Microsoft.Graph.Beta.Identity.DirectoryManagement
Microsoft Graph PowerShell Cmdlets
Microsoft.Graph.Beta.Identity.DirectoryManagement
| Add-MgBetaTenantRelationshipManagedTenantAlertUserInputLog |
Invoke action addUserInputLog |
| Add-MgBetaTenantRelationshipManagedTenantManagementAction |
Applies a management action against a specific managed tenant. By performing this operation the appropriate configurations will be made and policies created. As example when applying the require multifactor authentication for admins management action creates a Microsoft Entra Conditional Access policy that requires multifactor authentication for all users that have been assigned an administrative directory role. |
| Complete-MgBetaDirectoryImpactedResource |
Complete an impactedResource object and update its status to completedByUser. |
| Complete-MgBetaDirectoryRecommendation |
Complete a recommendation object and update its status to completedByUser. |
| Complete-MgBetaDirectoryRecommendationImpactedResource |
Complete an impactedResource object and update its status to completedByUser. |
| Confirm-MgBetaAdministrativeUnitMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. |
| Confirm-MgBetaAdministrativeUnitMemberObject |
Invoke action checkMemberObjects |
| Confirm-MgBetaContactMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the v1.0 release of this cmdlet, view Confirm-MgContactMemberGroup |
| Confirm-MgBetaContactMemberObject |
Invoke action checkMemberObjects Note To view the v1.0 release of this cmdlet, view Confirm-MgContactMemberObject |
| Confirm-MgBetaContractMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the v1.0 release of this cmdlet, view Confirm-MgContractMemberGroup |
| Confirm-MgBetaContractMemberObject |
Invoke action checkMemberObjects Note To view the v1.0 release of this cmdlet, view Confirm-MgContractMemberObject |
| Confirm-MgBetaDeviceMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the v1.0 release of this cmdlet, view Confirm-MgDeviceMemberGroup |
| Confirm-MgBetaDeviceMemberObject |
Invoke action checkMemberObjects Note To view the v1.0 release of this cmdlet, view Confirm-MgDeviceMemberObject |
| Confirm-MgBetaDirectoryDeletedItemMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryDeletedItemMemberGroup |
| Confirm-MgBetaDirectoryDeletedItemMemberObject |
Invoke action checkMemberObjects Note To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryDeletedItemMemberObject |
| Confirm-MgBetaDirectoryRoleMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleMemberGroup |
| Confirm-MgBetaDirectoryRoleMemberObject |
Invoke action checkMemberObjects Note To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleMemberObject |
| Confirm-MgBetaDirectoryRoleTemplateMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleTemplateMemberGroup |
| Confirm-MgBetaDirectoryRoleTemplateMemberObject |
Invoke action checkMemberObjects Note To view the v1.0 release of this cmdlet, view Confirm-MgDirectoryRoleTemplateMemberObject |
| Confirm-MgBetaDirectorySettingTemplateMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. |
| Confirm-MgBetaDirectorySettingTemplateMemberObject |
Invoke action checkMemberObjects |
| Confirm-MgBetaDomain |
Validate the ownership of a domain. Note To view the v1.0 release of this cmdlet, view Confirm-MgDomain |
| Confirm-MgBetaOrganizationMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the v1.0 release of this cmdlet, view Confirm-MgOrganizationMemberGroup |
| Confirm-MgBetaOrganizationMemberObject |
Invoke action checkMemberObjects Note To view the v1.0 release of this cmdlet, view Confirm-MgOrganizationMemberObject |
| Export-MgBetaDirectoryInboundSharedUserProfilePersonalData |
Create a request to export the personal data for an inboundSharedUserProfile. |
| Get-MgBetaAdministrativeUnit |
Retrieve the properties and relationships of an administrativeUnit object. Since the administrativeUnit resource supports extensions, you can also use the GET operation to get custom properties and extension data in an administrativeUnit instance. |
| Get-MgBetaAdministrativeUnitById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: |
| Get-MgBetaAdministrativeUnitCount |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitDelta |
Get newly created, updated, or deleted administrativeUnits without having to perform a full read of the entire resource collection. For details, see Using delta query. |
| Get-MgBetaAdministrativeUnitExtension |
The collection of open extensions defined for this administrative unit. Nullable. |
| Get-MgBetaAdministrativeUnitExtensionCount |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMember |
Users and groups that are members of this administrative unit. Supports $expand. |
| Get-MgBetaAdministrativeUnitMemberAsApplication |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.application |
| Get-MgBetaAdministrativeUnitMemberAsDevice |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.device |
| Get-MgBetaAdministrativeUnitMemberAsGroup |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.group |
| Get-MgBetaAdministrativeUnitMemberAsOrgContact |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact |
| Get-MgBetaAdministrativeUnitMemberAsServicePrincipal |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal |
| Get-MgBetaAdministrativeUnitMemberAsUser |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.user |
| Get-MgBetaAdministrativeUnitMemberByRef |
Users and groups that are members of this administrative unit. Supports $expand. |
| Get-MgBetaAdministrativeUnitMemberCount |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMemberCountAsApplication |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMemberCountAsDevice |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMemberCountAsGroup |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMemberCountAsOrgContact |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMemberCountAsServicePrincipal |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMemberCountAsUser |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. |
| Get-MgBetaAdministrativeUnitMemberObject |
Invoke action getMemberObjects |
| Get-MgBetaAdministrativeUnitScopedRoleMember |
Get a Microsoft Entra role assignment with administrative unit scope. |
| Get-MgBetaAdministrativeUnitScopedRoleMemberCount |
Get the number of the resource |
| Get-MgBetaAdministrativeUnitUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaAdminPeople |
Retrieve the properties and relationships of a peopleAdminSettings object. Note To view the v1.0 release of this cmdlet, view Get-MgAdminPeople |
| Get-MgBetaAdminPeopleItemInsight |
Get the properties of an insightsSettings object for displaying or returning item insights in an organization. To learn how to customize the privacy of item insights in an organization, see Customize item insights privacy in Microsoft Graph. Note To view the v1.0 release of this cmdlet, view Get-MgAdminPeopleItemInsight |
