CIPP n8n Node

The CIPP (CyberDrain Improved Partner Portal) API provides programmatic access to manage Microsoft 365 tenants. Authentication uses OAuth2 client_credentials flow with your Application ID and Secret.

Table of Contents

• Installation
• Authentication
• Resources & Operations
• Compatibility
• License

Installation

Follow the n8n community node installation guide.

Or install directly via npm:

npm install @avantguardllc/n8n-nodes-cipp

Authentication

This node authenticates using OAuth 2.0.

| Setting | Value | |---------|-------| | Type | OAuth2 | | Flow | clientCredentials | | Token URL | https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token | | Base URL | https://{cippUrl} (editable in credentials) |

Tip: The Base URL can be changed in the credential settings if your instance uses a different host.

Resources & Operations

Base URL: https://{cippUrl}

IdentityManagement

| | Endpoint | Description | |---|----------|-------------| | 🔵 GET | /api/ListGraphRequest | List Graph Request | | 🟢 POST | /api/ExecCreateTAP | Create Temporary Access Password | | 🟢 POST | /api/ExecResetMFA | Reset MFA | | 🟢 POST | /api/ExecSendPush | Send MFA Push | | 🟢 POST | /api/ExecPerUserMFA | Set Per-User MFA | | 🟢 POST | /api/ExecConvertMailbox | Convert Mailbox | | 🟢 POST | /api/ExecEnableArchive | Enable Online Archive | | 🟢 POST | /api/ExecSetOoO | Set Out of Office | | 🟢 POST | /api/EditGroup | Edit Group | | 🔵 GET | /api/ListGroups | List Groups | | 🟢 POST | /api/ExecEmailForward | Email Forwarding | | 🟢 POST | /api/ExecOneDriveProvision | Provision OneDrive | | 🟢 POST | /api/ExecOneDriveShortCut | Add OneDrive Shortcut | | 🟢 POST | /api/ExecDisableUser | Disable/Enable User | | 🟢 POST | /api/ExecResetPass | Reset Password | | 🟢 POST | /api/ExecClrImmId | Clear Immutable ID | | 🟢 POST | /api/ExecRevokeSessions | Revoke Sessions | | 🟢 POST | /api/RemoveUser | Remove User | | 🟢 POST | /api/AddUser | Add User | | 🔵 GET | /api/ListMFAUsers | List MFA Users | | 🔵 GET | /api/ListSignIns | List Sign Ins | | 🔵 GET | /api/ListInactiveAccounts | List Inactive Accounts | | 🔵 GET | /api/ListAzureADConnectStatus | List Azure AD Connect Status | | 🟢 POST | /api/ExecGroupsHideFromGAL | Hide/Unhide Group from GAL | | 🟢 POST | /api/ExecGroupsDeliveryManagement | Manage Group Delivery Settings | | 🟢 POST | /api/ExecGroupsDelete | Delete Group | | 🟢 POST | /api/AddGroup | Add Group | | 🔵 GET | /api/ListRoles | List Roles | | 🟢 POST | /api/ExecDismissRiskyUser | Dismiss Risky User | | 🔵 GET | /api/ExecJITAdmin | List JIT Admins | | 🟢 POST | /api/ExecJITAdmin | Execute JIT Admin | | 🟢 POST | /api/ExecDeviceDelete | Manage Device | | 🟢 POST | /api/ExecGetRecoveryKey | Get Recovery Key | | 🔵 GET | /api/ListDeletedItems | List Deleted Items | | 🟢 POST | /api/ExecRestoreDeleted | Restore Deleted Object | | 🟢 POST | /api/ExecOffboardUser | Offboard User | | 🟢 POST | /api/RemoveGroupTemplate | Remove Group Template | | 🔵 GET | /api/ListGroupTemplates | List Group Templates | | 🟢 POST | /api/AddGroupTemplate | Add Group Template | | 🔵 GET | /api/listUsers | List Users |

