๐ Recipe ยท Entra ID & Identity
Look Up a User's Address Attributes in Entra ID
Retrieve the postal address, city, state, country, and office location stored on an Entra ID user profile
Complexity
Beginner
Impact
user-data + read-only + privacy + directory-audit
Context
Why This Matters
Entra ID (formerly Azure AD) stores several address-related attributes on every user object: streetAddress, city, state, postalCode, country, officeLocation, and usageLocation. These values flow into downstream services like Exchange Online, SharePoint profiles, Teams, and the Microsoft 365 address book (GAL).
You may need to look up these attributes when:
- A user asks what address is on file for them (common for remote/hybrid staff updating HR records).
- Troubleshooting license assignment issues โ
usageLocationis required before most M365 licenses can be applied. - Verifying that HR or an HRIS sync (e.g., Workday, SuccessFactors) wrote the expected values.
- Auditing directory data quality before a migration, compliance review, or e-discovery request.
Expected Outcomes
After completing this recipe you will have:
- A clear view of all address-related attributes for a specific Entra ID user.
- A repeatable method (GUI, API, or script) to retrieve the same data for any user in the tenant.
- An exportable record (via the script) you can share with HR, the user, or attach to a ticket.
Risks & Considerations
Privacy: Address data is personal information. Only query it for legitimate business reasons, and share results only with the user themselves or authorised personnel. In regions subject to GDPR/CCPA, logging or exporting this data may be in scope for data-protection controls.
Source of truth: If your tenant is synced from on-premises Active Directory via Entra Connect, or from an HRIS, the Entra ID values are read-only downstream. Do not attempt to edit them in the Entra portal โ changes will be overwritten at the next sync cycle. Update the upstream source instead.
usageLocation vs. country: These are different fields. usageLocation is a two-letter ISO country code used for license compliance; country is a free-text display field. Do not confuse them.
Required Permissions
| Permission | Why It's Needed |
|---|---|
| User.Read.All | Read address attributes on any user in the directory via Microsoft Graph. |
| Directory.Read.All | Alternative broader read permission that also covers user profile attributes. |
| Global Reader or User Administrator role | Required for viewing user profiles in the Entra admin center GUI. |
The fastest way to get this done โ just ask Dex. Copy the prompt below and paste it into your Dex conversation.
For IT Admins
Paste into Dex CoAdmin
For End Users
How an employee would ask Dex for help