| Get-MgBetaAdminPeopleProfileCardProperty |
Retrieve the properties of a profileCardProperty entity. The profileCardProperty is identified by its directoryPropertyName property. Note To view the v1.0 release of this cmdlet, view Get-MgAdminPeopleProfileCardProperty |
| Get-MgBetaAdminPeopleProfileCardPropertyCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgAdminPeopleProfileCardPropertyCount |
| Get-MgBetaAdminPeoplePronoun |
Get the properties of the pronounsSettings resource for an organization. For more information on settings to manage pronouns support, see Manage pronouns settings for an organization using the Microsoft Graph API. Note To view the v1.0 release of this cmdlet, view Get-MgAdminPeoplePronoun |
| Get-MgBetaContact |
Get the properties and relationships of an organizational contact object. Note To view the v1.0 release of this cmdlet, view Get-MgContact |
| Get-MgBetaContactById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: Note To view the v1.0 release of this cmdlet, view Get-MgContactById |
| Get-MgBetaContactCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactCount |
| Get-MgBetaContactDelta |
Get newly created, updated, or deleted organizational contacts without having to perform a full read of the entire collection. See change tracking for details. Note To view the v1.0 release of this cmdlet, view Get-MgContactDelta |
| Get-MgBetaContactDirectReport |
The contact's direct reports. (The users and contacts that have their manager property set to this contact.) Read-only. Nullable. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgContactDirectReport |
| Get-MgBetaContactDirectReportAsOrgContact |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact Note To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportAsOrgContact |
| Get-MgBetaContactDirectReportAsUser |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.user Note To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportAsUser |
| Get-MgBetaContactDirectReportCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportCount |
| Get-MgBetaContactDirectReportCountAsOrgContact |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportCountAsOrgContact |
| Get-MgBetaContactDirectReportCountAsUser |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactDirectReportCountAsUser |
| Get-MgBetaContactManager |
Get the contact's manager Note To view the v1.0 release of this cmdlet, view Get-MgContactManager |
| Get-MgBetaContactMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberGroup |
| Get-MgBetaContactMemberObject |
Invoke action getMemberObjects Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberObject |
| Get-MgBetaContactMemberOf |
Groups that this contact is a member of. Read-only. Nullable. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberOf |
| Get-MgBetaContactMemberOfAsAdministrativeUnit |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfAsAdministrativeUnit |
| Get-MgBetaContactMemberOfAsGroup |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.group Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfAsGroup |
| Get-MgBetaContactMemberOfCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfCount |
| Get-MgBetaContactMemberOfCountAsAdministrativeUnit |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfCountAsAdministrativeUnit |
| Get-MgBetaContactMemberOfCountAsGroup |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactMemberOfCountAsGroup |
| Get-MgBetaContactServiceProvisioningError |
Errors published by a federated service describing a non-transient, service-specific error regarding the properties or link from an orgContact object . Supports $filter (eq, not, for isResolved and serviceInstance). Note To view the v1.0 release of this cmdlet, view Get-MgContactServiceProvisioningError |
| Get-MgBetaContactServiceProvisioningErrorCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactServiceProvisioningErrorCount |
| Get-MgBetaContactTransitiveMemberOf |
Get transitiveMemberOf from contacts Note To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOf |
| Get-MgBetaContactTransitiveMemberOfAsAdministrativeUnit |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit Note To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfAsAdministrativeUnit |
| Get-MgBetaContactTransitiveMemberOfAsGroup |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.group Note To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfAsGroup |
| Get-MgBetaContactTransitiveMemberOfCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfCount |
| Get-MgBetaContactTransitiveMemberOfCountAsAdministrativeUnit |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfCountAsAdministrativeUnit |
| Get-MgBetaContactTransitiveMemberOfCountAsGroup |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContactTransitiveMemberOfCountAsGroup |
| Get-MgBetaContactTransitiveReport |
The transitive reports for a contact. Read-only. |
| Get-MgBetaContactTransitiveReportCount |
Get the number of the resource |
| Get-MgBetaContactUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaContract |
Retrieve the properties and relationships of contract object. Note To view the v1.0 release of this cmdlet, view Get-MgContract |
| Get-MgBetaContractById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: Note To view the v1.0 release of this cmdlet, view Get-MgContractById |
| Get-MgBetaContractCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgContractCount |
| Get-MgBetaContractDelta |
Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details. Note To view the v1.0 release of this cmdlet, view Get-MgContractDelta |
| Get-MgBetaContractMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the v1.0 release of this cmdlet, view Get-MgContractMemberGroup |
| Get-MgBetaContractMemberObject |
Invoke action getMemberObjects Note To view the v1.0 release of this cmdlet, view Get-MgContractMemberObject |
| Get-MgBetaContractUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaDevice |
Get the properties and relationships of a device object. Since the device resource supports extensions, you can also use the GET operation to get custom properties and extension data in a device instance. Note To view the v1.0 release of this cmdlet, view Get-MgDevice |
| Get-MgBetaDeviceByDeviceId |
Get the properties and relationships of a device object. Since the device resource supports extensions, you can also use the GET operation to get custom properties and extension data in a device instance. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceByDeviceId |
| Get-MgBetaDeviceById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: Note To view the v1.0 release of this cmdlet, view Get-MgDeviceById |
