Microsoft.Graph.Beta.Identity.DirectoryManagement

Microsoft Graph PowerShell Cmdlets

Microsoft.Graph.Beta.Identity.DirectoryManagement

Add-MgBetaTenantRelationshipManagedTenantAlertUserInputLog

Invoke action addUserInputLog

Add-MgBetaTenantRelationshipManagedTenantManagementAction

Applies a management action against a specific managed tenant. By performing this operation the appropriate configurations will be made and policies created. As example when applying the require multifactor authentication for admins management action creates a Microsoft Entra Conditional Access policy that requires multifactor authentication for all users that have been assigned an administrative directory role.

Complete-MgBetaDirectoryImpactedResource

Complete an impactedResource object and update its status to completedByUser.

Complete-MgBetaDirectoryRecommendation

Complete a recommendation object and update its status to completedByUser.

Complete-MgBetaDirectoryRecommendationImpactedResource

Complete an impactedResource object and update its status to completedByUser.

Confirm-MgBetaAdministrativeUnitMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Confirm-MgBetaAdministrativeUnitMemberObject

Invoke action checkMemberObjects

Confirm-MgBetaContactMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgContactMemberGroup

Confirm-MgBetaContactMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgContactMemberObject

Confirm-MgBetaContractMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgContractMemberGroup

Confirm-MgBetaContractMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgContractMemberObject

Confirm-MgBetaDeviceMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDeviceMemberGroup

Confirm-MgBetaDeviceMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDeviceMemberObject

Confirm-MgBetaDirectoryDeletedItemMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryDeletedItemMemberGroup

Confirm-MgBetaDirectoryDeletedItemMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryDeletedItemMemberObject

Confirm-MgBetaDirectoryRoleMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleMemberGroup

Confirm-MgBetaDirectoryRoleMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleMemberObject

Confirm-MgBetaDirectoryRoleTemplateMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleTemplateMemberGroup

Confirm-MgBetaDirectoryRoleTemplateMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleTemplateMemberObject

Confirm-MgBetaDirectorySettingTemplateMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Confirm-MgBetaDirectorySettingTemplateMemberObject

Invoke action checkMemberObjects

Confirm-MgBetaDomain

Validate the ownership of a domain.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgDomain

Confirm-MgBetaOrganizationMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgOrganizationMemberGroup

Confirm-MgBetaOrganizationMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgOrganizationMemberObject

Export-MgBetaDirectoryInboundSharedUserProfilePersonalData

Create a request to export the personal data for an inboundSharedUserProfile.

Get-MgBetaAdministrativeUnit

Retrieve the properties and relationships of an administrativeUnit object. Since the administrativeUnit resource supports extensions, you can also use the GET operation to get custom properties and extension data in an administrativeUnit instance.

Get-MgBetaAdministrativeUnitById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Get-MgBetaAdministrativeUnitCount

Get the number of the resource

Get-MgBetaAdministrativeUnitDelta

Get newly created, updated, or deleted administrativeUnits without having to perform a full read of the entire resource collection. For details, see Using delta query.

Get-MgBetaAdministrativeUnitExtension

The collection of open extensions defined for this administrative unit. Nullable.

Get-MgBetaAdministrativeUnitExtensionCount

Get the number of the resource

Get-MgBetaAdministrativeUnitMember

Users and groups that are members of this administrative unit. Supports $expand.

Get-MgBetaAdministrativeUnitMemberAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Get-MgBetaAdministrativeUnitMemberAsDevice

Get the item of type microsoft.graph.directoryObject as microsoft.graph.device

Get-MgBetaAdministrativeUnitMemberAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Get-MgBetaAdministrativeUnitMemberAsOrgContact

Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact

Get-MgBetaAdministrativeUnitMemberAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Get-MgBetaAdministrativeUnitMemberAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Get-MgBetaAdministrativeUnitMemberByRef

Users and groups that are members of this administrative unit. Supports $expand.

Get-MgBetaAdministrativeUnitMemberCount

Get the number of the resource

Get-MgBetaAdministrativeUnitMemberCountAsApplication

Get the number of the resource

Get-MgBetaAdministrativeUnitMemberCountAsDevice

Get the number of the resource

Get-MgBetaAdministrativeUnitMemberCountAsGroup

Get the number of the resource

Get-MgBetaAdministrativeUnitMemberCountAsOrgContact

Get the number of the resource

Get-MgBetaAdministrativeUnitMemberCountAsServicePrincipal

Get the number of the resource

Get-MgBetaAdministrativeUnitMemberCountAsUser

Get the number of the resource

Get-MgBetaAdministrativeUnitMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Get-MgBetaAdministrativeUnitMemberObject

Invoke action getMemberObjects

Get-MgBetaAdministrativeUnitScopedRoleMember

Get a Microsoft Entra role assignment with administrative unit scope.

Get-MgBetaAdministrativeUnitScopedRoleMemberCount

Get the number of the resource

Get-MgBetaAdministrativeUnitUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaAdminPeople

Retrieve the properties and relationships of a peopleAdminSettings object.

Note

To view the v1.0 release of this cmdlet, view Get-MgAdminPeople

Get-MgBetaAdminPeopleItemInsight

Get the properties of an insightsSettings object for displaying or returning item insights in an organization. To learn how to customize the privacy of item insights in an organization, see Customize item insights privacy in Microsoft Graph.

Note

To view the v1.0 release of this cmdlet, view Get-MgAdminPeopleItemInsight

Get-MgBetaAdminPeopleProfileCardProperty

Retrieve the properties of a profileCardProperty entity. The profileCardProperty is identified by its directoryPropertyName property.

Note

To view the v1.0 release of this cmdlet, view Get-MgAdminPeopleProfileCardProperty

Get-MgBetaAdminPeopleProfileCardPropertyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgAdminPeopleProfileCardPropertyCount

Get-MgBetaAdminPeoplePronoun

Get the properties of the pronounsSettings resource for an organization. For more information on settings to manage pronouns support, see Manage pronouns settings for an organization using the Microsoft Graph API.

Note

To view the v1.0 release of this cmdlet, view Get-MgAdminPeoplePronoun

Get-MgBetaContact

Get the properties and relationships of an organizational contact object.

Note

To view the v1.0 release of this cmdlet, view Get-MgContact

Get-MgBetaContactById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgContactById

Get-MgBetaContactCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactCount

Get-MgBetaContactDelta

Get newly created, updated, or deleted organizational contacts without having to perform a full read of the entire collection. See change tracking for details.

Note

To view the v1.0 release of this cmdlet, view Get-MgContactDelta

Get-MgBetaContactDirectReport

The contact's direct reports. (The users and contacts that have their manager property set to this contact.) Read-only. Nullable. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgContactDirectReport

Get-MgBetaContactDirectReportAsOrgContact

Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact

Note

To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportAsOrgContact

Get-MgBetaContactDirectReportAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportAsUser

Get-MgBetaContactDirectReportCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportCount

Get-MgBetaContactDirectReportCountAsOrgContact

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportCountAsOrgContact

Get-MgBetaContactDirectReportCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportCountAsUser

Get-MgBetaContactManager

Get the contact's manager

Note

To view the v1.0 release of this cmdlet, view Get-MgContactManager

Get-MgBetaContactMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberGroup

Get-MgBetaContactMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberObject

Get-MgBetaContactMemberOf

Groups that this contact is a member of. Read-only. Nullable. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberOf

Get-MgBetaContactMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfAsAdministrativeUnit

Get-MgBetaContactMemberOfAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfAsGroup

Get-MgBetaContactMemberOfCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfCount

Get-MgBetaContactMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfCountAsAdministrativeUnit

Get-MgBetaContactMemberOfCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfCountAsGroup

Get-MgBetaContactServiceProvisioningError

Errors published by a federated service describing a non-transient, service-specific error regarding the properties or link from an orgContact object . Supports $filter (eq, not, for isResolved and serviceInstance).

