Edit

Get-AzureADMSPermissionGrantConditionSet

  • Article

This article provides migration details from Get-AzureADMSPermissionGrantConditionSet command to Microsoft Graph PowerShell.

Summary

  • Azure AD Command: Get-AzureADMSPermissionGrantConditionSet
  • Azure AD Module: AzureAD
  • Microsoft Graph Command: Get-MgPolicyPermissionGrantPolicyInclude (Community Examples)
  • Graph Module: Microsoft.Graph.Identity.SignIns
  • Graph Endpoint: GET /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/excludes | /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/excludes/{permissionGrantConditionSet-id} | /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/includes | /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/includes/{permissionGrantConditionSet-id}

Permissions

Permission type Least privileged permissions Higher privileged permissions
Delegated (work or school account) Policy.Read.PermissionGrant Directory.Read.All
Delegated (personal Microsoft account) Not supported. Not supported.
Application Policy.Read.PermissionGrant Directory.Read.All

Property Mapping

Azure AD Name Microsoft Graph Name
ConditionSetType NA
Id PermissionGrantConditionSetId
PolicyId PermissionGrantPolicyId