Set-EntraUser

Syntax

Set-EntraUser
    -ObjectId <String>
    [-PostalCode <String>]
    [-CompanyName <String>]
   [-GivenName <String>]
    [-Mobile <String>]
    [-PreferredLanguage <String>]
   [-CreationType <String>]
    [-UsageLocation <String>]
    [-UserType <String>]
    [-AgeGroup <String>]
   [-MailNickName <String>]
   [-ExtensionProperty <System.Collections.Generic.Dictionary`2[System.String,System.String]>]
   [-ConsentProvidedForMinor <String>]
   [-ImmutableId <String>]
    [-Country <String>]
   [-SignInNames <System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.SignInName]>]
   [-Department <String>]
    [-StreetAddress <String>]
    [-PasswordPolicies <String>]
   [-JobTitle <String>]
   [-City <String>]
    [-OtherMails <System.Collections.Generic.List`1[System.String]>]
    [-UserPrincipalName <String>]
    [-DisplayName <String>]
    [-AccountEnabled <Boolean>]
   [-PasswordProfile <PasswordProfile>]
    [-State <String>]
    [-TelephoneNumber <String>]
   [-Surname <String>]
   [-ShowInAddressList <Boolean>] 
   [<CommonParameters>]

Description

The Set-EntraUser cmdlet updates a user in Microsoft Entra ID. Specify the ObjectId parameter to update a user in Microsoft Entra ID.

Examples

Example 1: Update a user

Connect-Entra -Scopes 'User.ReadWrite.All','Directory.AccessAsUser.All'
$user = Get-EntraUser -ObjectId 'SawyerM@contoso.com'
$params = @{
   ObjectId = $user.ObjectId
   DisplayName = 'Updated user Name'
}
Set-EntraUser @params

This example updates the specified user's Display name parameter.

• -ObjectId Specifies the ID as a user principal name (UPN) or ObjectId.

Example 2: Set the specified user's AccountEnabled parameter

Connect-Entra -Scopes 'User.ReadWrite.All','Directory.AccessAsUser.All'
$params = @{
   ObjectId = 'SawyerM@contoso.com'
   AccountEnabled = $true
}
Set-EntraUser @params

This example updates the specified user's AccountEnabled parameter.

• -ObjectId Specifies the ID as a user principal name (UPN) or ObjectId.
• -AccountEnabled Specifies whether the account is enabled.

Example 3: Set all but specified users as minors with parental consent

Connect-Entra -Scopes 'User.ReadWrite.All','Directory.AccessAsUser.All'
Get-EntraUser -All  | Where-Object -FilterScript { $_.DisplayName -notmatch '(George|James|Education)' } | 
ForEach-Object  { Set-EntraUser -ObjectId $($_.ObjectId) -AgeGroup 'minor' -ConsentProvidedForMinor 'granted' }

This example updates the specified user's as minors with parental consent.

• -ObjectId Specifies the ID as a user principal name (UPN) or ObjectId.
• -ConsentProvidedForMinor Sets whether consent has to obtained for minors. Allowed values: null, granted, denied, and notRequired.

Example 4: Set the specified user's property

Connect-Entra -Scopes 'User.ReadWrite.All','Directory.AccessAsUser.All'
$params = @{
   ObjectId = 'SawyerM@contoso.com'
   City = 'Add city name'
   CompanyName = 'Microsoft'
   Country = 'Add country name'
   Department = 'Add department name'
   GivenName = 'Mircosoft'
   ImmutableId = '#1' 
   JobTitle = 'Manager'
   MailNickName = 'Add mailnickname'
   Mobile = '9984534564'
   OtherMails = 'test12@M365x99297270.OnMicrosoft.com'
   PasswordPolicies = 'DisableStrongPassword'
   State = 'UP'
   StreetAddress = 'Add address'
   UserType = 'Member'
}
Set-EntraUser @params

This example updates the specified user's property.

• -ObjectId Specifies the ID as a user principal name (UPN) or ObjectId.
• -UserType classify user types in your directory, such as "Member" and "Guest."
• -PasswordPolicies Specifies password policies for the user.
• -OtherMails Specifies other email addresses for the user

Example 5: Set the specified user's PasswordProfile parameter

Connect-Entra -Scopes 'Directory.AccessAsUser.All'
$params= @{
ObjectId = 'SawyerM@contoso.com'
PasswordProfile  = @{
   Password= '*****'
   ForceChangePasswordNextLogin = $true
   EnforceChangePasswordPolicy = $false
   }
}
Set-EntraUser @params

This example updates the specified user's PasswordProfile parameter.

• -ObjectId Specifies the ID as a user principal name (UPN) or ObjectId.
• -PasswordProfile specifies the user's password profile.

Parameters

-AccountEnabled

-AgeGroup

-City

-CompanyName

-ConsentProvidedForMinor

-Country

-CreationType

-Department

-DisplayName

-ExtensionProperty

-GivenName

-ImmutableId

-JobTitle

-MailNickName

-Mobile

-ObjectId

-OtherMails

-PasswordPolicies

-PasswordProfile

-PostalCode

-PreferredLanguage

-ShowInAddressList

-SignInNames

-State

-StreetAddress

-Surname

-TelephoneNumber

-UsageLocation

-UserPrincipalName

-UserType

Related Links

• Get-EntraUser
• New-EntraUser
• Remove-EntraUser