Note

To view the v1.0 release of this cmdlet, view Get-MgContactServiceProvisioningError

Get-MgBetaContactServiceProvisioningErrorCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactServiceProvisioningErrorCount

Get-MgBetaContactTransitiveMemberOf

Get transitiveMemberOf from contacts

Note

To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOf

Get-MgBetaContactTransitiveMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfAsAdministrativeUnit

Get-MgBetaContactTransitiveMemberOfAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfAsGroup

Get-MgBetaContactTransitiveMemberOfCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfCount

Get-MgBetaContactTransitiveMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfCountAsAdministrativeUnit

Get-MgBetaContactTransitiveMemberOfCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfCountAsGroup

Get-MgBetaContactTransitiveReport

The transitive reports for a contact. Read-only.

Get-MgBetaContactTransitiveReportCount

Get the number of the resource

Get-MgBetaContactUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaContract

Retrieve the properties and relationships of contract object.

Note

To view the v1.0 release of this cmdlet, view Get-MgContract

Get-MgBetaContractById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgContractById

Get-MgBetaContractCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgContractCount

Get-MgBetaContractDelta

Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details.

Note

To view the v1.0 release of this cmdlet, view Get-MgContractDelta

Get-MgBetaContractMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgContractMemberGroup

Get-MgBetaContractMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgContractMemberObject

Get-MgBetaContractUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaDevice

Get the properties and relationships of a device object. Since the device resource supports extensions, you can also use the GET operation to get custom properties and extension data in a device instance.

Note

To view the v1.0 release of this cmdlet, view Get-MgDevice

Get-MgBetaDeviceByDeviceId

Get the properties and relationships of a device object. Since the device resource supports extensions, you can also use the GET operation to get custom properties and extension data in a device instance.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceByDeviceId

Get-MgBetaDeviceById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceById

Get-MgBetaDeviceCommand

Set of commands sent to this device.

Get-MgBetaDeviceCommandCount

Get the number of the resource

Get-MgBetaDeviceCommandResponsepayload

Get responsepayload from devices

Get-MgBetaDeviceCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceCount

Get-MgBetaDeviceDelta

Get newly created, updated, or deleted devices without performing a full read of the entire resource collection. For more information, see Using delta query.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceDelta

Get-MgBetaDeviceExtension

The collection of open extensions defined for the device. Read-only. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceExtension

Get-MgBetaDeviceExtensionCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceExtensionCount

Get-MgBetaDeviceMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberGroup

Get-MgBetaDeviceMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberObject

Get-MgBetaDeviceMemberOf

Groups and administrative units that this device is a member of. Read-only. Nullable. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOf

Get-MgBetaDeviceMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfAsAdministrativeUnit

Get-MgBetaDeviceMemberOfAsGroup

Get groups and administrative units that the device is a direct member of. This operation is not transitive.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfAsGroup

Get-MgBetaDeviceMemberOfCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfCount

Get-MgBetaDeviceMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfCountAsAdministrativeUnit

Get-MgBetaDeviceMemberOfCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfCountAsGroup

Get-MgBetaDeviceRegisteredOwner

Retrieve a list of users that are registered owners of the device. A registered owner is the user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Currently, there can be only one owner.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwner

Get-MgBetaDeviceRegisteredOwnerAsEndpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerAsEndpoint

Get-MgBetaDeviceRegisteredOwnerAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerAsServicePrincipal

Get-MgBetaDeviceRegisteredOwnerAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerAsUser

Get-MgBetaDeviceRegisteredOwnerByRef

Retrieve a list of users that are registered owners of the device. A registered owner is the user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Currently, there can be only one owner.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerByRef

Get-MgBetaDeviceRegisteredOwnerCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCount

Get-MgBetaDeviceRegisteredOwnerCountAsEndpoint

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCountAsEndpoint

Get-MgBetaDeviceRegisteredOwnerCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCountAsServicePrincipal

Get-MgBetaDeviceRegisteredOwnerCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCountAsUser

Get-MgBetaDeviceRegisteredUser

Retrieve a list of users that are registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUser

Get-MgBetaDeviceRegisteredUserAsEndpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserAsEndpoint

Get-MgBetaDeviceRegisteredUserAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserAsServicePrincipal

Get-MgBetaDeviceRegisteredUserAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserAsUser

Get-MgBetaDeviceRegisteredUserByRef

Retrieve a list of users that are registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserByRef

Get-MgBetaDeviceRegisteredUserCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCount

Get-MgBetaDeviceRegisteredUserCountAsEndpoint

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCountAsEndpoint

Get-MgBetaDeviceRegisteredUserCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCountAsServicePrincipal

Get-MgBetaDeviceRegisteredUserCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCountAsUser

Get-MgBetaDeviceTransitiveMemberOf

Groups and administrative units that this device is a member of. This operation is transitive. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOf

Get-MgBetaDeviceTransitiveMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfAsAdministrativeUnit

Get-MgBetaDeviceTransitiveMemberOfAsGroup

Get groups and administrative units that the device is a member of. This API request is transitive, and will also return all groups and administrative units the device is a nested member of.

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfAsGroup

Get-MgBetaDeviceTransitiveMemberOfCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfCount

Get-MgBetaDeviceTransitiveMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfCountAsAdministrativeUnit

Get-MgBetaDeviceTransitiveMemberOfCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfCountAsGroup

Get-MgBetaDeviceUsageRights

Represents the usage rights a device has been granted.

Get-MgBetaDeviceUsageRightsCount

Get the number of the resource

Get-MgBetaDeviceUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaDirectory

Get directory

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectory

Get-MgBetaDirectoryAdministrativeUnit

Conceptual container for user and group directory objects.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnit

Get-MgBetaDirectoryAdministrativeUnitCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitCount

Get-MgBetaDirectoryAdministrativeUnitDelta

Get newly created, updated, or deleted administrativeUnits without having to perform a full read of the entire resource collection. For details, see Using delta query.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitDelta

Get-MgBetaDirectoryAdministrativeUnitExtension

The collection of open extensions defined for this administrative unit. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitExtension

Get-MgBetaDirectoryAdministrativeUnitExtensionCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitExtensionCount

Get-MgBetaDirectoryAdministrativeUnitMember

Users and groups that are members of this administrative unit. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMember

Get-MgBetaDirectoryAdministrativeUnitMemberAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsApplication

Get-MgBetaDirectoryAdministrativeUnitMemberAsDevice

Get the item of type microsoft.graph.directoryObject as microsoft.graph.device

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsDevice

Get-MgBetaDirectoryAdministrativeUnitMemberAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsGroup

Get-MgBetaDirectoryAdministrativeUnitMemberAsOrgContact

Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsOrgContact

Get-MgBetaDirectoryAdministrativeUnitMemberAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsServicePrincipal

Get-MgBetaDirectoryAdministrativeUnitMemberAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsUser

Get-MgBetaDirectoryAdministrativeUnitMemberByRef

Users and groups that are members of this administrative unit. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberByRef

Get-MgBetaDirectoryAdministrativeUnitMemberCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCount

Get-MgBetaDirectoryAdministrativeUnitMemberCountAsApplication

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsApplication

Get-MgBetaDirectoryAdministrativeUnitMemberCountAsDevice

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsDevice

Get-MgBetaDirectoryAdministrativeUnitMemberCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsGroup

Get-MgBetaDirectoryAdministrativeUnitMemberCountAsOrgContact

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsOrgContact

Get-MgBetaDirectoryAdministrativeUnitMemberCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsServicePrincipal

Get-MgBetaDirectoryAdministrativeUnitMemberCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsUser

Get-MgBetaDirectoryAdministrativeUnitScopedRoleMember

Scoped-role members of this administrative unit.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitScopedRoleMember

Get-MgBetaDirectoryAdministrativeUnitScopedRoleMemberCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitScopedRoleMemberCount

Get-MgBetaDirectoryAttributeSet

Read the properties and relationships of an attributeSet object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAttributeSet

Get-MgBetaDirectoryAttributeSetCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryAttributeSetCount

Get-MgBetaDirectoryCertificateAuthority

Get certificateAuthorities from directory

Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration

Read the properties and relationships of a certificateBasedApplicationConfiguration object.

Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationCount

Get the number of the resource

Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority

Read the properties and relationships of a certificateAuthorityAsEntity object.

Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthorityCount

Get the number of the resource

Get-MgBetaDirectoryCustomSecurityAttributeDefinition

Read the properties and relationships of a customSecurityAttributeDefinition object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinition

Get-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

Read the properties and relationships of an allowedValue object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

Get-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValueCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinitionAllowedValueCount

Get-MgBetaDirectoryCustomSecurityAttributeDefinitionCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinitionCount

Get-MgBetaDirectoryDeletedItem

Recently deleted items. Read-only. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItem

Get-MgBetaDirectoryDeletedItemAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsAdministrativeUnit

Get-MgBetaDirectoryDeletedItemAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsApplication

Get-MgBetaDirectoryDeletedItemAsDevice

Get the item of type microsoft.graph.directoryObject as microsoft.graph.device

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsDevice

Get-MgBetaDirectoryDeletedItemAsGroup

Retrieve a list of recently deleted directory objects. Currently, deleted items functionality is only supported for the application, servicePrincipal, externalUserProfile, group, administrative unit, pendingExternalUserProfile, and user resources.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsGroup

Get-MgBetaDirectoryDeletedItemAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsServicePrincipal

Get-MgBetaDirectoryDeletedItemAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsUser

Get-MgBetaDirectoryDeletedItemById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemById

Get-MgBetaDirectoryDeletedItemCountAsAdministrativeUnit

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsAdministrativeUnit

Get-MgBetaDirectoryDeletedItemCountAsApplication

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsApplication

Get-MgBetaDirectoryDeletedItemCountAsDevice

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsDevice

Get-MgBetaDirectoryDeletedItemCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsGroup

Get-MgBetaDirectoryDeletedItemCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsServicePrincipal

Get-MgBetaDirectoryDeletedItemCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsUser

Get-MgBetaDirectoryDeletedItemMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemMemberGroup

Get-MgBetaDirectoryDeletedItemMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemMemberObject

Get-MgBetaDirectoryDeviceLocalCredential

Retrieve the properties of a deviceLocalCredentialInfo for a specified device object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeviceLocalCredential

Get-MgBetaDirectoryDeviceLocalCredentialCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeviceLocalCredentialCount

Get-MgBetaDirectoryExternalUserProfile

Retrieve the properties of a specific externalUserProfile.

Get-MgBetaDirectoryExternalUserProfileCount

Get the number of the resource

Get-MgBetaDirectoryFeatureRolloutPolicy

Get featureRolloutPolicies from directory

Get-MgBetaDirectoryFeatureRolloutPolicyApplyTo

Nullable. Specifies a list of directoryObject resources that feature is enabled for.

Get-MgBetaDirectoryFeatureRolloutPolicyApplyToCount

Get the number of the resource

Get-MgBetaDirectoryFeatureRolloutPolicyCount

Get the number of the resource

Get-MgBetaDirectoryFederationConfiguration

Configure domain federation with organizations whose identity provider (IdP) supports either the SAML or WS-Fed protocol.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryFederationConfiguration

Get-MgBetaDirectoryFederationConfigurationCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryFederationConfigurationCount

Get-MgBetaDirectoryImpactedResource

Get impactedResources from directory

Get-MgBetaDirectoryImpactedResourceCount

Get the number of the resource

Get-MgBetaDirectoryInboundSharedUserProfile

Read the properties of an inboundSharedUserProfile.

Get-MgBetaDirectoryInboundSharedUserProfileCount

Get the number of the resource

Get-MgBetaDirectoryOnPremiseSynchronization

Read the properties and relationships of an onPremisesDirectorySynchronization object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryOnPremiseSynchronization

Get-MgBetaDirectoryOnPremiseSynchronizationCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryOnPremiseSynchronizationCount

Get-MgBetaDirectoryOutboundSharedUserProfile

Get the details of an outboundSharedUserProfile.

Get-MgBetaDirectoryOutboundSharedUserProfileCount

Get the number of the resource

Get-MgBetaDirectoryOutboundSharedUserProfileTenant

The collection of external Microsoft Entra tenants that the user shared profile data with. Read-only.

Get-MgBetaDirectoryOutboundSharedUserProfileTenantCount

Get the number of the resource

Get-MgBetaDirectoryPendingExternalUserProfile

Retrieve the properties of a specific pendingExternalUserProfile.

Get-MgBetaDirectoryPendingExternalUserProfileCount

Get the number of the resource

Get-MgBetaDirectoryRecommendation

Read the properties and relationships of a recommendation object.

Get-MgBetaDirectoryRecommendationCount

Get the number of the resource

Get-MgBetaDirectoryRecommendationImpactedResource

Read the properties and relationships of an impactedResource object.

Get-MgBetaDirectoryRecommendationImpactedResourceCount

Get the number of the resource

Get-MgBetaDirectoryRole

Retrieve the properties of a directoryRole object. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRole

Get-MgBetaDirectoryRoleById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleById

Get-MgBetaDirectoryRoleByRoleTemplateId

Retrieve the properties of a directoryRole object. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleByRoleTemplateId

Get-MgBetaDirectoryRoleCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleCount

Get-MgBetaDirectoryRoleDelta

Get newly created, updated, or deleted directory roles without having to perform a full read of the entire resource collection. See Using Delta Query for details.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleDelta

Get-MgBetaDirectoryRoleMember

Retrieve a list of the users that are assigned to the directory role. Only users can be assigned to a directory role. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMember

Get-MgBetaDirectoryRoleMemberAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsApplication

Get-MgBetaDirectoryRoleMemberAsDevice

Get the item of type microsoft.graph.directoryObject as microsoft.graph.device

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsDevice

Get-MgBetaDirectoryRoleMemberAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsGroup

Get-MgBetaDirectoryRoleMemberAsOrgContact

Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsOrgContact

Get-MgBetaDirectoryRoleMemberAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsServicePrincipal

Get-MgBetaDirectoryRoleMemberAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsUser

Get-MgBetaDirectoryRoleMemberByRef

Retrieve a list of the users that are assigned to the directory role. Only users can be assigned to a directory role. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberByRef

Get-MgBetaDirectoryRoleMemberCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCount

Get-MgBetaDirectoryRoleMemberCountAsApplication

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsApplication

Get-MgBetaDirectoryRoleMemberCountAsDevice

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsDevice

Get-MgBetaDirectoryRoleMemberCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsGroup

Get-MgBetaDirectoryRoleMemberCountAsOrgContact

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsOrgContact

Get-MgBetaDirectoryRoleMemberCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsServicePrincipal

Get-MgBetaDirectoryRoleMemberCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsUser

Get-MgBetaDirectoryRoleMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberGroup

Get-MgBetaDirectoryRoleMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberObject

Get-MgBetaDirectoryRoleScopedMember

Members of this directory role that are scoped to administrative units. Read-only. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleScopedMember

Get-MgBetaDirectoryRoleScopedMemberCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleScopedMemberCount

Get-MgBetaDirectoryRoleTemplate

Retrieve the properties and relationships of a directoryroletemplate object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplate

Get-MgBetaDirectoryRoleTemplateById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateById

Get-MgBetaDirectoryRoleTemplateCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateCount

Get-MgBetaDirectoryRoleTemplateDelta

Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateDelta

Get-MgBetaDirectoryRoleTemplateMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateMemberGroup

Get-MgBetaDirectoryRoleTemplateMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateMemberObject

Get-MgBetaDirectoryRoleTemplateUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaDirectoryRoleUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaDirectorySetting

Retrieve the properties of a specific directory setting object.

Get-MgBetaDirectorySettingTemplate

A directory setting template represents a template of settings from which settings may be created within a tenant. This operation allows retrieval of the properties of the directorySettingTemplate object, including the available settings and their defaults.

Get-MgBetaDirectorySettingTemplateById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Get-MgBetaDirectorySettingTemplateCount

Get the number of the resource

Get-MgBetaDirectorySettingTemplateDelta

Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details.

Get-MgBetaDirectorySettingTemplateMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Get-MgBetaDirectorySettingTemplateMemberObject

Invoke action getMemberObjects

Get-MgBetaDirectorySettingTemplateUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaDirectorySharedEmailDomain

Get sharedEmailDomains from directory

Get-MgBetaDirectorySharedEmailDomainCount

Get the number of the resource

Get-MgBetaDirectorySubscription

Get a specific commercial subscription that an organization has acquired.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectorySubscription

Get-MgBetaDirectorySubscriptionByCommerceSubscriptionId

Get a specific commercial subscription that an organization has acquired.

