New-MgBetaAdministrativeUnitScopedRoleMember

Module:

Microsoft.Graph.Beta.Identity.DirectoryManagement

Assign a Microsoft Entra role with administrative unit scope. For a list of roles that can be assigned with administrative unit scope, see Assign Microsoft Entra roles with administrative unit scope.

Syntax

New-MgBetaAdministrativeUnitScopedRoleMember
   -AdministrativeUnitId <String>
   [-ResponseHeadersVariable <String>]
   [-AdditionalProperties <Hashtable>]
   [-AdministrativeUnitId1 <String>]
   [-Id <String>]
   [-RoleId <String>]
   [-RoleMemberInfo <IMicrosoftGraphIdentity>]
   [-Headers <IDictionary>]
   [-ProgressAction <ActionPreference>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-MgBetaAdministrativeUnitScopedRoleMember
   [-AdministrativeUnitId <String>]
   -InputObject <IIdentityDirectoryManagementIdentity>
   [-ResponseHeadersVariable <String>]
   [-AdditionalProperties <Hashtable>]
   [-Id <String>]
   [-RoleId <String>]
   [-RoleMemberInfo <IMicrosoftGraphIdentity>]
   [-Headers <IDictionary>]
   [-ProgressAction <ActionPreference>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-MgBetaAdministrativeUnitScopedRoleMember
   -AdministrativeUnitId <String>
   -BodyParameter <IMicrosoftGraphScopedRoleMembership>
   [-ResponseHeadersVariable <String>]
   [-Headers <IDictionary>]
   [-ProgressAction <ActionPreference>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

New-MgBetaAdministrativeUnitScopedRoleMember
   -InputObject <IIdentityDirectoryManagementIdentity>
   -BodyParameter <IMicrosoftGraphScopedRoleMembership>
   [-ResponseHeadersVariable <String>]
   [-Headers <IDictionary>]
   [-ProgressAction <ActionPreference>]
   [-WhatIf]
   [-Confirm]
   [<CommonParameters>]

Description

Assign a Microsoft Entra role with administrative unit scope. For a list of roles that can be assigned with administrative unit scope, see Assign Microsoft Entra roles with administrative unit scope.

Examples

Example 1: Using the New-MgBetaAdministrativeUnitScopedRoleMember Cmdlet

Import-Module Microsoft.Graph.Beta.Identity.DirectoryManagement
$params = @{
	RoleId = "roleId-value"
	RoleMemberInfo = @{
		Id = "id-value"
	}
}
New-MgBetaAdministrativeUnitScopedRoleMember -AdministrativeUnitId $administrativeUnitId -BodyParameter $params

This example shows how to use the New-MgBetaAdministrativeUnitScopedRoleMember Cmdlet. To learn about permissions for this resource, see the permissions reference.

Parameters

-AdditionalProperties

Additional Parameters

Type:	Hashtable
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-AdministrativeUnitId

The unique identifier of administrativeUnit

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-AdministrativeUnitId1

Unique identifier for the administrative unit that the directory role is scoped to

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-BodyParameter

scopedRoleMembership To construct, see NOTES section for BODYPARAMETER properties and create a hash table.

Type:	IMicrosoftGraphScopedRoleMembership
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:	SwitchParameter
Aliases:	cf
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Headers

Optional headers that will be added to the request.

Type:	IDictionary
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	True
Accept wildcard characters:	False

-Id

The unique identifier for an entity. Read-only.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-InputObject

Identity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.

Type:	IIdentityDirectoryManagementIdentity
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-ProgressAction

{{ Fill ProgressAction Description }}

Type:	ActionPreference
Aliases:	proga
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-ResponseHeadersVariable

Optional Response Headers Variable.

Type:	String
Aliases:	RHV
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RoleId

Unique identifier for the directory role that the member is in.

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-RoleMemberInfo

identity To construct, see NOTES section for ROLEMEMBERINFO properties and create a hash table.

Type:	IMicrosoftGraphIdentity
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:	SwitchParameter
Aliases:	wi
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

Inputs

Microsoft.Graph.Beta.PowerShell.Models.IIdentityDirectoryManagementIdentity

Microsoft.Graph.Beta.PowerShell.Models.IMicrosoftGraphScopedRoleMembership

System.Collections.IDictionary

Outputs

Microsoft.Graph.Beta.PowerShell.Models.IMicrosoftGraphScopedRoleMembership

Notes

COMPLEX PARAMETER PROPERTIES

To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.

BODYPARAMETER <IMicrosoftGraphScopedRoleMembership>: scopedRoleMembership

• [(Any) <Object>]: This indicates any property can be added to this object.
• [Id <String>]: The unique identifier for an entity. Read-only.
• [AdministrativeUnitId <String>]: Unique identifier for the administrative unit that the directory role is scoped to
• [RoleId <String>]: Unique identifier for the directory role that the member is in.
• [RoleMemberInfo <IMicrosoftGraphIdentity>]: identity
  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [DisplayName <String>]: The display name of the identity. The display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user won't show up as having changed when using delta.
  • [Id <String>]: Unique identifier for the identity. When the unique identifier is unavailable, the displayName property is provided for the identity, but the id property isn't included in the response.

