Skip to content

fix(microsoft): validate Microsoft integrations, return dropped fields and expose missing params #9949

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
waleedlatif1 merged 7 commits into from
Nov 12, 2026
+5,030 −919
Merged

fix(microsoft): validate Microsoft integrations, return dropped fields and expose missing params #9949

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
c2c6f49
fix(microsoft): validate Microsoft integrations, return dropped field…
waleedlatif1 Nov 12, 2026
b1657aa
fix(microsoft): address review — Outlook poller retries, SharePoint f…
waleedlatif1 Nov 12, 2026
e6c6d73
fix(microsoft): address review round 2 — Dataverse nextLink table bin…
waleedlatif1 Nov 12, 2026
902edf0
fix(microsoft): Teams Get Message sender falls back to bot name; clar…
waleedlatif1 Nov 12, 2026
7ef695e
fix(microsoft): zero-drift fixes from verification — dedicated subBlo…
waleedlatif1 Nov 12, 2026
bbf66fe
fix(microsoft): reserve ADX table envelopes up front, log skipped Out…
waleedlatif1 Nov 12, 2026
49a9cf0
fix(microsoft): shared toStringOrNull in AzDO mapper, null relations …
waleedlatif1 Nov 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 13 additions & 2 deletions apps/docs/content/docs/integrations/azure_data_explorer.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ Run Kusto Query Language queries against Azure Data Explorer and Fabric Eventhou

### Azure Data Explorer Query

Run a Kusto Query Language (KQL) query against an Azure Data Explorer database and return the primary result table.
Run a Kusto Query Language (KQL) query against an Azure Data Explorer database and return the primary result table (plus any further tables a batch or fork produces).

<ReferenceDetails>

Expand Down Expand Up @@ -80,7 +80,18 @@ Run a Kusto Query Language (KQL) query against an Azure Data Explorer database a
| `records` | array | Result rows keyed by column name |
| `rowCount` | number | Rows carried in this result, after the row cap |
| `totalRowCount` | number | Rows Kusto returned, before the row cap was applied |
| `truncated` | boolean | Whether rows were dropped to stay within the row cap — narrow the query if true |
| `truncated` | boolean | Whether rows of the primary result table were dropped to stay within the row or size cap \(each additionalResults entry has its own truncated flag\) — narrow the query if true |
| `additionalResults` | array | Further result tables, present only when a query batch \(statements separated by ;\) or fork returns more than one; the row and size caps are shared across all tables |
| ↳ `tableName` | string | Result table name |
| ↳ `columns` | array | Column metadata |
| ↳ `name` | string | Column name |
| ↳ `type` | string | Kusto scalar type |
| ↳ `dataType` | string | Approximate .NET type |
| ↳ `rows` | array | Rows as positional arrays matching the columns order |
| ↳ `records` | array | Rows keyed by column name |
| ↳ `rowCount` | number | Rows carried after the caps |
| ↳ `totalRowCount` | number | Rows Kusto returned |
| ↳ `truncated` | boolean | Whether rows were dropped by the caps |

</ReferenceDetails>

Expand Down
123 changes: 119 additions & 4 deletions apps/docs/content/docs/integrations/azure_devops.mdx
View file
Open in desktop

Large diffs are not rendered by default.