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectorySubscriptionByCommerceSubscriptionId

Get-MgBetaDirectorySubscriptionByOcpSubscriptionId

Get a specific commercial subscription that an organization has acquired.

Get-MgBetaDirectorySubscriptionCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDirectorySubscriptionCount

Get-MgBetaDomain

Retrieve the properties and relationships of domain object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDomain

Get-MgBetaDomainCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainCount

Get-MgBetaDomainFederationConfiguration

Read the properties and relationships of an internalDomainFederation object.

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainFederationConfiguration

Get-MgBetaDomainFederationConfigurationCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainFederationConfigurationCount

Get-MgBetaDomainNameReference

The objects such as users and groups that reference the domain ID. Read-only, Nullable. Supports $expand and $filter by the OData type of objects returned. For example, /domains/{domainId}/domainNameReferences/microsoft.graph.user and /domains/{domainId}/domainNameReferences/microsoft.graph.group.

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainNameReference

Get-MgBetaDomainNameReferenceCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainNameReferenceCount

Get-MgBetaDomainRootDomain

Get the root domain of a subdomain.The API returns a single object which is the root domain of the specified subdomain.

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainRootDomain

Get-MgBetaDomainServiceConfigurationRecord

DNS records the customer adds to the DNS zone file of the domain before the domain can be used by Microsoft Online services. Read-only, Nullable. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainServiceConfigurationRecord

Get-MgBetaDomainServiceConfigurationRecordCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainServiceConfigurationRecordCount

Get-MgBetaDomainSharedEmailDomainInvitation

Get sharedEmailDomainInvitations from domains

Get-MgBetaDomainSharedEmailDomainInvitationCount

Get the number of the resource

Get-MgBetaDomainVerificationDnsRecord

DNS records that the customer adds to the DNS zone file of the domain before the customer can complete domain ownership verification with Microsoft Entra ID. Read-only, Nullable. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainVerificationDnsRecord

Get-MgBetaDomainVerificationDnsRecordCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgDomainVerificationDnsRecordCount

Get-MgBetaOrganization

Get the properties and relationships of the currently authenticated organization. Since the organization resource supports extensions, you can also use the GET operation to get custom properties and extension data in an organization instance.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganization

Get-MgBetaOrganizationBranding

Retrieve the default organizational branding object, if the Accept-Language header is set to 0 or default. If no default organizational branding object exists, this method returns a 404 Not Found error. If the Accept-Language header is set to an existing locale identified by the value of its id, this method retrieves the branding for the specified locale. This method retrieves only non-Stream properties, for example, usernameHintText and signInPageText. To retrieve Stream types of the default branding, for example, bannerLogo and backgroundImage, use the GET organizationalBrandingLocalization method.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBranding

Get-MgBetaOrganizationBrandingBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingBackgroundImage

Get-MgBetaOrganizationBrandingBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingBannerLogo

Get-MgBetaOrganizationBrandingCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingCustomCss

Get-MgBetaOrganizationBrandingFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingFavicon

Get-MgBetaOrganizationBrandingHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingHeaderLogo

Get-MgBetaOrganizationBrandingLocalization

Read the properties and relationships of an organizationalBrandingLocalization object. To retrieve a localization branding object, specify the value of id in the URL.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalization

Get-MgBetaOrganizationBrandingLocalizationBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationBackgroundImage

Get-MgBetaOrganizationBrandingLocalizationBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationBannerLogo

Get-MgBetaOrganizationBrandingLocalizationCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationCount

Get-MgBetaOrganizationBrandingLocalizationCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationCustomCss

Get-MgBetaOrganizationBrandingLocalizationFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationFavicon

Get-MgBetaOrganizationBrandingLocalizationHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationHeaderLogo

Get-MgBetaOrganizationBrandingLocalizationSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationSquareLogo

Get-MgBetaOrganizationBrandingLocalizationSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationSquareLogoDark

Get-MgBetaOrganizationBrandingSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingSquareLogo

Get-MgBetaOrganizationBrandingSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingSquareLogoDark

Get-MgBetaOrganizationById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationById

Get-MgBetaOrganizationCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationCount

Get-MgBetaOrganizationExtension

The collection of open extensions defined for the organization resource. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationExtension

Get-MgBetaOrganizationExtensionCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationExtensionCount

Get-MgBetaOrganizationMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationMemberGroup

Get-MgBetaOrganizationMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgOrganizationMemberObject

Get-MgBetaOrganizationPartnerInformation

Get partnerInformation from organization

Get-MgBetaOrganizationSetting

Retrieve the properties and relationships of organizationSettings object. Nullable.

Get-MgBetaOrganizationSettingContactInsight

Get the properties of an insightsSettings object for displaying or returning contact insights in an organization.

Get-MgBetaOrganizationSettingItemInsight

Get the properties of an insightsSettings object for displaying or returning item insights in an organization. To learn how to customize the privacy of item insights in an organization, see Customize item insights privacy.

Get-MgBetaOrganizationSettingMicrosoftApplicationDataAccess

Get the settings in a microsoftApplicationDataAccessSettings object that specify access from Microsoft applications to Microsoft 365 user data in an organization.

Get-MgBetaOrganizationSettingPersonInsight

Get the properties of an insightsSettings object for displaying or returning people insights in an organization. To learn how to customize privacy for people insights in an organization, see Customize people insights privacy in Microsoft Graph.

Get-MgBetaOrganizationUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaSettingCount

Get the number of the resource

Get-MgBetaSubscribedSku

Get a specific commercial subscription that an organization has acquired.

Note

To view the v1.0 release of this cmdlet, view Get-MgSubscribedSku

Get-MgBetaUserScopedRoleMemberOf

The scoped-role administrative unit memberships for this user. Read-only. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgUserScopedRoleMemberOf

Get-MgBetaUserScopedRoleMemberOfCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgUserScopedRoleMemberOfCount

Invoke-MgBetaAvailableDirectoryFederationConfigurationProviderType

Get all identity providers supported in a directory.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgAvailableDirectoryFederationConfigurationProviderType

Invoke-MgBetaDismissDirectoryImpactedResource

Dismiss an impactedResources object and update its status to dismissed.

Invoke-MgBetaDismissDirectoryRecommendation

Dismiss a recommendation object that you consider to be inapplicable to your tenant and update its status to dismissed .

Invoke-MgBetaDismissDirectoryRecommendationImpactedResource

Dismiss an impactedResources object and update its status to dismissed.

Invoke-MgBetaForceDomainDelete

Delete a domain using an asynchronous operation. Before performing this operation, you must update or remove any references to Exchange as the provisioning service. The following actions are performed as part of this operation: After the domain deletion completes, API operations for the deleted domain return a 404 HTTP response code. To verify deletion of a domain, you can perform a get domain. If the domain was successfully deleted, a 404 HTTP response code is returned in the response.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgForceDomainDelete

Invoke-MgBetaPostponeDirectoryImpactedResource

Postpone action on an impactedResource object to a specified future date and time by marking its status as postponed. On the specified date and time, Microsoft Entra ID will automatically mark the status of the impactedResource object to active.

Invoke-MgBetaPostponeDirectoryRecommendation

Postpone action on a recommendation object to a specified future date and time by marking its status as postponed. On the date and time provided, Microsoft Entra ID will automatically update the status of the recommendation object to active again.

Invoke-MgBetaPostponeDirectoryRecommendationImpactedResource

Postpone action on an impactedResource object to a specified future date and time by marking its status as postponed. On the specified date and time, Microsoft Entra ID will automatically mark the status of the impactedResource object to active.

Invoke-MgBetaPromoteDomain

Promote a verified subdomain to the root domain. A verified domain has its isVerified property set to true.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgPromoteDomain

Invoke-MgBetaPromoteDomainToInitial

Invoke action promoteToInitial

Invoke-MgBetaReactivateDirectoryImpactedResource

Reactivate an accidentally dismissed, completed, or postponed impactedResource object. This action updates the status of the resource to active. This method is relevant only if the status of the impactedResource object is dismissed, postponed, or completedByUser.

Invoke-MgBetaReactivateDirectoryRecommendation

Reactivate a completed, dismissed, or postponed recommendation object. This action updates the status of the recommendation to active. This method only works when the status of the recommendation is completedByUser, dismissed, or postponed.

