---

name: azure-ad description: Azure AD/Entra ID operations including user queries, group management, and guest invitation. Use for listing users, searching groups, checking memberships, inviting external guests, or troubleshooting Azure AD.

Azure AD/Entra ID Operations

IMPORTANT: Intent Detection

Parse user input to determine intent:

Guest User Invitation (/invite)

Invite external users to Azure AD tenant with optional group membership and OSDU preshipping access.

Usage

Copy/invite user@company.com
/invite user@company.com --groups "Group1,Group2"
/invite user@company.com --groups "Group1" --preshipping
/invite user@company.com --like existing@company.com

Examples

Options

Workflow

1. Run /audit <company> to see how existing users are set up
2. Note their AD groups and whether they have preshipping access
3. Run /invite with the same setup for new users

Common AD Groups

---

AI Execution (Internal)

When user requests an invite (not help), run:

Copyuv run .claude/skills/azure-ad/scripts/invite.py invite \
  --email "EMAIL" \
  [--groups "GROUP1,GROUP2"] \
  [--preshipping] \
  [--like "EXISTING_EMAIL"] \
  [--dry-run]

Output Presentation

Present the script output directly to the user. Do NOT summarize.

---

Azure AD Queries

Prerequisites

Verify Azure CLI authentication:

Copyaz account show --query "{name:name, user:user.name, tenantId:tenantId}" -o table

User Queries

Copy# List all users
az ad user list --query "[].{name:displayName, mail:mail, type:userType}" -o table

# Find specific user
az ad user show --id "user@example.com" -o table

# Filter guest users
az ad user list --filter "userType eq 'Guest'" -o table

# Search by name prefix
az ad user list --filter "startswith(displayName,'John')" -o table

Group Queries

Copy# List all groups
az ad group list --query "[].{name:displayName, type:securityEnabled}" -o table

# Get group members
az ad group member list --group "GroupName" --query "[].{name:displayName, mail:mail}" -o table

# Get user's groups
az ad user get-member-groups --id "user@example.com" -o table

Group Management

Copy# Add user to group
USER_ID=$(az ad user show --id "user@example.com" --query "id" -o tsv)
GROUP_ID=$(az ad group show --group "GroupName" --query "id" -o tsv)
az ad group member add --group "$GROUP_ID" --member-id "$USER_ID"

Required Permissions

Error Handling

Reference Files

• reference/commands.md - Full CLI command reference
• reference/troubleshooting.md - Detailed error solutions
• scripts/invite.py - Guest invitation script