Codeunit 9024 "Azure AD Graph User"

System Application · System.Azure.Identity · BC23-30 · source at ea08af5e · facts from BC29

Properties

Procedures

• GetGraphUser(UserSecurityId: Guid; var User: DotNet UserInfo): Gets the Microsoft Entra user with the given security ID.
• GetGraphUser(UserSecurityId: Guid; ForceFetchFromGraph: Boolean; var User: DotNet UserInfo): Gets the Microsoft Entra user with the given security ID.
• GetObjectId(UserSecurityId: Guid): Text: Retrieves the user’s unique identifier, which is its object ID, from Microsoft Entra.
• GetUserAuthenticationObjectId(UserSecurityId: Guid): Text: Gets the user’s authentication object ID.
• TryGetUserAuthenticationObjectId(UserSecurityId: Guid; var AuthenticationObjectId: Text): Boolean: Tries to get the user’s authentication object ID.
• GetUser(AuthenticationObjectID: Text; var User: Record User): Boolean: Gets the user from a given Authentication object ID.
• IsUserDelegatedAdmin(): Boolean: Returns whether the current user is Delegated Admin.
• IsUserDelegatedHelpdesk(): Boolean: Returns whether the current user is Delegated Helpdesk.
• IsUserDelegated(): Boolean + BC27: Returns whether the current user is delegated.
• UpdateUserFromAzureGraph(var User: Record User; var AzureADUser: DotNet UserInfo): Boolean: Updates the user record with information from Microsoft Entra.
• GetAuthenticationEmail(GraphUserInfo: DotNet UserInfo): Text[250]: Gets the authentication email of the provided Graph user.
• GetDisplayName(GraphUserInfo: DotNet UserInfo): Text[50]: Gets the display name of the provided Graph user.
• GetContactEmail(GraphUserInfo: DotNet UserInfo): Text[250]: Gets the contact email of the provided Graph user.
• GetFullName(GraphUserInfo: DotNet UserInfo): Text[80]: Gets the full name of the provided Graph user.
• GetPreferredLanguageID(GraphUserInfo: DotNet UserInfo): Integer: Gets the preferred language ID of the provided Graph user.
• EnsureAuthenticationEmailIsNotInUse(AuthenticationEmail: Text): Ensures that an email address specified for authorization is not already in use by another database user. If it is, all the database users with this authentication email address are updated and their email addresses are updated the ones that are specified in Microsoft Entra.

Calls

From the extracted call graph of BC29 (graphify-al on the snapshot checkout): calls whose target is known from a declared type or an Object::"Name" argument. Interface dispatch and calls through events are not counted, so the list is not complete.

• Codeunit 9011 “Azure AD Graph User Impl.” (15 calls: EnsureAuthenticationEmailIsNotInUse → EnsureAuthenticationEmailIsNotInUse, GetAuthenticationEmail → GetAuthenticationEmail, GetContactEmail → GetContactEmail, …)

Called by

• Codeunit 9029 “Azure AD User Sync Impl.” (11 calls: AddChangesForExistingUser → GetDisplayName, AddChangesForNewUser → GetDisplayName, AddChangesForRemovedUser → GetUserAuthenticationObjectId, …)
• Codeunit 9017 “Azure AD User Mgmt. Impl.” (8 calls: CreateNewUserInternal → EnsureAuthenticationEmailIsNotInUse, CreateNewUsersFromAzureAD → GetUser, IsUserTenantAdmin → GetGraphUser, …)
• Codeunit 9018 “Azure AD Plan Impl.” (8 calls: AssignPlanToUserWithDelegatedRole → IsUserDelegatedAdmin, AssignPlanToUserWithDelegatedRole → IsUserDelegatedHelpdesk, GetAuthenticationEmailFromAuthenticationObjectID → GetAuthenticationEmail, …)
• Codeunit 3307 “Payables Agent Setup” (2 calls: ApplyPayablesAgentSetup → IsUserDelegatedAdmin, ApplyPayablesAgentSetup → IsUserDelegatedHelpdesk)
• Codeunit 4001 “Hybrid Cloud Management” (2 calls: CheckNeedsApprovalToRunCloudMigration → IsUserDelegatedAdmin, CheckNeedsApprovalToRunCloudMigration → IsUserDelegatedHelpdesk)
• Codeunit 4400 “SOA Setup” (2 calls: UpdateAgent → IsUserDelegatedAdmin, UpdateAgent → IsUserDelegatedHelpdesk)
• Codeunit 7774 “Copilot Capability Impl” (2 calls: IsAdmin → IsUserDelegatedAdmin, IsAdmin → IsUserDelegatedHelpdesk)
• Codeunit 9175 “User Settings Impl.” (2 calls: CheckPermissionsInternal → IsUserDelegatedAdmin, CheckPermissionsInternal → IsUserDelegatedHelpdesk)
• Table 1513 “Notification Schedule” (2 calls: ScheduleForLater → IsUserDelegated, ScheduleNow → IsUserDelegated)
• Codeunit 8360 “Financial Report Export” (1 call: ScheduleJob → IsUserDelegatedAdmin)
• Codeunit 9034 “Azure AD User Subscribers” (1 call: GetInformation → IsUserDelegatedAdmin)
• Codeunit 9874 “User Security Groups PBT” (1 call: FetchEntraGroups → GetGraphUser)
• Page extension 9805 “Approval Job Queue Entries” (1 call: OnOpenPage → IsUserDelegated)
• Page extension 9806 “Approval Job Queue Entry Card” (1 call: OnOpenPage → IsUserDelegated)

Ask your agent

Procedure bodies are not stored here (D10). The call sections above are our own, per object, from the BC29 call graph. For a procedure body or the calls of one procedure, ask bc-code-atlas (external, by Stefan Maron, MIT; default corpus w1-28), which the bc-observatory plugin connects: bcatlas_resolve_node(object_type: "codeunit", object_name: "Azure AD Graph User"), then bcatlas_get_procedure_body or bcatlas_get_neighbors on the returned id.