91 changes: 88 additions & 3 deletions apps/docs/content/docs/integrations/intune.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,7 +67,7 @@ Read one page of devices from Microsoft Intune
| ↳ `id` | string | Intune managed device ID |
| ↳ `deviceName` | string | Device name |
| ↳ `managedDeviceOwnerType` | string | Ownership: company, personal, or unknown |
| ↳ `managementState` | string | Current device management state |
| ↳ `managementState` | string | Device management state; not part of the Graph v1.0 managedDevice resource, so usually null |
| ↳ `enrolledDateTime` | string | Enrollment time |
| ↳ `lastSyncDateTime` | string | Last check-in time |
| ↳ `operatingSystem` | string | Operating system |
Expand All @@ -84,6 +84,33 @@ Read one page of devices from Microsoft Intune
| ↳ `model` | string | Device model |
| ↳ `totalStorageSpaceInBytes` | number | Total storage capacity in bytes |
| ↳ `freeStorageSpaceInBytes` | number | Available storage in bytes |
| ↳ `managedDeviceName` | string | Intune-generated or administrator-assigned device name |
| ↳ `managementAgent` | string | Management channel, such as mdm, eas, easMdm, or configurationManagerClient |
| ↳ `deviceEnrollmentType` | string | Enrollment type, such as userEnrollment or windowsAzureADJoin |
| ↳ `enrollmentProfileName` | string | Assigned enrollment profile name; empty when none was assigned |
| ↳ `deviceRegistrationState` | string | Registration state, such as registered, notRegistered, or revoked |
| ↳ `deviceCategoryDisplayName` | string | Device category display name |
| ↳ `jailBroken` | string | Whether the device is jailbroken or rooted, as reported by Intune |
| ↳ `isSupervised` | boolean | Device supervised status |
| ↳ `azureADRegistered` | boolean | Whether the device is Microsoft Entra registered |
| ↳ `complianceGracePeriodExpirationDateTime` | string | When the device compliance grace period expires |
| ↳ `managementCertificateExpirationDate` | string | Device management certificate expiration date |
| ↳ `partnerReportedThreatState` | string | Mobile Threat Defense partner threat state, such as secured or highSeverity |
| ↳ `exchangeAccessState` | string | Exchange access state: none, unknown, allowed, blocked, or quarantined |
| ↳ `exchangeAccessStateReason` | string | Reason for the Exchange access state |
| ↳ `exchangeLastSuccessfulSyncDateTime` | string | Last time the device contacted Exchange |
| ↳ `easActivated` | boolean | Whether Exchange ActiveSync is activated |
| ↳ `androidSecurityPatchLevel` | string | Android security patch level |
| ↳ `imei` | string | Device IMEI |
| ↳ `meid` | string | Device MEID |
| ↳ `phoneNumber` | string | Device phone number |
| ↳ `subscriberCarrier` | string | Subscriber carrier |
| ↳ `wiFiMacAddress` | string | Wi-Fi MAC address |
| ↳ `deviceActionResults` | array | Status of remote actions requested on the device, such as rebootNow or retire |
| ↳ `actionName` | string | Action name |
| ↳ `actionState` | string | Action state, such as pending, done, failed, or notSupported |
| ↳ `startDateTime` | string | Action start time |
| ↳ `lastUpdatedDateTime` | string | Last action state update time |

</ReferenceDetails>

Expand All @@ -107,7 +134,7 @@ Read device details from Microsoft Intune
| ↳ `id` | string | Intune managed device ID |
| ↳ `deviceName` | string | Device name |
| ↳ `managedDeviceOwnerType` | string | Ownership: company, personal, or unknown |
| ↳ `managementState` | string | Current device management state |
| ↳ `managementState` | string | Device management state; not part of the Graph v1.0 managedDevice resource, so usually null |
| ↳ `enrolledDateTime` | string | Enrollment time |
| ↳ `lastSyncDateTime` | string | Last check-in time |
| ↳ `operatingSystem` | string | Operating system |
Expand All @@ -124,6 +151,33 @@ Read device details from Microsoft Intune
| ↳ `model` | string | Device model |
| ↳ `totalStorageSpaceInBytes` | number | Total storage capacity in bytes |
| ↳ `freeStorageSpaceInBytes` | number | Available storage in bytes |
| ↳ `managedDeviceName` | string | Intune-generated or administrator-assigned device name |
| ↳ `managementAgent` | string | Management channel, such as mdm, eas, easMdm, or configurationManagerClient |
| ↳ `deviceEnrollmentType` | string | Enrollment type, such as userEnrollment or windowsAzureADJoin |
| ↳ `enrollmentProfileName` | string | Assigned enrollment profile name; empty when none was assigned |
| ↳ `deviceRegistrationState` | string | Registration state, such as registered, notRegistered, or revoked |
| ↳ `deviceCategoryDisplayName` | string | Device category display name |
| ↳ `jailBroken` | string | Whether the device is jailbroken or rooted, as reported by Intune |
| ↳ `isSupervised` | boolean | Device supervised status |
| ↳ `azureADRegistered` | boolean | Whether the device is Microsoft Entra registered |
| ↳ `complianceGracePeriodExpirationDateTime` | string | When the device compliance grace period expires |
| ↳ `managementCertificateExpirationDate` | string | Device management certificate expiration date |
| ↳ `partnerReportedThreatState` | string | Mobile Threat Defense partner threat state, such as secured or highSeverity |
| ↳ `exchangeAccessState` | string | Exchange access state: none, unknown, allowed, blocked, or quarantined |
| ↳ `exchangeAccessStateReason` | string | Reason for the Exchange access state |
| ↳ `exchangeLastSuccessfulSyncDateTime` | string | Last time the device contacted Exchange |
| ↳ `easActivated` | boolean | Whether Exchange ActiveSync is activated |
| ↳ `androidSecurityPatchLevel` | string | Android security patch level |
| ↳ `imei` | string | Device IMEI |
| ↳ `meid` | string | Device MEID |
| ↳ `phoneNumber` | string | Device phone number |
| ↳ `subscriberCarrier` | string | Subscriber carrier |
| ↳ `wiFiMacAddress` | string | Wi-Fi MAC address |
| ↳ `deviceActionResults` | array | Status of remote actions requested on the device, such as rebootNow or retire |
| ↳ `actionName` | string | Action name |
| ↳ `actionState` | string | Action state, such as pending, done, failed, or notSupported |
| ↳ `startDateTime` | string | Action start time |
| ↳ `lastUpdatedDateTime` | string | Last action state update time |