| Get-MgBetaDeviceCommand |
Set of commands sent to this device. |
| Get-MgBetaDeviceCommandCount |
Get the number of the resource |
| Get-MgBetaDeviceCommandResponsepayload |
Get responsepayload from devices |
| Get-MgBetaDeviceCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceCount |
| Get-MgBetaDeviceDelta |
Get newly created, updated, or deleted devices without performing a full read of the entire resource collection. For more information, see Using delta query. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceDelta |
| Get-MgBetaDeviceExtension |
The collection of open extensions defined for the device. Read-only. Nullable. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceExtension |
| Get-MgBetaDeviceExtensionCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceExtensionCount |
| Get-MgBetaDeviceMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberGroup |
| Get-MgBetaDeviceMemberObject |
Invoke action getMemberObjects Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberObject |
| Get-MgBetaDeviceMemberOf |
Groups and administrative units that this device is a member of. Read-only. Nullable. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOf |
| Get-MgBetaDeviceMemberOfAsAdministrativeUnit |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfAsAdministrativeUnit |
| Get-MgBetaDeviceMemberOfAsGroup |
Get groups and administrative units that the device is a direct member of. This operation is not transitive. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfAsGroup |
| Get-MgBetaDeviceMemberOfCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfCount |
| Get-MgBetaDeviceMemberOfCountAsAdministrativeUnit |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfCountAsAdministrativeUnit |
| Get-MgBetaDeviceMemberOfCountAsGroup |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceMemberOfCountAsGroup |
| Get-MgBetaDeviceRegisteredOwner |
Retrieve a list of users that are registered owners of the device. A registered owner is the user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Currently, there can be only one owner. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwner |
| Get-MgBetaDeviceRegisteredOwnerAsEndpoint |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerAsEndpoint |
| Get-MgBetaDeviceRegisteredOwnerAsServicePrincipal |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerAsServicePrincipal |
| Get-MgBetaDeviceRegisteredOwnerAsUser |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.user Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerAsUser |
| Get-MgBetaDeviceRegisteredOwnerByRef |
Retrieve a list of users that are registered owners of the device. A registered owner is the user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Currently, there can be only one owner. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerByRef |
| Get-MgBetaDeviceRegisteredOwnerCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCount |
| Get-MgBetaDeviceRegisteredOwnerCountAsEndpoint |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCountAsEndpoint |
| Get-MgBetaDeviceRegisteredOwnerCountAsServicePrincipal |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCountAsServicePrincipal |
| Get-MgBetaDeviceRegisteredOwnerCountAsUser |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredOwnerCountAsUser |
| Get-MgBetaDeviceRegisteredUser |
Retrieve a list of users that are registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUser |
| Get-MgBetaDeviceRegisteredUserAsEndpoint |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserAsEndpoint |
| Get-MgBetaDeviceRegisteredUserAsServicePrincipal |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserAsServicePrincipal |
| Get-MgBetaDeviceRegisteredUserAsUser |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.user Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserAsUser |
| Get-MgBetaDeviceRegisteredUserByRef |
Retrieve a list of users that are registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserByRef |
| Get-MgBetaDeviceRegisteredUserCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCount |
| Get-MgBetaDeviceRegisteredUserCountAsEndpoint |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCountAsEndpoint |
| Get-MgBetaDeviceRegisteredUserCountAsServicePrincipal |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCountAsServicePrincipal |
| Get-MgBetaDeviceRegisteredUserCountAsUser |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceRegisteredUserCountAsUser |
| Get-MgBetaDeviceTransitiveMemberOf |
Groups and administrative units that this device is a member of. This operation is transitive. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOf |
| Get-MgBetaDeviceTransitiveMemberOfAsAdministrativeUnit |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit Note To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfAsAdministrativeUnit |
| Get-MgBetaDeviceTransitiveMemberOfAsGroup |
Get groups and administrative units that the device is a member of. This API request is transitive, and will also return all groups and administrative units the device is a nested member of. Note To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfAsGroup |
| Get-MgBetaDeviceTransitiveMemberOfCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfCount |
| Get-MgBetaDeviceTransitiveMemberOfCountAsAdministrativeUnit |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfCountAsAdministrativeUnit |
| Get-MgBetaDeviceTransitiveMemberOfCountAsGroup |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDeviceTransitiveMemberOfCountAsGroup |
| Get-MgBetaDeviceUsageRights |
Represents the usage rights a device has been granted. |
| Get-MgBetaDeviceUsageRightsCount |
Get the number of the resource |
| Get-MgBetaDeviceUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaDirectory |
Get directory Note To view the v1.0 release of this cmdlet, view Get-MgDirectory |
| Get-MgBetaDirectoryAdministrativeUnit |
Conceptual container for user and group directory objects. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnit |
| Get-MgBetaDirectoryAdministrativeUnitCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitCount |
| Get-MgBetaDirectoryAdministrativeUnitDelta |
Get newly created, updated, or deleted administrativeUnits without having to perform a full read of the entire resource collection. For details, see Using delta query. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitDelta |
| Get-MgBetaDirectoryAdministrativeUnitExtension |
The collection of open extensions defined for this administrative unit. Nullable. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitExtension |
| Get-MgBetaDirectoryAdministrativeUnitExtensionCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitExtensionCount |
| Get-MgBetaDirectoryAdministrativeUnitMember |
