Hi Splunk Works,
For App https://splunkbase.splunk.com/app/3757/
To pull in non-default AAD User fields such as companyName and country we modified input_module_MS_AAD_user.py and works fine.
https://docs.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0 (see properties section)
Would like to see this as a feature for users and devices in next versions if possible please.
