Ever had an Azure AD tenant id, and wondered which tenant this is? While checking the APIs behind the new Azure AD cross-tenant access settings, I found a new API that can help you with this!
Let’s assume we have the tenant id 72f988bf-86f1-41af-91ab-2d7cd011db47, and want to know which domain this is, we can simply:
GET https://graph.microsoft.com/beta/tenantRelationships/findTenantInformationByTenantId(tenantId='72f988bf-86f1-41af-91ab-2d7cd011db47a')And you will get the following response:
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#microsoft.graph.tenantInformation",
"tenantId": "72f988bf-86f1-41af-91ab-2d7cd011db47",
"federationBrandName": null,
"displayName": "Microsoft",
"defaultDomainName": "microsoft.onmicrosoft.com"
}
One caveat though, is that this requires authentication and the scope Directory.AccessAsUser.All to run. You can test it out using Graph Explorer:
Also, I was unable to get it to work using client credentials and my own app registration, both leaves me with “Insufficient privileges to compelte the operation”.
Good Workaround! 
This is useful. Thank you for providing details. One small correction Tenant id provided in the request is incorrect 72f988bf-86f1-41af-91ab-2d7cd011db47a (correct tenant id is 72f988bf-86f1-41af-91ab-2d7cd011db47)
Thanks for this. Tried it now, seems there is a new scope available, “CrossTenantInformation.ReadBasic.All”.
Simple working example with the “`Microsoft.Graph“` module:
“`powershell
$null = Import-Module -Name ‘Microsoft.Graph.Authentication’ -Force
$null = Select-MgProfile -Name ‘beta’
$null = Connect-MgGraph -Scopes ‘CrossTenantInformation.ReadBasic.All’ -ForceRefresh
Invoke-MgGraphRequest -Method ‘Get’ -Uri (“https://graph.microsoft.com/beta/tenantRelationships/findTenantInformationByTenantId(tenantId=`'{0}`’)” -f $TenantId)
$null = Disconnect-MgGraph
“`
Thanks! I was able to get this one working with client credentials from an app registration, ended up exposing it as a public API (with caching, so it doesn’t hit upstream much). Anyone is welcome to use it, pretty much costs us nothing to run.
https://azure-ad-tools.ai.moda/docs/#/paths/api-v1.0.0-lookup-by-tenant-id-tenant-id/get