Users and groups that are members of this administrative unit. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMember |
| Get-MgBetaDirectoryAdministrativeUnitMemberAsApplication |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.application Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsApplication |
| Get-MgBetaDirectoryAdministrativeUnitMemberAsDevice |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.device Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsDevice |
| Get-MgBetaDirectoryAdministrativeUnitMemberAsGroup |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.group Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsGroup |
| Get-MgBetaDirectoryAdministrativeUnitMemberAsOrgContact |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsOrgContact |
| Get-MgBetaDirectoryAdministrativeUnitMemberAsServicePrincipal |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsServicePrincipal |
| Get-MgBetaDirectoryAdministrativeUnitMemberAsUser |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.user Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberAsUser |
| Get-MgBetaDirectoryAdministrativeUnitMemberByRef |
Users and groups that are members of this administrative unit. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberByRef |
| Get-MgBetaDirectoryAdministrativeUnitMemberCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCount |
| Get-MgBetaDirectoryAdministrativeUnitMemberCountAsApplication |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsApplication |
| Get-MgBetaDirectoryAdministrativeUnitMemberCountAsDevice |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsDevice |
| Get-MgBetaDirectoryAdministrativeUnitMemberCountAsGroup |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsGroup |
| Get-MgBetaDirectoryAdministrativeUnitMemberCountAsOrgContact |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsOrgContact |
| Get-MgBetaDirectoryAdministrativeUnitMemberCountAsServicePrincipal |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsServicePrincipal |
| Get-MgBetaDirectoryAdministrativeUnitMemberCountAsUser |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitMemberCountAsUser |
| Get-MgBetaDirectoryAdministrativeUnitScopedRoleMember |
Scoped-role members of this administrative unit. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitScopedRoleMember |
| Get-MgBetaDirectoryAdministrativeUnitScopedRoleMemberCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAdministrativeUnitScopedRoleMemberCount |
| Get-MgBetaDirectoryAttributeSet |
Read the properties and relationships of an attributeSet object. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAttributeSet |
| Get-MgBetaDirectoryAttributeSetCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryAttributeSetCount |
| Get-MgBetaDirectoryCertificateAuthority |
Get certificateAuthorities from directory |
| Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration |
Read the properties and relationships of a certificateBasedApplicationConfiguration object. |
| Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationCount |
Get the number of the resource |
| Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority |
Read the properties and relationships of a certificateAuthorityAsEntity object. |
| Get-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthorityCount |
Get the number of the resource |
| Get-MgBetaDirectoryCustomSecurityAttributeDefinition |
Read the properties and relationships of a customSecurityAttributeDefinition object. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinition |
| Get-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue |
Read the properties and relationships of an allowedValue object. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue |
| Get-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValueCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinitionAllowedValueCount |
| Get-MgBetaDirectoryCustomSecurityAttributeDefinitionCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryCustomSecurityAttributeDefinitionCount |
| Get-MgBetaDirectoryDeletedItem |
Recently deleted items. Read-only. Nullable. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItem |
| Get-MgBetaDirectoryDeletedItemAsAdministrativeUnit |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsAdministrativeUnit |
| Get-MgBetaDirectoryDeletedItemAsApplication |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.application Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsApplication |
| Get-MgBetaDirectoryDeletedItemAsDevice |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.device Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsDevice |
| Get-MgBetaDirectoryDeletedItemAsGroup |
Retrieve a list of recently deleted directory objects. Currently, deleted items functionality is only supported for the application, servicePrincipal, externalUserProfile, group, administrative unit, pendingExternalUserProfile, and user resources. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsGroup |
| Get-MgBetaDirectoryDeletedItemAsServicePrincipal |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsServicePrincipal |
| Get-MgBetaDirectoryDeletedItemAsUser |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.user Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemAsUser |
| Get-MgBetaDirectoryDeletedItemById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemById |
| Get-MgBetaDirectoryDeletedItemCountAsAdministrativeUnit |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsAdministrativeUnit |
| Get-MgBetaDirectoryDeletedItemCountAsApplication |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsApplication |
| Get-MgBetaDirectoryDeletedItemCountAsDevice |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsDevice |
| Get-MgBetaDirectoryDeletedItemCountAsGroup |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsGroup |
| Get-MgBetaDirectoryDeletedItemCountAsServicePrincipal |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsServicePrincipal |
| Get-MgBetaDirectoryDeletedItemCountAsUser |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemCountAsUser |
| Get-MgBetaDirectoryDeletedItemMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemMemberGroup |
| Get-MgBetaDirectoryDeletedItemMemberObject |
Invoke action getMemberObjects Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeletedItemMemberObject |
| Get-MgBetaDirectoryDeviceLocalCredential |
Retrieve the properties of a deviceLocalCredentialInfo for a specified device object. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeviceLocalCredential |
| Get-MgBetaDirectoryDeviceLocalCredentialCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryDeviceLocalCredentialCount |
| Get-MgBetaDirectoryExternalUserProfile |
Retrieve the properties of a specific externalUserProfile. |
