az ad group

  • Reference

Manage Microsoft Entra groups.

Commands

Name Description Type Status
az ad group create

Create a group.

 Core GA
az ad group delete

Delete a group.

 Core GA
az ad group get-member-groups

Get a collection of object IDs of groups of which the specified group is a member.

 Core GA
az ad group list

List groups in the directory.

 Core GA
az ad group member

Manage group members.

 Core GA
az ad group member add

Add a member to a group.

 Core GA
az ad group member check

Check if a member is in a group.

 Core GA
az ad group member list

Get the members of a group.

 Core GA
az ad group member remove

Remove a member from a group.

 Core GA
az ad group owner

Manage group owners.

 Core GA
az ad group owner add

Add a group owner.

 Core GA
az ad group owner list

List group owners.

 Core GA
az ad group owner remove

Remove a group owner.

 Core GA
az ad group show

Get the details of a group.

 Core GA

az ad group create

Edit

Create a group.

az ad group create --display-name
                   --mail-nickname
                   [--description]
                   [--force {false, true}]

Examples

Create a group in the directory. (autogenerated)

az ad group create --display-name MyDisplay --mail-nickname MyDisplay

Required Parameters

--display-name

Object's display name or its prefix.

--mail-nickname

Mail nickname.

Optional Parameters

--description

Group description.

--force

Always create a new group instead of updating the one with same display and mail nickname.

Accepted values: false, true
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az ad group delete

Edit

Delete a group.

az ad group delete --group

Required Parameters

--group -g

Group's object id or display name(prefix also works if there is a unique match).

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az ad group get-member-groups

Edit

Get a collection of object IDs of groups of which the specified group is a member.

az ad group get-member-groups --group
                              [--security-enabled-only {false, true}]

Required Parameters

--group -g

Group's object id or display name(prefix also works if there is a unique match).

Optional Parameters

--security-enabled-only

True to specify that only security groups that the entity is a member of should be returned; false to specify that all groups and directory roles that the entity is a member of should be returned.

Accepted values: false, true
Default value: False
Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az ad group list

Edit

List groups in the directory.

az ad group list [--display-name]
                 [--filter]

Optional Parameters

--display-name

Object's display name or its prefix.

--filter

OData filter, e.g. --filter "displayname eq 'test' and servicePrincipalType eq 'Application'".

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az ad group show

Edit

Get the details of a group.

az ad group show --group

Required Parameters

--group -g

Group's object id or display name(prefix also works if there is a unique match).

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.