Does anyone know if there is an API for actions in Microsoft Active Directory (like: add user to group, changing group policy etc).
For example: if I want to update group policy - to block url for some user, I want to do it by the API
1 Answers
As suggested by @mathias-r-jessen, there are no REST APIs provided by Microsoft for Microsoft Active Directory. You need to communicate with multiple APIs. Modifying group memberships is as simple as doing an LDAP modify operation, but for GPOs you'll have to write to the SYSVOL share and speak to a different service on one of the domain controllers to ensure version updates for example.
There are some third-party software providing REST APIs for Microsoft Active Directory.
You can use ADManager Plus REST APIs to perform AD user account management operations. You can access the APIs from your Application.
Please refer this for what operations you can perform using AD Manager Plus REST APIs :
Active Directory REST APIs from ManageEngine ADManager Plus
Also, you can use Addict to perform Active Directory operations. Addict is a drop-in REST API microservice for Active Directory implementations.
You can refer this for the operations you can perform using Addict :
neuroradiology/addict-1: Get a full Active Directory REST API in 30 seconds (github.com)
Related