azuread - support Microsoft Graph Api in addition to Azure AD Graph Api

[kamakay]

Dear TF members,

I would ask for the support of Microsoft Graph API in addition to Azure AD Graph API (Azure AD Graph API will be disconinued by the end of june 22).

The current doc such us for the azuread_user the doc states "If you're authenticating using a Service Principal then it must have permissions to Read directory data within the Windows Azure Active Directory API ."

Do you have a plan for this adoption ?

[kaovd]

This change recently went in as of 1.5.0, see the changelogs and docs for how to use. Azure Ad / the old api will be dropped eventually

#323 (comment)

[kamakay]

Thanks, I was reading again the doc for 1.5.0 release ant it states "Windows Active Directory API"
https://registry.terraform.io/providers/hashicorp/azuread/latest/docs/data-sources/user

As far as I undersand MS Graph API are in beta support, so we need to stay tuned.

Thanks again for the info.

R

[manicminer]

Hi @kamakay, thanks for making this request! @kaovd is correct, our initial beta support for Microsoft Graph was recently released and will be followed by a GA release in the near future. As this is currently in beta, not all of the docs have been updated yet with relevant details such as API permissions, however you can find an overview of the changes in the Migration Guide (including new API permissions for MS Graph).

When enabling beta support for MS Graph, all resources and data sources will be managed via MS Graph, however some requests will still be made to the AAD Graph API so it's important that you don't remove your existing app permissions just yet.

As this is currently being tracked in #323, I'm going to close this as a duplicate, but please be sure to subscribe to #323 for further updates. Thanks!

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.