None — every tool is low-risk, high-confidence, and outside PCI/HIPAA payload scope.
All other tools (6)
microsoft-users.mcp_graph_getDirectReports medium conf mediumaudit
Returns the roster of employees reporting to any named user, surfacing multiple individuals' identities and the team structure beneath them.
microsoft-users.mcp_graph_getMyManager low conf mediumallow
Returns the signed-in caller's own manager; a single reporting relationship the caller already knows, with no ability to target another user.
microsoft-users.mcp_graph_getMyProfile low conf mediumallow
Returns the signed-in caller's own directory profile; scope is fixed to the current user context and touches no other individual's record.
microsoft-users.mcp_graph_getUserProfile medium conf mediumaudit
Reads any named directory user's profile by object ID or UPN, exposing that individual's contact details, job title, and department to the agent.
microsoft-users.mcp_graph_getUsersManager medium conf mediumaudit
Resolves the reporting line above any named user, letting an agent walk the org chart and identify executives and escalation paths without an access review.
microsoft-users.mcp_graph_listUsers medium conf highaudit
Enumerates the entire tenant directory with filter and select options, pulling every employee's name, UPN, job title, and contact fields into agent context in one call.