Teams&SharePoint

| | Endpoint | Description | |---|----------|-------------| | 🔵 GET | /api/ListSites | List Sites | | 🟢 POST | /api/ExecSetSharePointMember | Add or Remove SharePoint Site Member | | 🟢 POST | /api/ExecSharePointPerms | Manage SharePoint or OneDrive Permissions | | 🟢 POST | /api/AddSite | Add SharePoint Site | | 🟢 POST | /api/AddSiteBulk | Add Multiple SharePoint Sites | | 🔵 GET | /api/ListTeams | List Teams | | 🟢 POST | /api/AddTeam | Add Team | | 🔵 GET | /api/ListTeamsActivity | List Teams Activity | | 🔵 GET | /api/ListTeamsVoice | List Teams Voice Phone Numbers | | 🟢 POST | /api/ExecTeamsVoicePhoneNumberAssignment | Assign Teams Voice Phone Number | | 🟢 POST | /api/ExecRemoveTeamsVoicePhoneNumberAssignment | Unassign Teams Voice Phone Number | | 🔵 GET | /api/ListTeamsLisLocation | List Teams Emergency Locations |

TenantAdministration

| | Endpoint | Description | |---|----------|-------------| | 🔵 GET | /api/ListAlertsQueue | List Alerts Queue | | 🟢 POST | /api/AddAlert | Add Alert | | 🔵 GET | /api/listCSPLicenses | List CSP Licenses | | 🟢 POST | /api/ExecCSPLicense | Execute CSP License Operation | | 🔵 GET | /api/ListLicenses | List Licenses | | 🔵 GET | /api/ListStandards | List Standards | | 🔵 GET | /api/listStandardTemplates | List Standard Templates | | 🔵 GET | /api/ExecStandardsRun | Execute Standards Run | | 🟢 POST | /api/RemoveStandardTemplate | Remove Standard Template | | 🟢 POST | /api/execStandardConvert | Convert Standards | | 🔵 GET | /api/ListNamedLocations | List Named Locations | | 🟢 POST | /api/ExecNamedLocation | Execute Named Location Operation | | 🟢 POST | /api/AddNamedLocation | Add Named Location | | 🔵 GET | /api/ListConditionalAccessPolicies | List Conditional Access Policies | | 🟢 POST | /api/ExecCAExclusion | Execute Conditional Access Exclusion | | 🔵 GET | /api/ListAuditLogs | List Audit Logs | | 🔵 GET | /api/ListCSPsku | List CSP SKUs | | 🔵 GET | /api/ExecGDAPRoleTemplate | List GDAP Role Templates | | 🔵 GET | /api/ListGDAPRoles | List GDAP Roles | | 🟢 POST | /api/ExecGDAPInvite | Create GDAP Invite |

CIPP

| | Endpoint | Description | |---|----------|-------------| | 🟢 POST | /api/AddScheduledItem | Add Scheduled Item | | 🔵 GET | /api/ExecListBackup | List Backups | | 🔵 GET | /api/ListExtensionsConfig | List Extensions Configuration | | 🔵 GET | /api/ListScheduledItems | List Scheduled Items | | 🟢 POST | /api/RemoveScheduledItem | Remove Scheduled Item | | 🔵 GET | /api/ListFunctionParameters | List Function Parameters | | 🔵 GET | /api/ListTenants | List Tenants | | 🟢 POST | /api/ListTenants | Clear Tenant Cache | | 🔵 GET | /api/ExecPasswordConfig | Get Password Configuration | | 🟢 POST | /api/ExecPasswordConfig | Update Password Configuration | | 🟢 POST | /api/ExecRunBackup | Run Backup | | 🟢 POST | /api/ExecSetCIPPAutoBackup | Set Automatic Backup | | 🟢 POST | /api/ExecRestoreBackup | Restore Backup | | 🔵 GET | /api/Listlogs | List Logs | | 🟢 POST | /api/ExecExtensionsConfig | Update Extensions Configuration | | 🔵 GET | /api/ExecExtensionTest | Test Extension | | 🔵 GET | /api/ExecExtensionSync | Sync Extension | | 🔵 GET | /api/ExecExtensionMapping | Get Extension Mapping | | 🟢 POST | /api/ExecExtensionMapping | Update Extension Mapping | | 🔵 GET | /api/ListExtensionSync | List Extension Sync Jobs | | 🟢 POST | /api/ListExoRequest | List Exchange Cmdlets | | 🟢 POST | /api/ExecAzBobbyTables | Execute Azure Table Operations | | 🟢 POST | /api/ExecCippFunction | Execute CIPP Function | | 🔵 GET | /api/ExecApiClient | Get API Client Information | | 🟢 POST | /api/ExecApiClient | Update API Client | | 🔵 GET | /api/ListCustomRole | List Custom Roles |

