Azure AD can be controlled via the front end GUI or via Graph API. In short, this is what API means:
In computer programming, an application programming interface (API) is a set of subroutine definitions, communication protocols, and tools for building software. In general terms, it is a set of clearly defined methods of communication among various components. A good API makes it easier to develop a computer program by providing all the building blocks, which are then put together by the programmer. An API may be for a web-based system, operating system, database system, computer hardware, or software library. For further elaboration and explanation, you can proceed to the following link: API Explained.
Here is how you can configure using a web browser version of the Graph API.
- Go to the following link: Microsoft Graph API
- The sign-in with the Global Admin account.
- When you log into the portal, before running anything, you will need to request permissions. Thereafter log out and re-log in.
- Accept the permission request you had done.
- In order to check the configurations for Smart lockOut , run the following: https://graph.microsoft.com/beta/<your-tenant-domain>/settings
- You should received the following results:
“name” : “BannedPasswordList”,
“name” : “EnableBannedPasswordCheck”,
You can reference the following article to understand and work with Azure Active Directory Graph API.
NOTE: General use of API is usually done via an application connecting to Azure via Graph API and user friendly GUI.