---
id: azure-graphrbac
version: "0.61.2"
license: MIT License
license_treatment: permissive
maintenance: active
---

# azure-graphrbac — Microsoft Azure Graph RBAC Client Library for Python

License: permissive · Maintenance: active · Downloads: 5.1M/mo

## What it is and what it does

Azure-graphrbac is a Python client library for managing Azure Active Directory resources through the Microsoft Graph RBAC API. It provides object models and operations for working with users, groups, applications, service principals, and other directory objects in Azure AD.

The package is built on msrest and msrestazure for HTTP communication and Azure authentication. However, it has been deprecated and will no longer receive feature updates or maintenance after 10-31-2024; only security fixes are provided until that date. Microsoft recommends migrating to the MS Graph SDK for Python instead.

Use it for:

- Programmatically list and query Azure AD users, groups, and applications in an existing codebase that predates the MS Graph SDK
- Manage application registrations and service principals in Azure AD via Python automation scripts
- Restore deleted applications or manage group ownership within a legacy Azure management workflow
- Perform directory object lookups and membership checks in older Azure-integrated systems

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Manages Azure Active Directory graph resources (users, groups, applications, service principals) through the Azure Graph RBAC API, but this package is deprecated as of 10-31-2024 and will receive only security fixes.

No. The package is deprecated as of 10-31-2024 and will receive no further maintenance beyond security fixes. New projects should use the MS Graph SDK for Python instead. Only consider installing if you are maintaining existing code that already depends on it and cannot migrate immediately.

## Install

pip install azure-graphrbac
uv add azure-graphrbac
poetry add azure-graphrbac

## Installing azure-graphrbac

Before you install: Low install friction with four stable Azure SDK dependencies. However, the package entered inactive status on 10-31-2024 and will no longer be maintained; only security fixes are provided until that date has passed.

License in practice: MIT License permits commercial and private use with minimal restrictions, making it safe from a licensing standpoint for new projects, though the deprecation status is a stronger concern.

Quickstart:

pip install azure-graphrbac

from azure.graphrbac import GraphRbacManagementClient
from msrestazure.azure_active_directory import UserPassCredentials

credentials = UserPassCredentials(username, password)
client = GraphRbacManagementClient(credentials, tenant_id)

Requires Azure Active Directory tenant credentials and tenant ID; deprecated as of 10-31-2024 with no future maintenance planned.

Verify before relying:

- Whether security fixes are still being applied after 10-31-2024 or if the package is now in complete maintenance freeze
- Migration path and feature parity between this package and the recommended MS Graph SDK for Python

## Package facts

- License: MIT License (permissive)
- Python support: unspecified
- Install friction: low
- Maintenance: active
- Downloads: 5.1M/month (top 5,000 on PyPI)
- Known vulnerabilities: none known

## Tags

azure active directory management, azure graph rbac, azure ad users groups, azure service principals, azure directory objects, azure rbac client, deprecated, azure-sdk, active-directory

[View on SkillFed](https://skillfed.io/packages/azure-graphrbac) · [View on PyPI](https://pypi.org/project/azure-graphrbac/)