Microsoft Entra · Schema

User

Represents a Microsoft Entra ID user account. Contains identity, contact, organizational, and authentication properties.

Access ManagementAuthenticationAzure ADEntraIdentityIdentity GovernanceMicrosoftNetwork SecuritySecurityZero Trust

Properties

Name Type Description
id string Unique identifier for the user (GUID). Assigned automatically by the directory.
displayName string The name displayed in the address book for the user
givenName ['string', 'null'] The given name (first name) of the user
surname ['string', 'null'] The surname (family name) of the user
mail ['string', 'null'] The SMTP address of the user. This property cannot be set during creation for cloud-only users.
userPrincipalName string The user principal name (UPN) of the user in the format alias@domain. The domain must be present in the tenant's verified domains collection.
mailNickname string The mail alias for the user. Must be specified when creating a new user.
accountEnabled boolean true if the account is enabled; otherwise, false. Must be specified when creating a new user.
jobTitle ['string', 'null'] The user's job title
department ['string', 'null'] The department in which the user works
officeLocation ['string', 'null'] The office location in the user's place of business
companyName ['string', 'null'] The company name associated with the user
mobilePhone ['string', 'null'] The primary cellular telephone number for the user
businessPhones array The telephone numbers for the user's business
streetAddress ['string', 'null'] The street address of the user's place of business
city ['string', 'null'] The city in which the user is located
state ['string', 'null'] The state or province in the user's address
postalCode ['string', 'null'] The postal code for the user's postal address
country ['string', 'null'] The country or region in which the user is located (ISO 3166 two-letter code)
usageLocation ['string', 'null'] Two-letter country code (ISO 3166). Required for users assigned licenses due to legal requirements for checking service availability.
preferredLanguage ['string', 'null'] The preferred language for the user in ISO 639-1 code format (e.g., en-US)
userType string Classification of the user type relative to the tenant
employeeId ['string', 'null'] The employee identifier assigned by the organization
employeeType ['string', 'null'] Captures the type of worker (e.g., Employee, Contractor, Consultant, Vendor)
employeeHireDate ['string', 'null'] The date and time when the user was hired
onPremisesSyncEnabled ['boolean', 'null'] true if this user is synced from an on-premises directory; false if originally created in Azure AD; null if never synced
onPremisesSamAccountName ['string', 'null'] The on-premises SAM account name synchronized from the on-premises directory
proxyAddresses array List of proxy addresses for the user including SMTP and smtp prefixed addresses
assignedLicenses array Licenses assigned to the user
createdDateTime string The date and time the user was created
lastSignInDateTime ['string', 'null'] The date and time of the user's most recent interactive sign-in activity
View JSON Schema on GitHub

JSON Schema

microsoft-entra-graph-identity-user-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "User",
  "type": "object",
  "description": "Represents a Microsoft Entra ID user account. Contains identity, contact, organizational, and authentication properties.",
  "properties": {
    "id": {
      "type": "string",
      "description": "Unique identifier for the user (GUID). Assigned automatically by the directory."
    },
    "displayName": {
      "type": "string",
      "description": "The name displayed in the address book for the user"
    },
    "givenName": {
      "type": "['string', 'null']",
      "description": "The given name (first name) of the user"
    },
    "surname": {
      "type": "['string', 'null']",
      "description": "The surname (family name) of the user"
    },
    "mail": {
      "type": "['string', 'null']",
      "description": "The SMTP address of the user. This property cannot be set during creation for cloud-only users."
    },
    "userPrincipalName": {
      "type": "string",
      "description": "The user principal name (UPN) of the user in the format alias@domain. The domain must be present in the tenant's verified domains collection."
    },
    "mailNickname": {
      "type": "string",
      "description": "The mail alias for the user. Must be specified when creating a new user."
    },
    "accountEnabled": {
      "type": "boolean",
      "description": "true if the account is enabled; otherwise, false. Must be specified when creating a new user."
    },
    "jobTitle": {
      "type": "['string', 'null']",
      "description": "The user's job title"
    },
    "department": {
      "type": "['string', 'null']",
      "description": "The department in which the user works"
    },
    "officeLocation": {
      "type": "['string', 'null']",
      "description": "The office location in the user's place of business"
    },
    "companyName": {
      "type": "['string', 'null']",
      "description": "The company name associated with the user"
    },
    "mobilePhone": {
      "type": "['string', 'null']",
      "description": "The primary cellular telephone number for the user"
    },
    "businessPhones": {
      "type": "array",
      "description": "The telephone numbers for the user's business"
    },
    "streetAddress": {
      "type": "['string', 'null']",
      "description": "The street address of the user's place of business"
    },
    "city": {
      "type": "['string', 'null']",
      "description": "The city in which the user is located"
    },
    "state": {
      "type": "['string', 'null']",
      "description": "The state or province in the user's address"
    },
    "postalCode": {
      "type": "['string', 'null']",
      "description": "The postal code for the user's postal address"
    },
    "country": {
      "type": "['string', 'null']",
      "description": "The country or region in which the user is located (ISO 3166 two-letter code)"
    },
    "usageLocation": {
      "type": "['string', 'null']",
      "description": "Two-letter country code (ISO 3166). Required for users assigned licenses due to legal requirements for checking service availability."
    },
    "preferredLanguage": {
      "type": "['string', 'null']",
      "description": "The preferred language for the user in ISO 639-1 code format (e.g., en-US)"
    },
    "userType": {
      "type": "string",
      "description": "Classification of the user type relative to the tenant"
    },
    "employeeId": {
      "type": "['string', 'null']",
      "description": "The employee identifier assigned by the organization"
    },
    "employeeType": {
      "type": "['string', 'null']",
      "description": "Captures the type of worker (e.g., Employee, Contractor, Consultant, Vendor)"
    },
    "employeeHireDate": {
      "type": "['string', 'null']",
      "description": "The date and time when the user was hired"
    },
    "onPremisesSyncEnabled": {
      "type": "['boolean', 'null']",
      "description": "true if this user is synced from an on-premises directory; false if originally created in Azure AD; null if never synced"
    },
    "onPremisesSamAccountName": {
      "type": "['string', 'null']",
      "description": "The on-premises SAM account name synchronized from the on-premises directory"
    },
    "proxyAddresses": {
      "type": "array",
      "description": "List of proxy addresses for the user including SMTP and smtp prefixed addresses"
    },
    "assignedLicenses": {
      "type": "array",
      "description": "Licenses assigned to the user"
    },
    "createdDateTime": {
      "type": "string",
      "description": "The date and time the user was created"
    },
    "lastSignInDateTime": {
      "type": "['string', 'null']",
      "description": "The date and time of the user's most recent interactive sign-in activity"
    }
  }
}