Invoke-MgBetaReactivateDirectoryRecommendationImpactedResource

Reactivate an accidentally dismissed, completed, or postponed impactedResource object. This action updates the status of the resource to active. This method is relevant only if the status of the impactedResource object is dismissed, postponed, or completedByUser.

Invoke-MgBetaRetryContactServiceProvisioning

Retry the orgContact service provisioning.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgRetryContactServiceProvisioning

Invoke-MgBetaTagTenantRelationshipManagedTenantTagUnassign

Un-assigns the tenant tag from the specified managed tenants.

Invoke-MgBetaTenantRelationshipManagedTenantGroupSearch

Searches for the specified managed tenants across tenant groups.

Invoke-MgBetaTenantRelationshipManagedTenantOffboard

Carries out the appropriate procedures to remove a managed tenant from the multitenant management platform. No relationships, such as commerce and delegate administrative privileges, will be impacted. The only change made by invoking this action is the tenant will be deprovisioned from the multitenant management platform.

New-MgBetaAdministrativeUnit

Use this API to create a new administrativeUnit.

New-MgBetaAdministrativeUnitExtension

Create new navigation property to extensions for administrativeUnits

New-MgBetaAdministrativeUnitMember

Use this API to add a member (user, group, or device) to an administrative unit or to create a new group within an administrative unit. All group types can be created within an administrative unit. Note: Currently, it's only possible to add one member at a time to an administrative unit.`

New-MgBetaAdministrativeUnitMemberByRef

Use this API to add a member (user, group, or device) to an administrative unit or to create a new group within an administrative unit. All group types can be created within an administrative unit. Note: Currently, it's only possible to add one member at a time to an administrative unit.`

New-MgBetaAdministrativeUnitScopedRoleMember

Assign a Microsoft Entra role with administrative unit scope. For a list of roles that can be assigned with administrative unit scope, see Assign Microsoft Entra roles with administrative unit scope.

New-MgBetaAdminPeopleProfileCardProperty

Create a new profileCardProperty for an organization. The new property is identified by its directoryPropertyName property. For more information about how to add properties to the profile card for an organization, see Add or remove custom attributes on a profile card using the profile card API.

Note

To view the v1.0 release of this cmdlet, view New-MgAdminPeopleProfileCardProperty

New-MgBetaContact

Add new entity to contacts

Note

To view the v1.0 release of this cmdlet, view New-MgContact

New-MgBetaContract

Add new entity to contracts

Note

To view the v1.0 release of this cmdlet, view New-MgContract

New-MgBetaDevice

Create a new device.

Note

To view the v1.0 release of this cmdlet, view New-MgDevice

New-MgBetaDeviceCommand

Create new navigation property to commands for devices

New-MgBetaDeviceExtension

Create new navigation property to extensions for devices

Note

To view the v1.0 release of this cmdlet, view New-MgDeviceExtension

New-MgBetaDeviceRegisteredOwnerByRef

Add a user as a registered owner of the device.

Note

To view the v1.0 release of this cmdlet, view New-MgDeviceRegisteredOwnerByRef

New-MgBetaDeviceRegisteredUserByRef

Add a registered user for the device.

Note

To view the v1.0 release of this cmdlet, view New-MgDeviceRegisteredUserByRef

New-MgBetaDeviceUsageRights

Create new navigation property to usageRights for devices

New-MgBetaDirectoryAdministrativeUnit

Create new navigation property to administrativeUnits for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnit

New-MgBetaDirectoryAdministrativeUnitExtension

Create new navigation property to extensions for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitExtension

New-MgBetaDirectoryAdministrativeUnitMember

Create new navigation property to members for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitMember

New-MgBetaDirectoryAdministrativeUnitMemberByRef

Create new navigation property ref to members for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitMemberByRef

New-MgBetaDirectoryAdministrativeUnitScopedRoleMember

Create new navigation property to scopedRoleMembers for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitScopedRoleMember

New-MgBetaDirectoryAttributeSet

Create a new attributeSet object.

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryAttributeSet

New-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration

Create new navigation property to certificateBasedApplicationConfigurations for directory

New-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority

Create a new trusted certificate authority in a certificateBasedApplicationConfiguration object.

New-MgBetaDirectoryCustomSecurityAttributeDefinition

Create a new customSecurityAttributeDefinition object.

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryCustomSecurityAttributeDefinition

New-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

Create a new allowedValue object.

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

New-MgBetaDirectoryDeviceLocalCredential

Create new navigation property to deviceLocalCredentials for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryDeviceLocalCredential

New-MgBetaDirectoryExternalUserProfile

Create new navigation property to externalUserProfiles for directory

New-MgBetaDirectoryFeatureRolloutPolicy

Create new navigation property to featureRolloutPolicies for directory

New-MgBetaDirectoryFeatureRolloutPolicyApplyTo

Create new navigation property to appliesTo for directory

New-MgBetaDirectoryFeatureRolloutPolicyApplyToByRef

Create new navigation property ref to appliesTo for directory

New-MgBetaDirectoryFederationConfiguration

Create new navigation property to federationConfigurations for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryFederationConfiguration

New-MgBetaDirectoryImpactedResource

Create new navigation property to impactedResources for directory

New-MgBetaDirectoryInboundSharedUserProfile

Create new navigation property to inboundSharedUserProfiles for directory

New-MgBetaDirectoryOnPremiseSynchronization

Create new navigation property to onPremisesSynchronization for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryOnPremiseSynchronization

New-MgBetaDirectoryOutboundSharedUserProfile

Create new navigation property to outboundSharedUserProfiles for directory

New-MgBetaDirectoryOutboundSharedUserProfileTenant

Create new navigation property to tenants for directory

New-MgBetaDirectoryPendingExternalUserProfile

Create a new pendingExternalUserProfile object.

New-MgBetaDirectoryRecommendation

Create new navigation property to recommendations for directory

New-MgBetaDirectoryRecommendationImpactedResource

Create new navigation property to impactedResources for directory

New-MgBetaDirectoryRole

Activate a directory role. To read a directory role or update its members, it must first be activated in the tenant. The Company Administrators and the implicit user directory roles (User, Guest User, and Restricted Guest User roles) are activated by default. To access and assign members to other directory roles, you must first activate it with its corresponding directory role template ID.

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryRole

New-MgBetaDirectoryRoleMemberByRef

Create a new directory role member. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryRoleMemberByRef

New-MgBetaDirectoryRoleScopedMember

Create new navigation property to scopedMembers for directoryRoles

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryRoleScopedMember

New-MgBetaDirectoryRoleTemplate

Add new entity to directoryRoleTemplates

Note

To view the v1.0 release of this cmdlet, view New-MgDirectoryRoleTemplate

New-MgBetaDirectorySetting

Create a new setting based on the templates available in directorySettingTemplates. These settings can be at the tenant-level or at the group level. Group settings apply to only Microsoft 365 groups. The template named Group.Unified can be used to configure tenant-wide Microsoft 365 group settings, while the template named Group.Unified.Guest can be used to configure group-specific settings.

New-MgBetaDirectorySettingTemplate

Add new entity to directorySettingTemplates

New-MgBetaDirectorySharedEmailDomain

Create new navigation property to sharedEmailDomains for directory

New-MgBetaDirectorySubscription

Create new navigation property to subscriptions for directory

Note

To view the v1.0 release of this cmdlet, view New-MgDirectorySubscription

New-MgBetaDomain

Adds a domain to the tenant. Important: You cannot use an associated domain with your Microsoft Entra tenant until ownership is verified. See List verificationDnsRecords for details. Root domains require verification. For example, contoso.com requires verification. If a root domain is verified, subdomains of the root domain are automatically verified. For example, subdomain.contoso.com is automatically be verified if contoso.com has been verified.

Note

To view the v1.0 release of this cmdlet, view New-MgDomain

New-MgBetaDomainFederationConfiguration

Create a new internalDomainFederation object.