| Get-MgBetaDirectoryExternalUserProfileCount |
Get the number of the resource |
| Get-MgBetaDirectoryFeatureRolloutPolicy |
Get featureRolloutPolicies from directory |
| Get-MgBetaDirectoryFeatureRolloutPolicyApplyTo |
Nullable. Specifies a list of directoryObject resources that feature is enabled for. |
| Get-MgBetaDirectoryFeatureRolloutPolicyApplyToCount |
Get the number of the resource |
| Get-MgBetaDirectoryFeatureRolloutPolicyCount |
Get the number of the resource |
| Get-MgBetaDirectoryFederationConfiguration |
Configure domain federation with organizations whose identity provider (IdP) supports either the SAML or WS-Fed protocol. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryFederationConfiguration |
| Get-MgBetaDirectoryFederationConfigurationCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryFederationConfigurationCount |
| Get-MgBetaDirectoryImpactedResource |
Get impactedResources from directory |
| Get-MgBetaDirectoryImpactedResourceCount |
Get the number of the resource |
| Get-MgBetaDirectoryInboundSharedUserProfile |
Read the properties of an inboundSharedUserProfile. |
| Get-MgBetaDirectoryInboundSharedUserProfileCount |
Get the number of the resource |
| Get-MgBetaDirectoryOnPremiseSynchronization |
Read the properties and relationships of an onPremisesDirectorySynchronization object. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryOnPremiseSynchronization |
| Get-MgBetaDirectoryOnPremiseSynchronizationCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryOnPremiseSynchronizationCount |
| Get-MgBetaDirectoryOutboundSharedUserProfile |
Get the details of an outboundSharedUserProfile. |
| Get-MgBetaDirectoryOutboundSharedUserProfileCount |
Get the number of the resource |
| Get-MgBetaDirectoryOutboundSharedUserProfileTenant |
The collection of external Microsoft Entra tenants that the user shared profile data with. Read-only. |
| Get-MgBetaDirectoryOutboundSharedUserProfileTenantCount |
Get the number of the resource |
| Get-MgBetaDirectoryPendingExternalUserProfile |
Retrieve the properties of a specific pendingExternalUserProfile. |
| Get-MgBetaDirectoryPendingExternalUserProfileCount |
Get the number of the resource |
| Get-MgBetaDirectoryRecommendation |
Read the properties and relationships of a recommendation object. |
| Get-MgBetaDirectoryRecommendationCount |
Get the number of the resource |
| Get-MgBetaDirectoryRecommendationImpactedResource |
Read the properties and relationships of an impactedResource object. |
| Get-MgBetaDirectoryRecommendationImpactedResourceCount |
Get the number of the resource |
| Get-MgBetaDirectoryRole |
Retrieve the properties of a directoryRole object. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRole |
| Get-MgBetaDirectoryRoleById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleById |
| Get-MgBetaDirectoryRoleByRoleTemplateId |
Retrieve the properties of a directoryRole object. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleByRoleTemplateId |
| Get-MgBetaDirectoryRoleCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleCount |
| Get-MgBetaDirectoryRoleDelta |
Get newly created, updated, or deleted directory roles without having to perform a full read of the entire resource collection. See Using Delta Query for details. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleDelta |
| Get-MgBetaDirectoryRoleMember |
Retrieve a list of the users that are assigned to the directory role. Only users can be assigned to a directory role. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMember |
| Get-MgBetaDirectoryRoleMemberAsApplication |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.application Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsApplication |
| Get-MgBetaDirectoryRoleMemberAsDevice |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.device Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsDevice |
| Get-MgBetaDirectoryRoleMemberAsGroup |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.group Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsGroup |
| Get-MgBetaDirectoryRoleMemberAsOrgContact |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsOrgContact |
| Get-MgBetaDirectoryRoleMemberAsServicePrincipal |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsServicePrincipal |
| Get-MgBetaDirectoryRoleMemberAsUser |
Get the item of type microsoft.graph.directoryObject as microsoft.graph.user Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberAsUser |
| Get-MgBetaDirectoryRoleMemberByRef |
Retrieve a list of the users that are assigned to the directory role. Only users can be assigned to a directory role. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberByRef |
| Get-MgBetaDirectoryRoleMemberCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCount |
| Get-MgBetaDirectoryRoleMemberCountAsApplication |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsApplication |
| Get-MgBetaDirectoryRoleMemberCountAsDevice |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsDevice |
| Get-MgBetaDirectoryRoleMemberCountAsGroup |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsGroup |
| Get-MgBetaDirectoryRoleMemberCountAsOrgContact |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsOrgContact |
| Get-MgBetaDirectoryRoleMemberCountAsServicePrincipal |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsServicePrincipal |
| Get-MgBetaDirectoryRoleMemberCountAsUser |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberCountAsUser |
| Get-MgBetaDirectoryRoleMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberGroup |
| Get-MgBetaDirectoryRoleMemberObject |
Invoke action getMemberObjects Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleMemberObject |
| Get-MgBetaDirectoryRoleScopedMember |
Members of this directory role that are scoped to administrative units. Read-only. Nullable. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleScopedMember |
| Get-MgBetaDirectoryRoleScopedMemberCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleScopedMemberCount |
| Get-MgBetaDirectoryRoleTemplate |
Retrieve the properties and relationships of a directoryroletemplate object. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplate |
| Get-MgBetaDirectoryRoleTemplateById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateById |
| Get-MgBetaDirectoryRoleTemplateCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateCount |
| Get-MgBetaDirectoryRoleTemplateDelta |
Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateDelta |
| Get-MgBetaDirectoryRoleTemplateMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateMemberGroup |
| Get-MgBetaDirectoryRoleTemplateMemberObject |
Invoke action getMemberObjects Note To view the v1.0 release of this cmdlet, view Get-MgDirectoryRoleTemplateMemberObject |
