Files
Anthropic-Cybersecurity-Skills/skills/building-identity-governance-lifecycle-process/references/api-reference.md
T
mukul975 27c6414ca5 Add folder anatomy (scripts/agent.py + references/api-reference.md) for 648 cybersecurity skills
Complete skill folder anatomy across all cybersecurity skills:
- scripts/agent.py: 80-150 line Python agents using real libraries (impacket,
  boto3, azure-mgmt-*, kubernetes, pefile, yara, scapy, shodan, stix2, etc.)
- references/api-reference.md: real API documentation with method signatures
- LICENSE: MIT license for all skill folders
2026-03-10 21:02:12 +01:00

2.1 KiB

API Reference: Building Identity Governance Lifecycle Process

Microsoft Graph API - Identity Governance

import requests

token = "Bearer <access_token>"
headers = {"Authorization": token}

# List all users with sign-in activity
resp = requests.get(
    "https://graph.microsoft.com/v1.0/users",
    headers=headers,
    params={"$select": "id,displayName,userPrincipalName,accountEnabled,"
            "signInActivity,employeeId,department,jobTitle"}
)

# List access reviews
resp = requests.get(
    "https://graph.microsoft.com/v1.0/identityGovernance/"
    "accessReviews/definitions",
    headers=headers,
)

# Check MFA registration status
resp = requests.get(
    "https://graph.microsoft.com/v1.0/reports/"
    "authenticationMethods/userRegistrationDetails",
    headers=headers,
)

# List entitlement management access packages
resp = requests.get(
    "https://graph.microsoft.com/v1.0/identityGovernance/"
    "entitlementManagement/accessPackages",
    headers=headers,
)

Key Graph API Endpoints

Endpoint Purpose
/users List/manage user identities
/identityGovernance/accessReviews Access review campaigns
/identityGovernance/entitlementManagement Access packages and catalogs
/identityGovernance/lifecycleWorkflows JML automation workflows
/reports/authenticationMethods MFA registration status
/auditLogs/signIns Sign-in activity logs

SailPoint IdentityNow API

# Search identities
resp = requests.get(
    "https://<tenant>.api.identitynow.com/v3/search/identities",
    headers={"Authorization": "Bearer <token>"},
    json={"query": {"query": "department:Engineering"}}
)

# List access profiles
resp = requests.get(
    "https://<tenant>.api.identitynow.com/v3/access-profiles",
    headers={"Authorization": "Bearer <token>"},
)

References