</ReferenceDetails>

Expand Down Expand Up @@ -206,7 +260,7 @@ Read one page of managed devices that have a detected application installed
| ↳ `id` | string | Intune managed device ID |
| ↳ `deviceName` | string | Device name |
| ↳ `managedDeviceOwnerType` | string | Ownership: company, personal, or unknown |
| ↳ `managementState` | string | Current device management state |
| ↳ `managementState` | string | Device management state; not part of the Graph v1.0 managedDevice resource, so usually null |
| ↳ `enrolledDateTime` | string | Enrollment time |
| ↳ `lastSyncDateTime` | string | Last check-in time |
| ↳ `operatingSystem` | string | Operating system |
Expand All @@ -223,6 +277,33 @@ Read one page of managed devices that have a detected application installed
| ↳ `model` | string | Device model |
| ↳ `totalStorageSpaceInBytes` | number | Total storage capacity in bytes |
| ↳ `freeStorageSpaceInBytes` | number | Available storage in bytes |
| ↳ `managedDeviceName` | string | Intune-generated or administrator-assigned device name |
| ↳ `managementAgent` | string | Management channel, such as mdm, eas, easMdm, or configurationManagerClient |
| ↳ `deviceEnrollmentType` | string | Enrollment type, such as userEnrollment or windowsAzureADJoin |
| ↳ `enrollmentProfileName` | string | Assigned enrollment profile name; empty when none was assigned |
| ↳ `deviceRegistrationState` | string | Registration state, such as registered, notRegistered, or revoked |
| ↳ `deviceCategoryDisplayName` | string | Device category display name |
| ↳ `jailBroken` | string | Whether the device is jailbroken or rooted, as reported by Intune |
| ↳ `isSupervised` | boolean | Device supervised status |
| ↳ `azureADRegistered` | boolean | Whether the device is Microsoft Entra registered |
| ↳ `complianceGracePeriodExpirationDateTime` | string | When the device compliance grace period expires |
| ↳ `managementCertificateExpirationDate` | string | Device management certificate expiration date |
| ↳ `partnerReportedThreatState` | string | Mobile Threat Defense partner threat state, such as secured or highSeverity |
| ↳ `exchangeAccessState` | string | Exchange access state: none, unknown, allowed, blocked, or quarantined |
| ↳ `exchangeAccessStateReason` | string | Reason for the Exchange access state |
| ↳ `exchangeLastSuccessfulSyncDateTime` | string | Last time the device contacted Exchange |
| ↳ `easActivated` | boolean | Whether Exchange ActiveSync is activated |
| ↳ `androidSecurityPatchLevel` | string | Android security patch level |
| ↳ `imei` | string | Device IMEI |
| ↳ `meid` | string | Device MEID |
| ↳ `phoneNumber` | string | Device phone number |
| ↳ `subscriberCarrier` | string | Subscriber carrier |
| ↳ `wiFiMacAddress` | string | Wi-Fi MAC address |
| ↳ `deviceActionResults` | array | Status of remote actions requested on the device, such as rebootNow or retire |
| ↳ `actionName` | string | Action name |
| ↳ `actionState` | string | Action state, such as pending, done, failed, or notSupported |
| ↳ `startDateTime` | string | Action start time |
| ↳ `lastUpdatedDateTime` | string | Last action state update time |