| Get-MgBetaDirectoryRoleTemplateUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaDirectoryRoleUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaDirectorySetting |
Retrieve the properties of a specific directory setting object. |
| Get-MgBetaDirectorySettingTemplate |
A directory setting template represents a template of settings from which settings may be created within a tenant. This operation allows retrieval of the properties of the directorySettingTemplate object, including the available settings and their defaults. |
| Get-MgBetaDirectorySettingTemplateById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: |
| Get-MgBetaDirectorySettingTemplateCount |
Get the number of the resource |
| Get-MgBetaDirectorySettingTemplateDelta |
Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details. |
| Get-MgBetaDirectorySettingTemplateMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. |
| Get-MgBetaDirectorySettingTemplateMemberObject |
Invoke action getMemberObjects |
| Get-MgBetaDirectorySettingTemplateUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaDirectorySharedEmailDomain |
Get sharedEmailDomains from directory |
| Get-MgBetaDirectorySharedEmailDomainCount |
Get the number of the resource |
| Get-MgBetaDirectorySubscription |
Get a specific commercial subscription that an organization has acquired. Note To view the v1.0 release of this cmdlet, view Get-MgDirectorySubscription |
| Get-MgBetaDirectorySubscriptionByCommerceSubscriptionId |
Get a specific commercial subscription that an organization has acquired. Note To view the v1.0 release of this cmdlet, view Get-MgDirectorySubscriptionByCommerceSubscriptionId |
| Get-MgBetaDirectorySubscriptionByOcpSubscriptionId |
Get a specific commercial subscription that an organization has acquired. |
| Get-MgBetaDirectorySubscriptionCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDirectorySubscriptionCount |
| Get-MgBetaDomain |
Retrieve the properties and relationships of domain object. Note To view the v1.0 release of this cmdlet, view Get-MgDomain |
| Get-MgBetaDomainCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDomainCount |
| Get-MgBetaDomainFederationConfiguration |
Read the properties and relationships of an internalDomainFederation object. Note To view the v1.0 release of this cmdlet, view Get-MgDomainFederationConfiguration |
| Get-MgBetaDomainFederationConfigurationCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDomainFederationConfigurationCount |
| Get-MgBetaDomainNameReference |
The objects such as users and groups that reference the domain ID. Read-only, Nullable. Supports $expand and $filter by the OData type of objects returned. For example, /domains/{domainId}/domainNameReferences/microsoft.graph.user and /domains/{domainId}/domainNameReferences/microsoft.graph.group. Note To view the v1.0 release of this cmdlet, view Get-MgDomainNameReference |
| Get-MgBetaDomainNameReferenceCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDomainNameReferenceCount |
| Get-MgBetaDomainRootDomain |
Get the root domain of a subdomain.The API returns a single object which is the root domain of the specified subdomain. Note To view the v1.0 release of this cmdlet, view Get-MgDomainRootDomain |
| Get-MgBetaDomainServiceConfigurationRecord |
DNS records the customer adds to the DNS zone file of the domain before the domain can be used by Microsoft Online services. Read-only, Nullable. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgDomainServiceConfigurationRecord |
| Get-MgBetaDomainServiceConfigurationRecordCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDomainServiceConfigurationRecordCount |
| Get-MgBetaDomainSharedEmailDomainInvitation |
Get sharedEmailDomainInvitations from domains |
| Get-MgBetaDomainSharedEmailDomainInvitationCount |
Get the number of the resource |
| Get-MgBetaDomainVerificationDnsRecord |
DNS records that the customer adds to the DNS zone file of the domain before the customer can complete domain ownership verification with Microsoft Entra ID. Read-only, Nullable. Supports $expand. Note To view the v1.0 release of this cmdlet, view Get-MgDomainVerificationDnsRecord |
| Get-MgBetaDomainVerificationDnsRecordCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgDomainVerificationDnsRecordCount |
| Get-MgBetaOrganization |
Get the properties and relationships of the currently authenticated organization. Since the organization resource supports extensions, you can also use the GET operation to get custom properties and extension data in an organization instance. Note To view the v1.0 release of this cmdlet, view Get-MgOrganization |
| Get-MgBetaOrganizationBranding |
Retrieve the default organizational branding object, if the Accept-Language header is set to 0 or default. If no default organizational branding object exists, this method returns a 404 Not Found error. If the Accept-Language header is set to an existing locale identified by the value of its id, this method retrieves the branding for the specified locale. This method retrieves only non-Stream properties, for example, usernameHintText and signInPageText. To retrieve Stream types of the default branding, for example, bannerLogo and backgroundImage, use the GET organizationalBrandingLocalization method. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBranding |
| Get-MgBetaOrganizationBrandingBackgroundImage |
Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingBackgroundImage |
| Get-MgBetaOrganizationBrandingBannerLogo |
A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingBannerLogo |
| Get-MgBetaOrganizationBrandingCustomCss |
CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingCustomCss |
| Get-MgBetaOrganizationBrandingFavicon |
A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingFavicon |
| Get-MgBetaOrganizationBrandingHeaderLogo |
A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingHeaderLogo |
| Get-MgBetaOrganizationBrandingLocalization |
Read the properties and relationships of an organizationalBrandingLocalization object. To retrieve a localization branding object, specify the value of id in the URL. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalization |
| Get-MgBetaOrganizationBrandingLocalizationBackgroundImage |
Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationBackgroundImage |
| Get-MgBetaOrganizationBrandingLocalizationBannerLogo |
A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationBannerLogo |
| Get-MgBetaOrganizationBrandingLocalizationCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationCount |
| Get-MgBetaOrganizationBrandingLocalizationCustomCss |
CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationCustomCss |
| Get-MgBetaOrganizationBrandingLocalizationFavicon |
A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationFavicon |
| Get-MgBetaOrganizationBrandingLocalizationHeaderLogo |
