Azure AD graph API to filter users with onPremisesExtensionAttributes [extensionAttribute6]

Question

I need to filter users with the onPremisesExtensionAttributes [extensionAttribute6] is there a graph API call for it?

Answer 1

It looks like they've updated the BETA Graph API so that extension attributes (onPremisesExtensionAttributes) are now filterable.

Try the below in Graph Explorer. You'll need to change the extensionAttribute1 eq 'Employee' part to a query that will actually work in your active directory environment.

https://graph.microsoft.com/beta/users?$count=true&$filter=onPremisesExtensionAttributes/extensionAttribute1 eq 'Employee'&$orderBy=displayName&$select=displayName,mail,onPremisesExtensionAttributes

Please note that this is the BETA Graph API so I guess that means Microsoft hasn't finalized it, so it might change or never get fully released.

EDIT: I also just learned that if you're using this filter via the Graph API, you must add the following header or you'll an error:

client.DefaultRequestHeaders.Add("ConsistencyLevel", "eventual");

The Graph Explorer has this header by default, I guess.

Here's where I found this answer: Get Extended Properties on User using Microsoft Graph

Here's the error I was getting: Property 'extensionAttribute1' does not exist as a declared property or extension property.

Answer 2

As @Tinywa suggested in the comment:

onPremisesExtensionAttributes contains extensionAttributes 1-15 for the user. Note that the individual extension attributes are neither selectable nor filterable.

You can get all the results first and use your own code logic to filter them.

Or you can consider using extensionProperty as a workaround. Create the extensionProperty and assign value for the users, and then query users with filtering with this extensionProperty. For detailed steps to create extensionProperty and assign value for users, you can refer to this answer.