Azure Active Directory incorrect claims conditions

ZhangLong Li 1 Reputation point
2021-03-31T03:29:23.767+00:00

83101-microsoftteams-image.png

User[lizhanglong@Microsoft Corporation .com] is a guest user, but my application get his user type is member?

82999-20210331112906.png

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,383 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Marilee Turscak-MSFT 33,706 Reputation points Microsoft Employee
    2021-04-02T23:33:35.493+00:00

    You can change the UserType from a Member to a Guest (and vice versa) visually through the MSOnline Powershell module.

    Install-Module MSOnline -Force
    Connect-MsolService
    Get-MsolUser
    Set-MsolUser -UserPrincipleName <UserPrincipleName here> -UserType Guest

    However, the UserType property represents the user's relationship to the organization. Therefore, you should change this property only if the relationship of the user to the organization changes. Otherwise it's recommended to delete and recreate the user.

    https://learn.microsoft.com/en-us/azure/active-directory/external-identities/user-properties