A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationHeaderLogo |
| Get-MgBetaOrganizationBrandingLocalizationSquareLogo |
A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationSquareLogo |
| Get-MgBetaOrganizationBrandingLocalizationSquareLogoDark |
A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingLocalizationSquareLogoDark |
| Get-MgBetaOrganizationBrandingSquareLogo |
A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingSquareLogo |
| Get-MgBetaOrganizationBrandingSquareLogoDark |
A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationBrandingSquareLogoDark |
| Get-MgBetaOrganizationById |
Return the directory objects specified in a list of IDs. Some common uses for this function are to: Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationById |
| Get-MgBetaOrganizationCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationCount |
| Get-MgBetaOrganizationExtension |
The collection of open extensions defined for the organization resource. Nullable. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationExtension |
| Get-MgBetaOrganizationExtensionCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationExtensionCount |
| Get-MgBetaOrganizationMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationMemberGroup |
| Get-MgBetaOrganizationMemberObject |
Invoke action getMemberObjects Note To view the v1.0 release of this cmdlet, view Get-MgOrganizationMemberObject |
| Get-MgBetaOrganizationPartnerInformation |
Get partnerInformation from organization |
| Get-MgBetaOrganizationSetting |
Retrieve the properties and relationships of organizationSettings object. Nullable. |
| Get-MgBetaOrganizationSettingContactInsight |
Get the properties of an insightsSettings object for displaying or returning contact insights in an organization. |
| Get-MgBetaOrganizationSettingItemInsight |
Get the properties of an insightsSettings object for displaying or returning item insights in an organization. To learn how to customize the privacy of item insights in an organization, see Customize item insights privacy. |
| Get-MgBetaOrganizationSettingMicrosoftApplicationDataAccess |
Get the settings in a microsoftApplicationDataAccessSettings object that specify access from Microsoft applications to Microsoft 365 user data in an organization. |
| Get-MgBetaOrganizationSettingPersonInsight |
Get the properties of an insightsSettings object for displaying or returning people insights in an organization. To learn how to customize privacy for people insights in an organization, see Customize people insights privacy in Microsoft Graph. |
| Get-MgBetaOrganizationUserOwnedObject |
Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination. |
| Get-MgBetaSettingCount |
Get the number of the resource |
| Get-MgBetaSubscribedSku |
Get a specific commercial subscription that an organization has acquired. Note To view the v1.0 release of this cmdlet, view Get-MgSubscribedSku |
| Get-MgBetaUserScopedRoleMemberOf |
The scoped-role administrative unit memberships for this user. Read-only. Nullable. Note To view the v1.0 release of this cmdlet, view Get-MgUserScopedRoleMemberOf |
| Get-MgBetaUserScopedRoleMemberOfCount |
Get the number of the resource Note To view the v1.0 release of this cmdlet, view Get-MgUserScopedRoleMemberOfCount |
| Invoke-MgBetaAvailableDirectoryFederationConfigurationProviderType |
Get all identity providers supported in a directory. Note To view the v1.0 release of this cmdlet, view Invoke-MgAvailableDirectoryFederationConfigurationProviderType |
| Invoke-MgBetaDismissDirectoryImpactedResource |
Dismiss an impactedResources object and update its status to dismissed. |
| Invoke-MgBetaDismissDirectoryRecommendation |
Dismiss a recommendation object that you consider to be inapplicable to your tenant and update its status to dismissed . |
| Invoke-MgBetaDismissDirectoryRecommendationImpactedResource |
Dismiss an impactedResources object and update its status to dismissed. |
| Invoke-MgBetaForceDomainDelete |
Delete a domain using an asynchronous operation. Before performing this operation, you must update or remove any references to Exchange as the provisioning service. The following actions are performed as part of this operation: After the domain deletion completes, API operations for the deleted domain return a 404 HTTP response code. To verify deletion of a domain, you can perform a get domain. If the domain was successfully deleted, a 404 HTTP response code is returned in the response. Note To view the v1.0 release of this cmdlet, view Invoke-MgForceDomainDelete |
| Invoke-MgBetaPostponeDirectoryImpactedResource |
Postpone action on an impactedResource object to a specified future date and time by marking its status as postponed. On the specified date and time, Microsoft Entra ID will automatically mark the status of the impactedResource object to active. |
| Invoke-MgBetaPostponeDirectoryRecommendation |
Postpone action on a recommendation object to a specified future date and time by marking its status as postponed. On the date and time provided, Microsoft Entra ID will automatically update the status of the recommendation object to active again. |
| Invoke-MgBetaPostponeDirectoryRecommendationImpactedResource |
Postpone action on an impactedResource object to a specified future date and time by marking its status as postponed. On the specified date and time, Microsoft Entra ID will automatically mark the status of the impactedResource object to active. |
| Invoke-MgBetaPromoteDomain |
Promote a verified subdomain to the root domain. A verified domain has its isVerified property set to true. Note To view the v1.0 release of this cmdlet, view Invoke-MgPromoteDomain |
| Invoke-MgBetaPromoteDomainToInitial |
Invoke action promoteToInitial |
| Invoke-MgBetaReactivateDirectoryImpactedResource |
Reactivate an accidentally dismissed, completed, or postponed impactedResource object. This action updates the status of the resource to active. This method is relevant only if the status of the impactedResource object is dismissed, postponed, or completedByUser. |
| Invoke-MgBetaReactivateDirectoryRecommendation |
Reactivate a completed, dismissed, or postponed recommendation object. This action updates the status of the recommendation to active. This method only works when the status of the recommendation is completedByUser, dismissed, or postponed. |
| Invoke-MgBetaReactivateDirectoryRecommendationImpactedResource |
Reactivate an accidentally dismissed, completed, or postponed impactedResource object. This action updates the status of the resource to active. This method is relevant only if the status of the impactedResource object is dismissed, postponed, or completedByUser. |
| Invoke-MgBetaRetryContactServiceProvisioning |
Retry the orgContact service provisioning. Note To view the v1.0 release of this cmdlet, view Invoke-MgRetryContactServiceProvisioning |