Note

To view the v1.0 release of this cmdlet, view New-MgDomainFederationConfiguration

New-MgBetaDomainServiceConfigurationRecord

Create new navigation property to serviceConfigurationRecords for domains

Note

To view the v1.0 release of this cmdlet, view New-MgDomainServiceConfigurationRecord

New-MgBetaDomainSharedEmailDomainInvitation

Create new navigation property to sharedEmailDomainInvitations for domains

New-MgBetaDomainVerificationDnsRecord

Create new navigation property to verificationDnsRecords for domains

Note

To view the v1.0 release of this cmdlet, view New-MgDomainVerificationDnsRecord

New-MgBetaOrganization

Add new entity to organization

Note

To view the v1.0 release of this cmdlet, view New-MgOrganization

New-MgBetaOrganizationBrandingLocalization

Create a new organizationalBrandingLocalization object. This creates a localized branding and at the same time, the default branding if it doesn't exist. The default branding is created only once. It's loaded when a localized branding isn't configured for the user's browser language. To retrieve the default branding, see Get branding.

Note

To view the v1.0 release of this cmdlet, view New-MgOrganizationBrandingLocalization

New-MgBetaOrganizationExtension

Create new navigation property to extensions for organization

Note

To view the v1.0 release of this cmdlet, view New-MgOrganizationExtension

New-MgBetaSubscribedSku

Add new entity to subscribedSkus

Note

To view the v1.0 release of this cmdlet, view New-MgSubscribedSku

New-MgBetaUserScopedRoleMemberOf

Create new navigation property to scopedRoleMemberOf for users

Note

To view the v1.0 release of this cmdlet, view New-MgUserScopedRoleMemberOf

Remove-MgBetaAdministrativeUnit

Delete an administrativeUnit.

Remove-MgBetaAdministrativeUnitExtension

Delete navigation property extensions for administrativeUnits

Remove-MgBetaAdministrativeUnitMemberByRef

Delete ref of navigation property members for administrativeUnits

Remove-MgBetaAdministrativeUnitMemberDirectoryObjectByRef

Delete ref of navigation property members for administrativeUnits

Remove-MgBetaAdministrativeUnitScopedRoleMember

Remove a Microsoft Entra role assignment with administrative unit scope.

Remove-MgBetaAdminPeople

Delete navigation property people for admin

Remove-MgBetaAdminPeopleItemInsight

Delete navigation property itemInsights for admin

Note

To view the v1.0 release of this cmdlet, view Remove-MgAdminPeopleItemInsight

Remove-MgBetaAdminPeopleProfileCardProperty

Delete the profileCardProperty object specified by its directoryPropertyName from the organization's profile card, and remove any localized customizations for that property.

Note

To view the v1.0 release of this cmdlet, view Remove-MgAdminPeopleProfileCardProperty

Remove-MgBetaAdminPeoplePronoun

Delete navigation property pronouns for admin

Remove-MgBetaContact

Delete entity from contacts

Note

To view the v1.0 release of this cmdlet, view Remove-MgContact

Remove-MgBetaContract

Delete entity from contracts

Note

To view the v1.0 release of this cmdlet, view Remove-MgContract

Remove-MgBetaDevice

Delete a registered device.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDevice

Remove-MgBetaDeviceByDeviceId

Delete a registered device.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDeviceByDeviceId

Remove-MgBetaDeviceCommand

Delete navigation property commands for devices

Remove-MgBetaDeviceExtension

Delete navigation property extensions for devices

Note

To view the v1.0 release of this cmdlet, view Remove-MgDeviceExtension

Remove-MgBetaDeviceRegisteredOwnerByRef

Remove a user as a registered owner of the device.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredOwnerDirectoryObjectByRef

Remove-MgBetaDeviceRegisteredOwnerDirectoryObjectByRef

Remove a user as a registered owner of the device.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredOwnerDirectoryObjectByRef

Remove-MgBetaDeviceRegisteredUserByRef

Remove a user as a registered user of the device.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredUserDirectoryObjectByRef

Remove-MgBetaDeviceRegisteredUserDirectoryObjectByRef

Remove a user as a registered user of the device.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredUserDirectoryObjectByRef

Remove-MgBetaDeviceUsageRights

Delete navigation property usageRights for devices

Remove-MgBetaDirectoryAdministrativeUnit

Delete navigation property administrativeUnits for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnit

Remove-MgBetaDirectoryAdministrativeUnitExtension

Delete navigation property extensions for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitExtension

Remove-MgBetaDirectoryAdministrativeUnitMemberByRef

Delete ref of navigation property members for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitMemberDirectoryObjectByRef

Remove-MgBetaDirectoryAdministrativeUnitMemberDirectoryObjectByRef

Delete ref of navigation property members for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitMemberDirectoryObjectByRef

Remove-MgBetaDirectoryAdministrativeUnitScopedRoleMember

Delete navigation property scopedRoleMembers for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitScopedRoleMember

Remove-MgBetaDirectoryAttributeSet

Delete navigation property attributeSets for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAttributeSet

Remove-MgBetaDirectoryCertificateAuthority

Delete navigation property certificateAuthorities for directory

Remove-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration

Delete the properties and relationships of a certificateBasedApplicationConfiguration object.

Remove-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority

Delete a certificateAuthorityAsEntity object. You can't delete all items in the collection because this collection requires at least one object that is a root authority to always persist.

Remove-MgBetaDirectoryCustomSecurityAttributeDefinition

Delete navigation property customSecurityAttributeDefinitions for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryCustomSecurityAttributeDefinition

Remove-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

Delete navigation property allowedValues for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

Remove-MgBetaDirectoryDeletedItem

Delete navigation property deletedItems for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryDeletedItem

Remove-MgBetaDirectoryDeviceLocalCredential

Delete navigation property deviceLocalCredentials for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryDeviceLocalCredential

Remove-MgBetaDirectoryExternalUserProfile

Delete an externalUserProfile object. Note: To permanently delete the externalUserProfile, follow permanently delete an item. To restore an externalUserProfile, follow restore a deleted item.

Remove-MgBetaDirectoryFeatureRolloutPolicy

Delete navigation property featureRolloutPolicies for directory

Remove-MgBetaDirectoryFeatureRolloutPolicyApplyToByRef

Delete ref of navigation property appliesTo for directory

Remove-MgBetaDirectoryFeatureRolloutPolicyApplyToDirectoryObjectByRef

Delete ref of navigation property appliesTo for directory

Remove-MgBetaDirectoryFederationConfiguration

Delete a samlOrWsFedExternalDomainFederation object.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryFederationConfiguration

Remove-MgBetaDirectoryImpactedResource

Delete navigation property impactedResources for directory

Remove-MgBetaDirectoryInboundSharedUserProfile

Delete navigation property inboundSharedUserProfiles for directory

Remove-MgBetaDirectoryInboundSharedUserProfilePersonalData

Create a request to remove the personal data for an inboundSharedUserProfile.

Remove-MgBetaDirectoryOnPremiseSynchronization

Delete navigation property onPremisesSynchronization for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryOnPremiseSynchronization

Remove-MgBetaDirectoryOutboundSharedUserProfile

Delete navigation property outboundSharedUserProfiles for directory

Remove-MgBetaDirectoryOutboundSharedUserProfileTenant

Delete navigation property tenants for directory

Remove-MgBetaDirectoryOutboundSharedUserProfileTenantPersonalData

Create a request to remove the personal data for an outboundSharedUserProfile.

Remove-MgBetaDirectoryPendingExternalUserProfile

Delete a pendingExternalUserProfile object. Note: To permanently delete the pendingExternalUserProfile, follow permanently delete an item. To restore a pendingExternalUserProfile, follow restore a deleted item.

Remove-MgBetaDirectoryRecommendation

Delete navigation property recommendations for directory

Remove-MgBetaDirectoryRecommendationImpactedResource

Delete navigation property impactedResources for directory

Remove-MgBetaDirectoryRole

Delete entity from directoryRoles

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRole

Remove-MgBetaDirectoryRoleByRoleTemplateId

Delete entity from directoryRoles by roleTemplateId

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleByRoleTemplateId

Remove-MgBetaDirectoryRoleMemberByRef

Remove a member from a directoryRole. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleMemberDirectoryObjectByRef

Remove-MgBetaDirectoryRoleMemberDirectoryObjectByRef

Remove a member from a directoryRole. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleMemberDirectoryObjectByRef

Remove-MgBetaDirectoryRoleScopedMember

Delete navigation property scopedMembers for directoryRoles

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleScopedMember

Remove-MgBetaDirectoryRoleTemplate

Delete entity from directoryRoleTemplates

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleTemplate

Remove-MgBetaDirectorySetting

Delete a directory setting.

