> ## Documentation Index
> Fetch the complete documentation index at: https://docs.langdock.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra

> Review the minimum OAuth scopes for every Microsoft Entra action.

Review the minimum standard delegated scope mapping for every Microsoft Entra action. The mapping covers directory users, groups, group members, and manager lookup. `Sites.Selected` does not apply.

## Minimal scopes per action

<Note>
  Each Microsoft Entra connection also requests `openid`, `offline_access`, and `User.Read`. These connection scopes apply in addition to the action scopes in the table.
</Note>

<div style={{overflowX: "auto"}}>
  <table style={{width: "100%", maxWidth: "100%", minWidth: 0, tableLayout: "fixed", whiteSpace: "normal", overflowWrap: "anywhere", wordBreak: "break-word"}}>
    <colgroup>
      <col style={{width: "20%"}} />

      <col style={{width: "25%"}} />

      <col style={{width: "55%"}} />
    </colgroup>

    <thead>
      <tr>
        <th style={{width: "20%"}}>Action</th>
        <th style={{width: "25%"}}>Description</th>
        <th style={{width: "55%"}}>Minimum scopes</th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <td><strong>Get manager</strong></td>
        <td>Gets the direct manager of a user.</td>
        <td><code>User.Read.All</code></td>
      </tr>

      <tr>
        <td><strong>Resolve group</strong></td>
        <td>Resolves a group in the directory.</td>
        <td><code>GroupMember.Read.All</code></td>
      </tr>

      <tr>
        <td><strong>Search group members</strong></td>
        <td>Lists user members of a group, including profile fields and optional manager.</td>
        <td><code>GroupMember.Read.All</code><br /><code>User.Read.All</code></td>
      </tr>

      <tr>
        <td><strong>Search groups</strong></td>
        <td>Searches groups in the directory.</td>
        <td><code>GroupMember.Read.All</code></td>
      </tr>

      <tr>
        <td><strong>Search users</strong></td>
        <td>Searches users in the directory.</td>
        <td><code>User.Read.All</code></td>
      </tr>
    </tbody>
  </table>
</div>

## Related pages

* [Microsoft Integration Scopes](/en/admin/manage-integrations/microsoft-integration-scopes)
* [Microsoft integrations: permissions and admin approval](/en/admin/manage-integrations/integration-setup-guides/microsoft)