Create domain

Namespace: microsoft.graph

Adds a domain to the tenant.

Important: You cannot use an associated domain with your Azure AD tenant until ownership is verified. See List verificationDnsRecords for details. Root domains require verification. For example, requires verification. If a root domain is verified, subdomains of the root domain are automatically verified. For example, is automatically be verified if has been verified.


One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) Directory.AccessAsUser.All
Delegated (personal Microsoft account) Not supported.
Application Domain.ReadWrite.All

HTTP request

POST /domains

Request headers

Name Description
Authorization Bearer {token}. Required.
Content-Type application/json

Request body

In the request body, supply a JSON representation of domain object.

The request body contains the id property for the new domain. Id is the only property that can be specified and it is required. The id property value is the fully qualified domain name to create.


If successful, this method returns 201 Created response code and domain object in the response body.



In the request body, supply a JSON representation of domain object.

Content-type: application/json
Content-length: 192

  "id": ""

Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 201 Created
Content-type: application/json
Content-length: 192

  "authenticationType": "authenticationType-value",
  "availabilityStatus": "availabilityStatus-value",
  "id": "",
  "isAdminManaged": true,
  "isDefault": true,
  "isInitial": true,
  "isRoot": true