I have AzureAD driver running in hybrid mode, but without powershell service. It is only used to manage group membership in some cloud-only groups.
Although publisher is enabled in driver parameters (polling interval set to 5 minutes), I don't see any calls to GraphAPI in remote loader trace (level set to 99).
Also when looking at some other customer, where we have PowerShell service installed, publisher poll works, but it looks like is implemented using Powershell only, not GraphAPI (calling Get-User or Get-Group with filter on WhenChangedUTC)
So question is, is AzureAD driver able to poll for changes in AzureAD using graph API only?