Assign License to User

User ID or username of the Azure Active Directory user. This is the user's User Principal Name (UPN). A UPN is formed by taking the username and domain and combining them with the @ separator. This could be the user's email address, but not always.

For example, john.doe@somedomain.com.

Field for the user to describe themselves.

true if the account is enabled; otherwise, false.

Age group of the user.

Allowed values: null, minor, notAdult, and adult.

Licenses that are assigned to the user.

Plans that are assigned to the user.

Birthday of the user. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time.

For example, midnight UTC on Jan 1, 2014 is: 2014-01-01T00:00:00Z.

Telephone numbers for the user.

City in which the user is located.

Company name associated with the user.

Whether consent has been obtained for minors.

Allowed values: null, granted, denied, and notRequired.

The country or region in which the user is located. For example, US or UK.

Created date of the user object.

Name of the department in which the user works.

Name displayed in the address book for the user.

This is usually the combination of the user's first name, middle initial, and last name.

Employee identifier assigned to the user by the organization.

Fax number of the user.

Given name (first name) of the user.

The hire date of the user. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time.

For example, midnight UTC on Jan 1, 2014 would look like this: 2014-01-01T00:00:00Z.

Unique identifier for the user.

Instant message voice over IP (VOIP) session initiation protocol (SIP) addresses for the user.

List of the user's interests.

true if the user is a resource account; otherwise, false. null value should be considered false.

Used by enterprise applications to determine the legal age group of the user.

This property is read-only and calculated based on ageGroup and consentProvidedForMinor properties.

Allowed values: null, minorWithOutParentalConsent, minorWithParentalConsent, minorNoParentalConsentRequired, notAdult, and adult.

State of license assignments for this user.

SMTP address for the user.

For example, jeff@contoso.onmicrosoft.com.

Mail alias for the user.

Primary cellular telephone number for the user.

URL for the user's personal site.

Office location in the user's place of business.

Contains the on-premises Active Directory distinguished name or DN. The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory using Azure Active Directory Connect.

Contains the on-premises domainFQDN, also called dnsDomainName, synchronized from the on-premises directory.

The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory using Azure Active Directory Connect.

Contains extensionAttributes 1 through 15 for the user. The individual extension attributes are neither selectable nor filterable.

For an onPremisesSyncEnabled user, this set of properties is on-premises-sourced and is read-only.

For a cloud-only user (where onPremisesSyncEnabled is false), these properties may be set during creation or update.

Property is used to associate an on-premises Active Directory user account to their Azure Active Directory user object.

This property must be specified when creating a user account in the Graph if you're using a federated domain for the user's userPrincipalName (UPN) property.

Last time at which the object was synced with the on-premises directory; for example: 2013-02-16T03:04:54Z.

The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time.

For example, midnight UTC on Jan 1, 2014 would look like this: 2014-01-01T00:00:00Z.

Errors when using Microsoft synchronization product during provisioning.

Contains the on-premises samAccountName synchronized from the on-premises directory.

The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory using Azure Active Directory Connect.

Contains the on-premises security identifier (SID) for the user that was synchronized from on-premises to the cloud.

• true if this object is synced from an on-premises directory

• false if this object was originally synced from an on-premises directory but is no longer synced

• null if this object has never been synced from an on-premises directory (default).

Contains the on-premises userPrincipalName synchronized from the on-premises directory.

The property is only populated for customers who are synchronizing their on-premises directory to Azure Active Directory using Azure Active Directory Connect.

List of other email addresses for the user.

Specifies password policies for the user.

This value is an enumeration with one possible value being “DisableStrongPassword”, which allows weaker passwords than the default policy to be specified. “DisablePasswordExpiration” can also be specified. The two may be specified together; for example: "DisablePasswordExpiration, DisableStrongPassword".

Password profile for the user. The profile contains the user's password.

This property is required when a user is created. The password in the profile must satisfy the minimum requirements as specified by the passwordPolicies property. By default, a strong password is required.

List for the user to enumerate their past projects.

Postal code for the user's postal address. The postal code is specific to the user's country or region.

For example, in the United States of America, this attribute contains the ZIP code.

Preferred data location for the user.

The preferred language for the user. Should follow ISO 639-1 Code.

For example en-US.

Preferred name for the user.

Plans that are provisioned for the user.

List of user proxy addresses.

For example: ["SMTP: bob@contoso.com", "smtp: bob@sales.contoso.com"].

List for the user to enumerate their responsibilities.

true if the Outlook global address list should contain this user, otherwise false.

If not set, this is treated as true. For users invited through the invitation manager, this property is set to false.

List for the user to enumerate their skills.

Any refresh tokens or sessions tokens (session cookies) issued before this time are invalid. Applications receive an error when using an invalid refresh or sessions token to acquire a delegated access token (to access APIs such as Microsoft Graph). If this happens, the application needs to acquire a new refresh token by making a request to the authorize endpoint.

State or province in the user's address.

Street address of the user's place of business.

User's surname (family name or last name).

Two letter country code (ISO standard 3166). Required for user-assigned licenses, due to legal requirement to check for availability of services in countries.

For examples include: US, JP, and GB.

User principal name (UPN; also known as Username) of the user. The UPN is an Internet-style login name for the user based on the Internet standard RFC 822.

By convention, this should map to the user's email name. The general format is alias@domain, where the domain must be present in the tenant's collection of verified domains.