cipp-userslisted

# CIPP User Management User management is the highest-volume MSP workflow against CIPP. Every step of the M365 user lifecycle — onboarding, role changes, security incidents, offboarding — has a dedicated tool. Most calls require `tenantFilter`; resolve it via `cipp_list_tenants` before you start. ## Tool surface ### Listing & lookup ``` cipp_list_users(tenantFilter='contoso.onmicrosoft.com') cipp_list_mfa_users(tenantFilter='contoso.onmicrosoft.com') cipp_list_user_devices(tenantFilter=..., userId='upn-or-objectId') cipp_list_user_groups(tenantFilter=..., userId='upn-or-objectId') ``` `cipp_list_mfa_users` is the fastest way to find users without strong auth methods registered. Use it for security posture reviews and for bulk MFA enrollment campaigns. ### Lifecycle ``` cipp_create_user(tenantFilter, displayName, userPrincipalName, mailNickname, password, firstName?, lastName?, jobTitle?, department?, usageLocation?) cipp_edit_user(tenantFilter, userId, displayName?, jobTitle?, department?, ...) cipp_disable_user(tenantFilter, userId) ``` `usageLocation` (ISO 2-letter country code) must be set before any license can be assigned — set it at create time even if licensing comes later. ### Security actions ``` cipp_reset_password(tenantFilter, userId, password?) # password optional → CIPP generates one cipp_reset_mfa(tenantFilter, userId) # clears all registered MFA methods cipp_revoke_sessions(tenantFilter, userId)