skills.rest
ultraviollettnympho
ultraviollettnymphoCOMMUNITY
Explore all skills by this author →
GitHub

entra-agent-user

Create agent users in Microsoft Entra ID from agent identities via Microsoft Graph.

1|1|Updated Jan 29, 2026
Search Tags:#microsoft graph#powershell#agent identity#microsoft entra#digital worker#identity provisioning#agent user
One-click install
npx skills add https://github.com/ultraviollettnympho/transit-ticket --skill entra-agent-user-ultraviollettnympho
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: entra-agent-user
Source: https://github.com/ultraviollettnympho/transit-ticket/tree/main/.github/skills/entra-agent-user
Command: npx skills add https://github.com/ultraviollettnympho/transit-ticket --skill entra-agent-user-ultraviollettnympho

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? AI agents acting as digital workers often need user identities to access services like Exchange mailboxes, Teams, and org charts that strictly require user tokens, but provisioning these specialized agent users in Microsoft Entra ID involves non-obvious prerequisites, permissions, and API calls. ## Core Features & Use Cases - Agent User Provisioning: Step-by-step Graph API and PowerShell instructions to create an agent user linked to a parent agent identity with the correct identityParentId. - Identity Verification: Guidance to confirm a service principal is a true agentIdentity (ServiceIdentity type) before attempting user creation, avoiding common 400 errors. - Post-Creation Configuration: Instructions for assigning a manager, setting usage location, and assigning licenses so the agent user gets a mailbox and Teams presence. - Use Case: An IT admin building an AI support agent needs it to send email from its own Exchange mailbox and appear in Teams; this Skill walks them through creating the agent user, licensing it, and troubleshooting provisioning errors. ## Quick Start Create an agent user in Microsoft Entra ID for my agent identity with object ID <id>, including setting usage location and assigning a license.

Frequently Asked Questions about entra-agent-user

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create an agent user in Microsoft Entra ID?▼

Send a POST request to https://graph.microsoft.com/beta/users/microsoft.graph.agentUser with accountEnabled, displayName, mailNickname, userPrincipalName, and identityParentId pointing to an agent identity. PowerShell examples using Invoke-MgGraphRequest are also provided.

What permissions are required to create an agent user?▼

You need AgentIdUser.ReadWrite.IdentityParentedBy (least privileged), AgentIdUser.ReadWrite.All, or User.ReadWrite.All. In delegated scenarios, the caller must also hold at least the Agent ID Administrator role.

Why does agent user creation fail with 'IdentityParent does not exist'?▼

The identityParentId references an object that is not a true agent identity. Verify the service principal has @odata.type #microsoft.graph.agentIdentity and servicePrincipalType ServiceIdentity; regular app registrations will not work.

Can an agent identity have more than one agent user?▼

No, the relationship is strictly 1:1. Attempting to create a second agent user for the same agent identity returns a 400 Bad Request error.

Why does license assignment fail for an agent user?▼

License assignment fails if usage location is not set first. PATCH the user with a usageLocation value such as US before calling the assignLicense endpoint with the target skuId.

What can agent users not do in Microsoft Entra ID?▼

Agent users cannot have passwords, passkeys, or interactive sign-in, cannot hold privileged admin roles, and cannot join role-assignable groups. They authenticate through their parent agent identity's credentials.

Related Skills

Explore More Software Engineering Skills→
RemseyMailjardRemseyMailjard

entra-agent-id

Provision OAuth2-capable AI agent identities via Microsoft Graph beta API.

Community
Advanced
microsoftmicrosoft
3.0k

entra-agent-id

Provision Microsoft Entra Agent Identities and configure OAuth 2.0 token exchange via Microsoft Graph.

Official
Advanced
afoxnyc3afoxnyc3

user-access-review

Review Entra ID accounts for risky authentication, privileged access, and entitlement misalignment.

Community
Intermediate
olivomarcoolivomarco
66

azure-rbac

Identify minimal Azure RBAC roles and generate CLI and Bicep assignment commands.

Community
Advanced