Revoke-AzureAD

Question

What does below PowerShell command exactly performs, I am confused whether it just revoke current session for users or revoke session permanently
I want to logout active user from all current sessions and afterwards let him able to login same asl before .

Revoke-AzureADUserAllRefreshToken -ObjectId "Enter Object ID here"

Answer 1

Based on the description it should just revoke and invalidate the refresh tokens.

"The Revoke-AzureADUserAllRefreshToken cmdlet invalidates the refresh tokens issued to applications for a user. The cmdlet also invalidates tokens issued to session cookies in a browser for the user. The cmdlet operates by resetting the refreshTokensValidFromDateTime user property to the current date and time."

To actually disable the user you would use:

Set-AzureADUser -ObjectId johndoe@contoso.com -AccountEnabled $false  

References:

https://learn.microsoft.com/en-us/powershell/module/azuread/revoke-azureaduserallrefreshtoken?view=azureadps-2.0

https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/users-revoke-access