azure-entra-user-profile-extension-data
User directory profiles and extension attributes may contain personal or customer-controlled sensitive data.
Where it sits
| location | microsoft.graph.user.{businessPhones,mobilePhone,mail,otherMails,onPremisesExtensionAttributes} |
|---|
| location kind | data_record |
|---|
| data kinds | pii sensitive_data |
|---|
| emits edge | ContainsSecret |
|---|
| service | Entra ID (azure:entra) |
|---|
Collection recipe
| access mode | read_api |
|---|
| operation | GET /users/{user-id} |
|---|
| response path | {businessPhones,mobilePhone,mail,otherMails,onPremisesExtensionAttributes} |
|---|
| encoding | json |
|---|
| params | {"user-id": "\u003cuser-id\u003e"} |
|---|
Required permissions
References