Remove-MgBetaDirectorySettingTemplate

Delete entity from directorySettingTemplates

Remove-MgBetaDirectorySharedEmailDomain

Delete navigation property sharedEmailDomains for directory

Remove-MgBetaDirectorySubscription

Delete navigation property subscriptions for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectorySubscription

Remove-MgBetaDirectorySubscriptionByCommerceSubscriptionId

Delete navigation property subscriptions for directory

Note

To view the v1.0 release of this cmdlet, view Remove-MgDirectorySubscriptionByCommerceSubscriptionId

Remove-MgBetaDirectorySubscriptionByOcpSubscriptionId

Delete navigation property subscriptions for directory

Remove-MgBetaDomain

Delete a domain from a tenant.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDomain

Remove-MgBetaDomainFederationConfiguration

Deletes an internalDomainFederation object.

Note

To view the v1.0 release of this cmdlet, view Remove-MgDomainFederationConfiguration

Remove-MgBetaDomainServiceConfigurationRecord

Delete navigation property serviceConfigurationRecords for domains

Note

To view the v1.0 release of this cmdlet, view Remove-MgDomainServiceConfigurationRecord

Remove-MgBetaDomainSharedEmailDomainInvitation

Delete navigation property sharedEmailDomainInvitations for domains

Remove-MgBetaDomainVerificationDnsRecord

Delete navigation property verificationDnsRecords for domains

Note

To view the v1.0 release of this cmdlet, view Remove-MgDomainVerificationDnsRecord

Remove-MgBetaOrganization

Delete entity from organization

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganization

Remove-MgBetaOrganizationBranding

Delete the default organizational branding object. To delete the organizationalBranding object, all images (Stream types) must first be removed from the object.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBranding

Remove-MgBetaOrganizationBrandingBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingBackgroundImage

Remove-MgBetaOrganizationBrandingBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingBannerLogo

Remove-MgBetaOrganizationBrandingCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingCustomCss

Remove-MgBetaOrganizationBrandingFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingFavicon

Remove-MgBetaOrganizationBrandingHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingHeaderLogo

Remove-MgBetaOrganizationBrandingLocalization

Delete a localized branding object. To delete the organizationalBrandingLocalization object, all images (Stream types) must first be removed from the object.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalization

Remove-MgBetaOrganizationBrandingLocalizationBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationBackgroundImage

Remove-MgBetaOrganizationBrandingLocalizationBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationBannerLogo

Remove-MgBetaOrganizationBrandingLocalizationCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationCustomCss

Remove-MgBetaOrganizationBrandingLocalizationFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationFavicon

Remove-MgBetaOrganizationBrandingLocalizationHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationHeaderLogo

Remove-MgBetaOrganizationBrandingLocalizationSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationSquareLogo

Remove-MgBetaOrganizationBrandingLocalizationSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationSquareLogoDark

Remove-MgBetaOrganizationBrandingSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingSquareLogo

Remove-MgBetaOrganizationBrandingSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingSquareLogoDark

Remove-MgBetaOrganizationExtension

Delete navigation property extensions for organization

Note

To view the v1.0 release of this cmdlet, view Remove-MgOrganizationExtension

Remove-MgBetaOrganizationPartnerInformation

Delete navigation property partnerInformation for organization

Remove-MgBetaOrganizationSetting

Delete navigation property settings for organization

Remove-MgBetaOrganizationSettingContactInsight

Delete navigation property contactInsights for organization

Remove-MgBetaOrganizationSettingItemInsight

Delete navigation property itemInsights for organization

Remove-MgBetaOrganizationSettingMicrosoftApplicationDataAccess

Delete navigation property microsoftApplicationDataAccess for organization

Remove-MgBetaOrganizationSettingPersonInsight

Delete navigation property peopleInsights for organization

Remove-MgBetaSubscribedSku

Delete entity from subscribedSkus

Note

To view the v1.0 release of this cmdlet, view Remove-MgSubscribedSku

Remove-MgBetaUserScopedRoleMemberOf

Delete navigation property scopedRoleMemberOf for users

Note

To view the v1.0 release of this cmdlet, view Remove-MgUserScopedRoleMemberOf

Rename-MgBetaTenantRelationshipManagedTenantManagementActionTenantDeploymentStatus

Changes the tenant level deployment status for the management action. This information is used to provide insights into what management actions are in a specific state. As example there might be a plan to apply the require multi-factor authentication for admins, so it would be ideal to change the status to planned to reflect the appropriate status.

Reset-MgBetaTenantRelationshipManagedTenantOnboardingStatus

Carries out the appropriate procedures to reset the onboarding status for the managed tenant that was removed from the multitenant management platform using the offboardTenant action. By invoking this action the platform attempts to onboard the managed tenant for management.

Restore-MgBetaDirectoryDeletedItem

Restore a recently deleted application, externalUserProfile, group, pendingExternalUserProfile, servicePrincipal, administrative unit, or user object from deleted items. If an item was accidentally deleted, you can fully restore the item. This isn't applicable to security groups, which are deleted permanently. Also, restoring an application doesn't restore the associated service principal automatically. You must call this API to explicitly restore the deleted service principal. A recently deleted item remains available for up to 30 days. After 30 days, the item is permanently deleted.

Note

To view the v1.0 release of this cmdlet, view Restore-MgDirectoryDeletedItem

Set-MgBetaOrganizationBrandingBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingBackgroundImage

Set-MgBetaOrganizationBrandingBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingBannerLogo

Set-MgBetaOrganizationBrandingCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingCustomCss

Set-MgBetaOrganizationBrandingFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingFavicon

Set-MgBetaOrganizationBrandingHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingHeaderLogo

Set-MgBetaOrganizationBrandingLocalizationBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationBackgroundImage

Set-MgBetaOrganizationBrandingLocalizationBannerLogo

Update the properties of an organizationalBrandingLocalization object for a specific localization.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationBannerLogo

Set-MgBetaOrganizationBrandingLocalizationCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationCustomCss

Set-MgBetaOrganizationBrandingLocalizationFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationFavicon

Set-MgBetaOrganizationBrandingLocalizationHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationHeaderLogo

Set-MgBetaOrganizationBrandingLocalizationSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationSquareLogo

Set-MgBetaOrganizationBrandingLocalizationSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationSquareLogoDark

Set-MgBetaOrganizationBrandingSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingSquareLogo

Set-MgBetaOrganizationBrandingSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingSquareLogoDark

Set-MgBetaOrganizationMobileDeviceManagementAuthority

Set mobile device management authority

Note

To view the v1.0 release of this cmdlet, view Set-MgOrganizationMobileDeviceManagementAuthority

Set-MgBetaTenantRelationshipManagedTenantTag

Assign the tenant tag to the specified managed tenants.

Test-MgBetaAdministrativeUnitProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Test-MgBetaContactProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgContactProperty

Test-MgBetaContractProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgContractProperty

Test-MgBetaDeviceProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgDeviceProperty

Test-MgBetaDirectoryDeletedItemProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgDirectoryDeletedItemProperty

Test-MgBetaDirectoryRoleProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgDirectoryRoleProperty

Test-MgBetaDirectoryRoleTemplateProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgDirectoryRoleTemplateProperty

Test-MgBetaDirectorySettingTemplateProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Test-MgBetaOrganizationProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgOrganizationProperty

Update-MgBetaAdministrativeUnit

Update the properties of an administrativeUnit object.

Update-MgBetaAdministrativeUnitExtension

Update the navigation property extensions in administrativeUnits

Update-MgBetaAdministrativeUnitScopedRoleMember

Update the navigation property scopedRoleMembers in administrativeUnits

Update-MgBetaAdminPeople

Update the navigation property people in admin

Update-MgBetaAdminPeopleItemInsight

Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:- Customize item insights privacy - Customize people insights privacy

Note

To view the v1.0 release of this cmdlet, view Update-MgAdminPeopleItemInsight

Update-MgBetaAdminPeopleProfileCardProperty

Update the properties of a profileCardProperty object, identified by its directoryPropertyName property.