INPUTOBJECT <IIdentityDirectoryManagementIdentity>: Identity Parameter

• [AdministrativeUnitId <String>]: The unique identifier of administrativeUnit
• [AllowedValueId <String>]: The unique identifier of allowedValue
• [AttributeSetId <String>]: The unique identifier of attributeSet
• [CertificateAuthorityAsEntityId <String>]: The unique identifier of certificateAuthorityAsEntity
• [CertificateBasedApplicationConfigurationId <String>]: The unique identifier of certificateBasedApplicationConfiguration
• [CommandId <String>]: The unique identifier of command
• [CommerceSubscriptionId <String>]: Alternate key of companySubscription
• [CompanySubscriptionId <String>]: The unique identifier of companySubscription
• [ContractId <String>]: The unique identifier of contract
• [CustomSecurityAttributeDefinitionId <String>]: The unique identifier of customSecurityAttributeDefinition
• [DeviceId <String>]: The unique identifier of device
• [DeviceLocalCredentialInfoId <String>]: The unique identifier of deviceLocalCredentialInfo
• [DirectoryObjectId <String>]: The unique identifier of directoryObject
• [DirectoryRoleId <String>]: The unique identifier of directoryRole
• [DirectoryRoleTemplateId <String>]: The unique identifier of directoryRoleTemplate
• [DirectorySettingId <String>]: The unique identifier of directorySetting
• [DirectorySettingTemplateId <String>]: The unique identifier of directorySettingTemplate
• [DomainDnsRecordId <String>]: The unique identifier of domainDnsRecord
• [DomainId <String>]: The unique identifier of domain
• [ExtensionId <String>]: The unique identifier of extension
• [ExternalUserProfileId <String>]: The unique identifier of externalUserProfile
• [FeatureRolloutPolicyId <String>]: The unique identifier of featureRolloutPolicy
• [IdentityProviderBaseId <String>]: The unique identifier of identityProviderBase
• [ImpactedResourceId <String>]: The unique identifier of impactedResource
• [InboundSharedUserProfileUserId <String>]: The unique identifier of inboundSharedUserProfile
• [InternalDomainFederationId <String>]: The unique identifier of internalDomainFederation
• [ManagedTenantAlertId <String>]: The unique identifier of managedTenantAlert
• [ManagementActionId <String>]: The unique identifier of managementAction
• [OcpSubscriptionId <String>]: Alternate key of companySubscription
• [OnPremisesDirectorySynchronizationId <String>]: The unique identifier of onPremisesDirectorySynchronization
• [OrgContactId <String>]: The unique identifier of orgContact
• [OrganizationId <String>]: The unique identifier of organization
• [OrganizationalBrandingLocalizationId <String>]: The unique identifier of organizationalBrandingLocalization
• [OutboundSharedUserProfileUserId <String>]: The unique identifier of outboundSharedUserProfile
• [PendingExternalUserProfileId <String>]: The unique identifier of pendingExternalUserProfile
• [ProfileCardPropertyId <String>]: The unique identifier of profileCardProperty
• [RecommendationId <String>]: The unique identifier of recommendation
• [RoleTemplateId <String>]: Alternate key of directoryRole
• [ScopedRoleMembershipId <String>]: The unique identifier of scopedRoleMembership
• [SharedEmailDomainId <String>]: The unique identifier of sharedEmailDomain
• [SharedEmailDomainInvitationId <String>]: The unique identifier of sharedEmailDomainInvitation
• [SubscribedSkuId <String>]: The unique identifier of subscribedSku
• [TenantId <String>]: The unique identifier of tenant
• [TenantReferenceTenantId <String>]: The unique identifier of tenantReference
• [TenantTagId <String>]: The unique identifier of tenantTag
• [UsageRightId <String>]: The unique identifier of usageRight
• [UserId <String>]: The unique identifier of user

ROLEMEMBERINFO <IMicrosoftGraphIdentity>: identity

• [(Any) <Object>]: This indicates any property can be added to this object.
• [DisplayName <String>]: The display name of the identity. The display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user won't show up as having changed when using delta.
• [Id <String>]: Unique identifier for the identity. When the unique identifier is unavailable, the displayName property is provided for the identity, but the id property isn't included in the response.

Related Links

• https://learn.microsoft.com/powershell/module/microsoft.graph.beta.identity.directorymanagement/new-mgbetaadministrativeunitscopedrolemember
• https://learn.microsoft.com/graph/api/administrativeunit-post-scopedrolemembers?view=graph-rest-1.0