</ReferenceDetails>

Expand Down Expand Up @@ -251,6 +332,7 @@ Read one page of compliance policies from Microsoft Intune
| ↳ `createdDateTime` | string | Creation time |
| ↳ `lastModifiedDateTime` | string | Last modification time |
| ↳ `version` | number | Policy or configuration version |
| ↳ `odataType` | string | Graph @odata.type naming the platform-specific policy type, such as #microsoft.graph.windows10CompliancePolicy |

</ReferenceDetails>

Expand All @@ -277,6 +359,7 @@ Read common metadata for an Intune compliance policy
| ↳ `createdDateTime` | string | Creation time |
| ↳ `lastModifiedDateTime` | string | Last modification time |
| ↳ `version` | number | Policy or configuration version |
| ↳ `odataType` | string | Graph @odata.type naming the platform-specific policy type, such as #microsoft.graph.windows10CompliancePolicy |

</ReferenceDetails>

Expand Down Expand Up @@ -336,6 +419,7 @@ Read one page of device configurations from Microsoft Intune
| ↳ `createdDateTime` | string | Creation time |
| ↳ `lastModifiedDateTime` | string | Last modification time |
| ↳ `version` | number | Policy or configuration version |
| ↳ `odataType` | string | Graph @odata.type naming the platform-specific policy type, such as #microsoft.graph.windows10CompliancePolicy |

</ReferenceDetails>

Expand All @@ -362,6 +446,7 @@ Read common metadata for an Intune device configuration
| ↳ `createdDateTime` | string | Creation time |
| ↳ `lastModifiedDateTime` | string | Last modification time |
| ↳ `version` | number | Policy or configuration version |
| ↳ `odataType` | string | Graph @odata.type naming the platform-specific policy type, such as #microsoft.graph.windows10CompliancePolicy |

</ReferenceDetails>

Expand Down
65 changes: 65 additions & 0 deletions apps/docs/content/docs/integrations/microsoft_ad.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,17 @@ List users in Azure AD (Microsoft Entra ID)
| ↳ `officeLocation` | string | Office location |
| ↳ `mobilePhone` | string | Mobile phone number |
| ↳ `accountEnabled` | boolean | Whether the account is enabled |
| ↳ `businessPhones` | array | Business phone numbers |
| ↳ `preferredLanguage` | string | Preferred language |
| ↳ `employeeId` | string | Employee identifier |
| ↳ `employeeType` | string | Employee type \(e.g., Employee, Contractor\) |
| ↳ `companyName` | string | Company name |
| ↳ `userType` | string | User type: Member or Guest |
| ↳ `usageLocation` | string | Two-letter country code, required before a license can be assigned |
| ↳ `city` | string | City |
| ↳ `country` | string | Country or region |
| ↳ `createdDateTime` | string | When the user was created |
| ↳ `onPremisesSyncEnabled` | boolean | Whether the user is synced from on-premises Active Directory |
| `userCount` | number | Number of users returned |
| `nextLink` | string | Continuation URL for the next page of results, or null if there are no more |

Expand All @@ -98,6 +109,7 @@ Get a user by ID or user principal name from Azure AD
| Parameter | Type | Required | Description |
| --------- | ---- | -------- | ----------- |
| `userId` | string | Yes | User ID or user principal name \(e.g., "user@example.com"\) |
| `includeManager` | boolean | No | Also return the user's manager \(adds $expand=manager to the request\) |

