API and MCP access
Pro: your own scripts and AI assistants use Entra Policy Suite through its API and an MCP server, under the caller's own role.
Purpose
Reports, tickets and automation want the same data and actions the web app has, without screen scraping.
Design
The API and the MCP server switch on with the Pro license. Every call runs under the caller's own role (Reader, Admin or SuperAdmin), is audited like a click in the web app, and a change goes through the same checks and approvals.
Business opportunities
Entra Policy Suite fits into your own tooling and assistants without giving them more rights than a person has.
Related features
A hybrid worker for Active Directory
Tags of AD-synced users are written in Active Directory by a small worker that only connects out and has no password.
Jobs on your schedule
Every job runs on the schedule you set - daily, weekly or every few hours - with Preview and Apply on demand.
Alert mail from one mailbox only
Alerts are sent from a shared mailbox that the engine may send as - and no other mailbox in the tenant.
Runs in your Azure, one identity per part
Container Apps jobs, a web app and an Azure SQL database in your subscription, each part on its own managed identity with only its own rights.