateTime

TIMESTAMP

modifiedDateTime

TIMESTAMP

status

STRING

memberType

STRING

scheduleInfo

STRUCT<expiration:STRUCT<duration:STRING, endDateTime:TIMESTAMP, type:STRING>, recurrence:STRUCT<pattern:STRUCT<dayOfMonth:INT, daysOfWeek:ARRAY<STRING>, firstDayOfWeek:STRING, index:STRING, interval:INT, month:INT, type:STRING>, range:STRUCT<endDate:DATE, numberOfOccurrences:INT, recurrenceTimeZone:STRING, startDate:DATE, type:STRING>>, startDateTime:TIMESTAMP>

必要なOAuth権限​

Microsoft Entra IDアプリ登録に以下のMicrosoft Graphアプリケーション権限を付与し、管理者同意を付与します。「Microsoft Graph のアクセス許可リファレンス」を参照してください。

権限

の必須要件

User.Read.All

users

AuditLog.Read.All

directoryaudits、signins、user_registration_detail、およびsignInActivity列の users

CustomSecAttributeAssignment.Read.All

users の customSecurityAttributes カラムと serviceprincipals

Group.Read.All

groups

GroupMember.Read.All

group_members, group_owner

Application.Read.All

applications, serviceprincipals

RoleManagement.Read.Directory

directoryroles、directory_role_member、 directoryroletemplates

RoleEligibilitySchedule.Read.Directory

role_eligibility_schedule

IdentityProvider.Read.All

identityproviders

Policy.Read.All

adminconsentrequestpolicyおよび appliedConditionalAccessPolicies 列の signins

権限

の必須要件

User.Read.All

users

AuditLog.Read.All

directoryaudits、signins、user_registration_detail、およびsignInActivity列の users

CustomSecAttributeAssignment.Read.All

users の customSecurityAttributes カラムと serviceprincipals

Group.Read.All

groups

GroupMember.Read.All

group_members, group_owner

Application.Read.All

applications, serviceprincipals

RoleManagement.Read.Directory

directoryroles、directory_role_member、 directoryroletemplates

RoleEligibilitySchedule.Read.Directory

role_eligibility_schedule

IdentityProvider.Read.All

identityproviders

Policy.Read.All

adminconsentrequestpolicyおよび appliedConditionalAccessPolicies 列の signins