Hi Splunk Works, For App https://splunkbase.splunk.com/app/3757/ To pull in non-default AAD User fields such as companyName and country we modified input_module_MS_AAD_user.py and works fine. https://docs.microsoft.com/en-us/graph/api/resources/user?view=graph-rest-1.0 (see properties section) Would like to see this as a feature for users and devices in next versions if possible please.   ... View more