EXTENSIONS

Snyk Groups — group management, orgs, members, and audit

Broad Microsoft Graph extension — nine model types over one shared app-only client: calendar (room/user calendarView, current/next meeting), places (room resources), users (Entra directory reads, manager, memberOf), groups, mail (Outlook messages), teams (chats/teams/channels/messages), presence, sharepoint (document-library navigation, search, and file download, working under either Sites.Read.All or Sites.Selected), and intune (enrolled devices, compliance policies, configuration profiles and settings catalog, remediation scripts, confirmation-gated device actions, and async report exports). Token caching, automatic paging, and a raw-bytes downloader; app credentials supplied from a vault. Supersedes the narrow ms-graph-calendar and absorbs azure-ad-user's lookup.

Manage FreeIPA user & host groups over the JSON-RPC API: snapshot the inventory, generic user-group CRUD (groupShow/groupAdd/groupMod/groupDel) plus a desired-state groupSync reconcile, ensure the FreeRADIUS radius-vlan-<id> group pair, and add/remove members — idempotent and auditable, with a confirm-guarded delete.

Read-only Fedora Account System (FASJSON) identity inspection over the Kerberos-protected JSON API: your account, another user, your group memberships, and a single group's detail. Prefers a native SPNEGO Negotiate header (no shell-out — e.g. from @kneel/krb5) for a pure-fetch call; falls back to a kinit + curl --negotiate subprocess seam (vaulted-password headless or ambient ticket).

Full igor2 cluster-manager control via the REST API, split into five models: reservations (the reservation lifecycle), hosts (power, inventory, administration, host policies), boot (distros, profiles, images, kickstarts), identity (users, groups, privilege elevation), and server (clusters/MOTD, sync, stats, config, auth-reset, dashboard).