#### Output

Expand All @@ -115,6 +127,23 @@ Get a user by ID or user principal name from Azure AD
| ↳ `officeLocation` | string | Office location |
| ↳ `mobilePhone` | string | Mobile phone number |
| ↳ `accountEnabled` | boolean | Whether the account is enabled |
| ↳ `businessPhones` | array | Business phone numbers |
| ↳ `preferredLanguage` | string | Preferred language |
| ↳ `employeeId` | string | Employee identifier |
| ↳ `employeeType` | string | Employee type \(e.g., Employee, Contractor\) |
| ↳ `companyName` | string | Company name |
| ↳ `userType` | string | User type: Member or Guest |
| ↳ `usageLocation` | string | Two-letter country code, required before a license can be assigned |
| ↳ `city` | string | City |
| ↳ `country` | string | Country or region |
| ↳ `createdDateTime` | string | When the user was created |
| ↳ `onPremisesSyncEnabled` | boolean | Whether the user is synced from on-premises Active Directory |
| `manager` | object | The user's manager, returned only when includeManager is true; null when no manager is assigned |
| ↳ `id` | string | Manager object ID |
| ↳ `displayName` | string | Manager display name |
| ↳ `mail` | string | Manager email address |
| ↳ `userPrincipalName` | string | Manager user principal name |
| ↳ `jobTitle` | string | Manager job title |
Comment thread
waleedlatif1 marked this conversation as resolved.
Resolved

</ReferenceDetails>

Expand Down Expand Up @@ -379,11 +408,46 @@ List members of a group in Azure AD (Microsoft Entra ID)
| ↳ `displayName` | string | Display name |
| ↳ `mail` | string | Email address |
| ↳ `odataType` | string | Directory object type |
| ↳ `userPrincipalName` | string | User principal name, null for members that are not users |
| `memberCount` | number | Number of members returned |
| `nextLink` | string | Continuation URL for the next page of results, or null if there are no more |

</ReferenceDetails>

### List Azure AD User Memberships

List the groups, directory roles, and administrative units a user is a member of in Azure AD (Microsoft Entra ID)

<ReferenceDetails>

#### Input

| Parameter | Type | Required | Description |
| --------- | ---- | -------- | ----------- |
| `userId` | string | No | User ID or user principal name. Required unless continuing from a nextLink. |
| `transitive` | boolean | No | Include memberships inherited through nested groups \(transitiveMemberOf\). Defaults to direct memberships only. |
| `top` | number | No | Maximum number of memberships to return per page \(default 100, max 999\) |
| `nextLink` | string | No | Continuation URL from a previous response's 'nextLink' output, used to fetch the next page of results |

#### Output

| Parameter | Type | Description |
| --------- | ---- | ----------- |
| `memberships` | array | Groups, directory roles, and administrative units the user belongs to |
| ↳ `id` | string | Object ID of the group, directory role, or administrative unit |
| ↳ `displayName` | string | Display name |
| ↳ `description` | string | Description |
| ↳ `odataType` | string | Directory object type \(e.g., "#microsoft.graph.group", "#microsoft.graph.directoryRole"\) |
| ↳ `mail` | string | Email address \(groups only\) |
| ↳ `mailEnabled` | boolean | Whether mail is enabled \(groups only\) |
| ↳ `securityEnabled` | boolean | Whether security is enabled \(groups only\) |
| ↳ `groupTypes` | array | Group types \(groups only\) |
| ↳ `roleTemplateId` | string | Directory role template ID \(directory roles only\) |
| `membershipCount` | number | Number of memberships returned |
| `nextLink` | string | Continuation URL for the next page of results, or null if there are no more |

</ReferenceDetails>

### Add Azure AD Group Member

Add a member to a group in Azure AD (Microsoft Entra ID)
Expand Down Expand Up @@ -915,6 +979,7 @@ List the principals holding an administrator role. Returns up to 1000 members; t
| ↳ `displayName` | string | Display name |
| ↳ `mail` | string | Email address |
| ↳ `odataType` | string | Directory object type |
| ↳ `userPrincipalName` | string | User principal name, null for members that are not users |
| `memberCount` | number | Number of members returned |

</ReferenceDetails>
Expand Down
Loading
Loading