Note

To view the v1.0 release of this cmdlet, view Update-MgAdminPeopleProfileCardProperty

Update-MgBetaAdminPeoplePronoun

Update the properties of a pronounsSettings object in an organization. For more information on settings to manage pronouns support, see Manage pronouns settings for an organization using the Microsoft Graph API.

Note

To view the v1.0 release of this cmdlet, view Update-MgAdminPeoplePronoun

Update-MgBetaContact

Update entity in contacts

Note

To view the v1.0 release of this cmdlet, view Update-MgContact

Update-MgBetaContract

Update entity in contracts

Note

To view the v1.0 release of this cmdlet, view Update-MgContract

Update-MgBetaDevice

Update the properties of a device. Only certain properties of a device can be updated through approved Mobile Device Management (MDM) apps.

Note

To view the v1.0 release of this cmdlet, view Update-MgDevice

Update-MgBetaDeviceByDeviceId

Update the properties of a device. Only certain properties of a device can be updated through approved Mobile Device Management (MDM) apps.

Note

To view the v1.0 release of this cmdlet, view Update-MgDeviceByDeviceId

Update-MgBetaDeviceCommand

Update the navigation property commands in devices

Update-MgBetaDeviceExtension

Update the navigation property extensions in devices

Note

To view the v1.0 release of this cmdlet, view Update-MgDeviceExtension

Update-MgBetaDeviceUsageRights

Update the navigation property usageRights in devices

Update-MgBetaDirectory

Update directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectory

Update-MgBetaDirectoryAdministrativeUnit

Update the navigation property administrativeUnits in directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryAdministrativeUnit

Update-MgBetaDirectoryAdministrativeUnitExtension

Update the navigation property extensions in directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryAdministrativeUnitExtension

Update-MgBetaDirectoryAdministrativeUnitScopedRoleMember

Update the navigation property scopedRoleMembers in directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryAdministrativeUnitScopedRoleMember

Update-MgBetaDirectoryAttributeSet

Update the properties of an attributeSet object.

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryAttributeSet

Update-MgBetaDirectoryCertificateAuthority

Update the navigation property certificateAuthorities in directory

Update-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration

Update the properties of a certificateBasedApplicationConfiguration object. To update the trustedCertificateAuthorities within a certificateBasedApplicationConfiguration object, use the Update certificateAuthorityAsEntity operation.

Update-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority

Update the properties of a certificateAuthorityAsEntity object.

Update-MgBetaDirectoryCustomSecurityAttributeDefinition

Update the properties of a customSecurityAttributeDefinition object.

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryCustomSecurityAttributeDefinition

Update-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

Update the properties of an allowedValue object.

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

Update-MgBetaDirectoryDeviceLocalCredential

Update the navigation property deviceLocalCredentials in directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryDeviceLocalCredential

Update-MgBetaDirectoryExternalUserProfile

Update the properties of a externalUserProfile object.

Update-MgBetaDirectoryFeatureRolloutPolicy

Update the navigation property featureRolloutPolicies in directory

Update-MgBetaDirectoryFederationConfiguration

Update the navigation property federationConfigurations in directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryFederationConfiguration

Update-MgBetaDirectoryImpactedResource

Update the navigation property impactedResources in directory

Update-MgBetaDirectoryInboundSharedUserProfile

Update the navigation property inboundSharedUserProfiles in directory

Update-MgBetaDirectoryOnPremiseSynchronization

Update the properties of an onPremisesDirectorySynchronization object.

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryOnPremiseSynchronization

Update-MgBetaDirectoryOutboundSharedUserProfile

Update the navigation property outboundSharedUserProfiles in directory

Update-MgBetaDirectoryOutboundSharedUserProfileTenant

Update the navigation property tenants in directory

Update-MgBetaDirectoryPendingExternalUserProfile

Update the properties of a pendingExternalUserProfile object.

Update-MgBetaDirectoryRecommendation

Update the navigation property recommendations in directory

Update-MgBetaDirectoryRecommendationImpactedResource

Update the navigation property impactedResources in directory

Update-MgBetaDirectoryRole

Update entity in directoryRoles

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryRole

Update-MgBetaDirectoryRoleByRoleTemplateId

Update entity in directoryRoles by roleTemplateId

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryRoleByRoleTemplateId

Update-MgBetaDirectoryRoleScopedMember

Update the navigation property scopedMembers in directoryRoles

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryRoleScopedMember

Update-MgBetaDirectoryRoleTemplate

Update entity in directoryRoleTemplates

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectoryRoleTemplate

Update-MgBetaDirectorySetting

Update the properties of a specific directory setting object.

Update-MgBetaDirectorySettingTemplate

Update entity in directorySettingTemplates

Update-MgBetaDirectorySharedEmailDomain

Update the navigation property sharedEmailDomains in directory

Update-MgBetaDirectorySubscription

Update the navigation property subscriptions in directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectorySubscription

Update-MgBetaDirectorySubscriptionByCommerceSubscriptionId

Update the navigation property subscriptions in directory

Note

To view the v1.0 release of this cmdlet, view Update-MgDirectorySubscriptionByCommerceSubscriptionId

Update-MgBetaDirectorySubscriptionByOcpSubscriptionId

Update the navigation property subscriptions in directory

Update-MgBetaDomain

Update the properties of domain object. Only verified domains can be updated.

Note

To view the v1.0 release of this cmdlet, view Update-MgDomain

Update-MgBetaDomainFederationConfiguration

Update the properties of an internalDomainFederation object.

Note

To view the v1.0 release of this cmdlet, view Update-MgDomainFederationConfiguration

Update-MgBetaDomainServiceConfigurationRecord

Update the navigation property serviceConfigurationRecords in domains

Note

To view the v1.0 release of this cmdlet, view Update-MgDomainServiceConfigurationRecord

Update-MgBetaDomainSharedEmailDomainInvitation

Update the navigation property sharedEmailDomainInvitations in domains

Update-MgBetaDomainVerificationDnsRecord

Update the navigation property verificationDnsRecords in domains

Note

To view the v1.0 release of this cmdlet, view Update-MgDomainVerificationDnsRecord

Update-MgBetaOrganization

Update the properties of the currently authenticated organization. In this case, organization is defined as a collection of exactly one record, and so its ID must be specified in the request. The ID is also known as the tenantId of the organization.

Note

To view the v1.0 release of this cmdlet, view Update-MgOrganization

Update-MgBetaOrganizationBranding

Update the properties of the default branding object specified by the organizationalBranding resource.

Note

To view the v1.0 release of this cmdlet, view Update-MgOrganizationBranding

Update-MgBetaOrganizationBrandingLocalization

Update the properties of an organizationalBrandingLocalization object for a specific localization.

Note

To view the v1.0 release of this cmdlet, view Update-MgOrganizationBrandingLocalization

Update-MgBetaOrganizationExtension

Update the navigation property extensions in organization

Note

To view the v1.0 release of this cmdlet, view Update-MgOrganizationExtension

Update-MgBetaOrganizationPartnerInformation

Update the navigation property partnerInformation in organization

Update-MgBetaOrganizationSetting

Update the navigation property settings in organization

Update-MgBetaOrganizationSettingContactInsight

Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:- Customize item insights privacy - Customize people insights privacy

Update-MgBetaOrganizationSettingItemInsight

Update the navigation property itemInsights in organization

Update-MgBetaOrganizationSettingMicrosoftApplicationDataAccess

Update the settings in a microsoftApplicationDataAccessSettings object that specify access from Microsoft applications to Microsoft 365 user data in an organization.

Update-MgBetaOrganizationSettingPersonInsight

Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:- Customize item insights privacy - Customize people insights privacy

Update-MgBetaSubscribedSku

Update entity in subscribedSkus

Note

To view the v1.0 release of this cmdlet, view Update-MgSubscribedSku

Update-MgBetaUserScopedRoleMemberOf

Update the navigation property scopedRoleMemberOf in users

Note

To view the v1.0 release of this cmdlet, view Update-MgUserScopedRoleMemberOf