Tools

| | Endpoint | Description | |---|----------|-------------| | 🔵 GET | /api/ListCommunityRepos | List Community Repositories | | 🟢 POST | /api/ExecCommunityRepo | Execute Community Repository Operation | | 🔵 GET | /api/ListBreachesAccount | List Breaches for Account | | 🔵 GET | /api/ListBreachesTenant | List Breaches for Tenant | | 🔵 GET | /api/ExecBreachSearch | Execute Breach Search | | 🔵 GET | /api/ExecGitHubAction | Execute GitHub Action (GET) | | 🟢 POST | /api/ExecGitHubAction | Execute GitHub Action (POST) |

Security&Compliance

| | Endpoint | Description | |---|----------|-------------| | 🔵 GET | /api/ListDefenderState | List Defender State | | 🔵 GET | /api/ListDefenderTVM | List Defender Threat & Vulnerability Management | | 🟢 POST | /api/AddDefenderDeployment | Add Defender Deployment | | 🔵 GET | /api/ExecAlertsList | List Security Alerts | | 🟢 POST | /api/ExecSetSecurityAlert | Set Security Alert Status | | 🔵 GET | /api/ExecIncidentsList | List Security Incidents | | 🟢 POST | /api/ExecSetSecurityIncident | Set Security Incident Status |

Intune

| | Endpoint | Description | |---|----------|-------------| | 🔵 GET | /api/ListApps | List Applications | | 🟢 POST | /api/ExecAssignApp | Assign Application | | 🟢 POST | /api/RemoveApp | Remove Application | | 🔵 GET | /api/ListApplicationQueue | List Application Queue | | 🟢 POST | /api/RemoveQueuedApp | Remove Queued Application | | 🟢 POST | /api/ExecAppUpload | Execute Application Upload | | 🟢 POST | /api/AddMSPApp | Add MSP Application | | 🟢 POST | /api/AddStoreApp | Add Store Application | | 🟢 POST | /api/AddwinGetApp | Add WinGet Application | | 🟢 POST | /api/AddChocoApp | Add Chocolatey Application | | 🟢 POST | /api/AddOfficeApp | Add Office Application | | 🔵 GET | /api/ListAPDevices | List Autopilot Devices | | 🟢 POST | /api/ExecAssignAPDevice | Assign Autopilot Device | | 🟢 POST | /api/RemoveAPDevice | Remove Autopilot Device | | 🟢 POST | /api/ExecSyncAPDevices | Sync Autopilot Devices | | 🔵 GET | /api/ListAutopilotConfig | List Autopilot Configurations | | 🔵 GET | /api/ListDevices | List Devices | | 🟢 POST | /api/ExecDeviceAction | Execute Device Action | | 🟢 POST | /api/ExecGetLocalAdminPassword | Get Local Admin Password | | 🔵 GET | /api/ListIntunePolicy | List Intune Policies | | 🟢 POST | /api/AddPolicy | Add Policy | | 🟢 POST | /api/AddIntuneTemplate | Add Intune Template | | 🟢 POST | /api/ExecAssignPolicy | Assign Policy | | 🟢 POST | /api/RemovePolicy | Remove Policy | | 🔵 GET | /api/ListIntuneTemplates | List Intune Templates | | 🟢 POST | /api/ExecEditTemplate | Edit Template | | 🟢 POST | /api/RemoveIntuneTemplate | Remove Intune Template | | 🔵 GET | /api/ListIntuneScript | List Intune Scripts | | 🟢 POST | /api/RemoveIntuneScript | Remove Intune Script | | 🟢 POST | /api/ListAppsRepository | List Apps Repository | | 🟢 POST | /api/ListPotentialApps | List Potential Apps |

Compatibility

• n8n version: 1.0+ (tested on 2.x)
• Node.js version: 18+

License

MIT