Remove-AzureADUser
This article provides migration details from Remove-AzureADUser command to Microsoft Graph PowerShell.
Summary
- Azure AD Command: Remove-AzureADUser
- Azure AD Module: AzureAD
- Microsoft Graph Command: Remove-MgUser (Community Examples)
- Graph Module: Microsoft.Graph.Users
- Graph Endpoint: DELETE /users/{id | userPrincipalName}
Permissions
Permission type | Least privileged permissions | Higher privileged permissions |
---|---|---|
Delegated (work or school account) | User.ReadWrite.All | Not available. |
Delegated (personal Microsoft account) | Not supported. | Not supported. |
Application | User.ReadWrite.All | Not available. |
View more details on permissions.
The calling user must be assigned one of the following Microsoft Entra roles:
- User Administrator
- Privileged Authentication Administrator
- Global Administrator
To delete users with privileged administrator roles in delegated scenarios, the app must be assigned the Directory.AccessAsUser.All delegated permission, and the calling user must have a higher privileged administrator role as indicated in Who can perform sensitive actions.
In app-only scenarios, the User.ReadWrite.All application permission isn't enough privilege to delete users with privileged administrative roles. The app must be assigned a higher privileged administrator role as indicated in Who can perform sensitive actions.
Property Mapping
Azure AD Name | Microsoft Graph Name |
---|---|
ObjectId | UserId |
Σχόλια
https://aka.ms/ContentUserFeedback.
Σύντομα διαθέσιμα: Καθ' όλη τη διάρκεια του 2024 θα καταργήσουμε σταδιακά τα ζητήματα GitHub ως μηχανισμό ανάδρασης για το περιεχόμενο και θα το αντικαταστήσουμε με ένα νέο σύστημα ανάδρασης. Για περισσότερες πληροφορίες, ανατρέξτε στο θέμα:Υποβολή και προβολή σχολίων για