Codeunit 9010 "Azure AD User Management"

System Application · System.Azure.Identity · BC23-30 · source at ea08af5e · facts from BC29

Properties

Events published

• OnRestoreDefaultPermissions(UserSecurityID: Guid) (integration): Integration event, raised from “Azure AD User Update Wizard” page when the changes are applied.

Procedures

• CreateNewUsersFromAzureAD(): Retrieves all the users from Microsoft Entra. If the users already exist in the database, they are updated to match the ones from Microsoft Entra; otherwise new users are inserted in the database.
• CreateNewUserFromGraphUser(GraphUserInfo: DotNet UserInfo): Creates a new user from a Microsoft Entra user.
• SynchronizeLicensedUserFromDirectory(AuthenticationEmail: Text): Boolean: Synchronizes a user with the Microsoft Entra user corresponding to the authentication email that is passed as a parameter. If the user record does not exist, it gets created.
• SynchronizeAllLicensedUsersFromDirectory(): Synchronizes all the users from the database with the ones from Microsoft Entra. Microsoft Entra users that do not exist in the database are created.
• IsUserTenantAdmin(): Boolean: Checks if the user is a tenant admin.
• ArePermissionsCustomized(UserSecurityId: Guid): Boolean: Checks whether custom permissions are assigned to the user.
• IsUserDelegated(UserSecID: Guid): Boolean: Checks if the user is a delegated user.

Triggers

OnRun

Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an Object::"Name" argument. Interface dispatch and calls through events are not counted, so the list is not complete.

• Codeunit 9017 “Azure AD User Mgmt. Impl.” (8 calls: ArePermissionsCustomized → ArePermissionsCustomized, CreateNewUserFromGraphUser → CreateNewUserFromGraphUser, CreateNewUsersFromAzureAD → CreateNewUsersFromAzureAD, …)

Called by

• Codeunit 1432 “Satisfaction Survey Impl.” (1 call: CheckExternalUser → IsUserDelegated)
• Codeunit 151 “System Initialization Impl.” (1 call: Init → (object))
• Codeunit 30004 “APIV2 - Aut. Create New Users” (1 call: OnRun → CreateNewUsersFromAzureAD)
• Codeunit 9033 “Invite External Accountant” (1 call: CreateNewUser → CreateNewUserFromGraphUser)
• Codeunit 9175 “User Settings Impl.” (1 call: CheckPermissionsInternal → IsUserTenantAdmin)
• Codeunit 9561 “Document Sharing Impl.” (1 call: ShareEnabled → IsUserDelegated)
• Page 3845 “Scheduled Tasks” (1 call: OnOpenPage → IsUserTenantAdmin)

Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: bcatlas_resolve_node(object_type: "codeunit", object_name: "Azure AD User Management"), then bcatlas_get_procedure_body or bcatlas_get_neighbors on the returned id.