Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article lists all new articles that were added or had significant updates in the last month. It also lists the new features in the Microsoft Entra PowerShell module to manage Microsoft Entra resources.
What's new in docs
June 2025
New articles
- Generate a password expiration report using Microsoft Entra PowerShell - Learn how to generate and export a report of users with expired or soon-to-expire passwords.
- Manage per-user MFA settings in Microsoft Entra ID - Learn how to configure and manage multi-factor authentication settings for individual users.
- View and export apps with expiring secrets and certificates - Learn how to identify and export a list of applications with secrets or certificates that are about to expire.
- View and export delegated permissions for users and service principals - Learn how to identify and export delegated permissions assigned to users and service principals.
Updated articles
- Manage guest accounts using Microsoft Entra PowerShell - Add examples for managing guest sponsors
April 2025
New articles
- Offboard users - Learn to offboard users by invalidating sessions, resetting passwords, and removing device ownership.
Updated articles
- Manage guest users - Refined code snippets to improve readability and ensure alignment with best practices.
- Manage users - Refined code snippets to improve readability and ensure alignment with best practices.
- Manage user licenses using Microsoft Entra PowerShell - Improved metadata and keywords for better search engine visibility.
February 2025
Updated articles
Improvements based on module usability and docs bug bash feedback:
- Create a custom application
- Grant and revoke API permissions programmatically
- Install Microsoft Entra PowerShell
- Manage apps
- Manage devices
- Manage groups
- Manage roles
- Manage stale devices
- Manage users
- Microsoft Entra PowerShell best practices
- Navigate the Microsoft Entra PowerShell module
- Recover deleted data
- Use app-only authentication
Latest (recommended) version
Version 1.0.13 - November 2025
New Commands:
- Grant-EntraBetaMcpServerPermission: Grants delegated permissions to Model Context Protocol (MCP) clients for accessing the Microsoft MCP Server for Enterprise.
- Revoke-EntraBetaMcpServerPermission: Revokes delegated permissions from a specified client for Microsoft MCP Server for Enterprise in Microsoft Entra ID.
New Parameters:
- Get-EntraContact & Get-EntraBetaContact:
- Added
-HasErrorsOnlyparameter to return only contacts with service provisioning errors.
- Added
- Get-EntraGroup & Get-EntraBetaGroup:
- Added
-HasErrorsOnlyparameter to return only groups that have service provisioning errors. - Added
-HasLicenseErrorsOnlyparameter to return only groups that have members with license errors.
- Added
- Get-EntraUser & Get-EntraBetaUser:
- Added
-EnabledFilterparameter which filters users based on the state of their accounts. Valid values areEnabledOnlyandDisabledOnly. - Added
-HasErrorsOnlyparameter which returns only users that have one or more service provisioning or validation errors (surfaced via theserviceProvisioningErrorscollection). - Added
-LicenseReconciliationNeededOnlyparameter which returns only users whose service provisioning errors include license-related issues indicating that license reconciliation is needed (for example, insufficient licenses, dependency violations, mutually exclusive plans). - Added
-Synchronizedparameter which returns only users synchronized from on-premises Active Directory (those withonPremisesSyncEnabled eq true). This is useful for distinguishing cloud-only identities from hybrid managed identities. - Added
-UnlicensedUsersOnlyparameter which returns only users who have no assigned licenses.
- Added
- Get-EntraContact & Get-EntraBetaContact:
Bug Fixes:
- Fixed Get-EntraUser issue where handling of guest UPNs was corrected to properly escape/quote special characters so that
user@external#EXT#@tenant.onmicrosoft.comno longer triggers "unterminated string literal" errors. - Set-EntraUserManager
-ManagerIdparameter type corrected fromGuidtoString, enabling UPN (and not just objectId) for the manager reference.
- Fixed Get-EntraUser issue where handling of guest UPNs was corrected to properly escape/quote special characters so that
Module version history
Version 1.0.12 - September 2025
Bug Fixes:
Cmdlet Enhancements:
- Added the
-AppendSelectedparameter to high usage cmdlets in applications, users, and groups sub-modules. PR #1518 - Implemented authentication checks across all cmdlets to indicate the correct permissions in case of a failed connection using
Connect-Entra. - Updated the
-Featuresparameter underSet-EntraDirSyncFeaturecommand to allow processing of multiple features at once.. PR #1527 - Extended the
Get-EntraUsercommand to include-PageSizeparameter. PR #1526
- Added the
Version 1.0.11 - August 2025
Bug Fixes:
Updated cmdlet binding for
Remove-EntraBetaPrivateAccessApplicationSegmentcommand. PR #1524Cmdlet Enhancements:
- Updated the verb on
Update-EntraSignedInUserPasswordcommand toSet-EntraSignedInUserPassword. PR #1516 - Updated the command name
Set-EntraUserPasswordtoSet-EntraUserPasswordProfileand the corresponding parameters. PR #1519 - Removed
Microsoft.Graph.Users.Functionsdependency for performance improvement. PR #1521
- Updated the verb on
Version 1.0.10 - July 2025