| Invoke-MgBetaTagTenantRelationshipManagedTenantTagUnassign |
Un-assigns the tenant tag from the specified managed tenants. |
| Invoke-MgBetaTenantRelationshipManagedTenantGroupSearch |
Searches for the specified managed tenants across tenant groups. |
| Invoke-MgBetaTenantRelationshipManagedTenantOffboard |
Carries out the appropriate procedures to remove a managed tenant from the multitenant management platform. No relationships, such as commerce and delegate administrative privileges, will be impacted. The only change made by invoking this action is the tenant will be deprovisioned from the multitenant management platform. |
| New-MgBetaAdministrativeUnit |
Use this API to create a new administrativeUnit. |
| New-MgBetaAdministrativeUnitExtension |
Create new navigation property to extensions for administrativeUnits |
| New-MgBetaAdministrativeUnitMember |
Use this API to add a member (user, group, or device) to an administrative unit or to create a new group within an administrative unit. All group types can be created within an administrative unit. Note: Currently, it's only possible to add one member at a time to an administrative unit.` |
| New-MgBetaAdministrativeUnitMemberByRef |
Use this API to add a member (user, group, or device) to an administrative unit or to create a new group within an administrative unit. All group types can be created within an administrative unit. Note: Currently, it's only possible to add one member at a time to an administrative unit.` |
| New-MgBetaAdministrativeUnitScopedRoleMember |
Assign a Microsoft Entra role with administrative unit scope. For a list of roles that can be assigned with administrative unit scope, see Assign Microsoft Entra roles with administrative unit scope. |
| New-MgBetaAdminPeopleProfileCardProperty |
Create a new profileCardProperty for an organization. The new property is identified by its directoryPropertyName property. For more information about how to add properties to the profile card for an organization, see Add or remove custom attributes on a profile card using the profile card API. Note To view the v1.0 release of this cmdlet, view New-MgAdminPeopleProfileCardProperty |
| New-MgBetaContact |
Add new entity to contacts Note To view the v1.0 release of this cmdlet, view New-MgContact |
| New-MgBetaContract |
Add new entity to contracts Note To view the v1.0 release of this cmdlet, view New-MgContract |
| New-MgBetaDevice |
Create a new device. Note To view the v1.0 release of this cmdlet, view New-MgDevice |
| New-MgBetaDeviceCommand |
Create new navigation property to commands for devices |
| New-MgBetaDeviceExtension |
Create new navigation property to extensions for devices Note To view the v1.0 release of this cmdlet, view New-MgDeviceExtension |
| New-MgBetaDeviceRegisteredOwnerByRef |
Add a user as a registered owner of the device. Note To view the v1.0 release of this cmdlet, view New-MgDeviceRegisteredOwnerByRef |
| New-MgBetaDeviceRegisteredUserByRef |
Add a registered user for the device. Note To view the v1.0 release of this cmdlet, view New-MgDeviceRegisteredUserByRef |
| New-MgBetaDeviceUsageRights |
Create new navigation property to usageRights for devices |
| New-MgBetaDirectoryAdministrativeUnit |
Create new navigation property to administrativeUnits for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnit |
| New-MgBetaDirectoryAdministrativeUnitExtension |
Create new navigation property to extensions for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitExtension |
| New-MgBetaDirectoryAdministrativeUnitMember |
Create new navigation property to members for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitMember |
| New-MgBetaDirectoryAdministrativeUnitMemberByRef |
Create new navigation property ref to members for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitMemberByRef |
| New-MgBetaDirectoryAdministrativeUnitScopedRoleMember |
Create new navigation property to scopedRoleMembers for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryAdministrativeUnitScopedRoleMember |
| New-MgBetaDirectoryAttributeSet |
Create a new attributeSet object. Note To view the v1.0 release of this cmdlet, view New-MgDirectoryAttributeSet |
| New-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration |
Create new navigation property to certificateBasedApplicationConfigurations for directory |
| New-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority |
Create a new trusted certificate authority in a certificateBasedApplicationConfiguration object. |
| New-MgBetaDirectoryCustomSecurityAttributeDefinition |
Create a new customSecurityAttributeDefinition object. Note To view the v1.0 release of this cmdlet, view New-MgDirectoryCustomSecurityAttributeDefinition |
| New-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue |
Create a new allowedValue object. Note To view the v1.0 release of this cmdlet, view New-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue |
| New-MgBetaDirectoryDeviceLocalCredential |
Create new navigation property to deviceLocalCredentials for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryDeviceLocalCredential |
| New-MgBetaDirectoryExternalUserProfile |
Create new navigation property to externalUserProfiles for directory |
| New-MgBetaDirectoryFeatureRolloutPolicy |
Create new navigation property to featureRolloutPolicies for directory |
| New-MgBetaDirectoryFeatureRolloutPolicyApplyTo |
Create new navigation property to appliesTo for directory |
| New-MgBetaDirectoryFeatureRolloutPolicyApplyToByRef |
Create new navigation property ref to appliesTo for directory |
| New-MgBetaDirectoryFederationConfiguration |
Create new navigation property to federationConfigurations for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryFederationConfiguration |
| New-MgBetaDirectoryImpactedResource |
Create new navigation property to impactedResources for directory |
| New-MgBetaDirectoryInboundSharedUserProfile |
Create new navigation property to inboundSharedUserProfiles for directory |
| New-MgBetaDirectoryOnPremiseSynchronization |
Create new navigation property to onPremisesSynchronization for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectoryOnPremiseSynchronization |
| New-MgBetaDirectoryOutboundSharedUserProfile |
Create new navigation property to outboundSharedUserProfiles for directory |
| New-MgBetaDirectoryOutboundSharedUserProfileTenant |
Create new navigation property to tenants for directory |
| New-MgBetaDirectoryPendingExternalUserProfile |
Create a new pendingExternalUserProfile object. |
| New-MgBetaDirectoryRecommendation |
Create new navigation property to recommendations for directory |
| New-MgBetaDirectoryRecommendationImpactedResource |
Create new navigation property to impactedResources for directory |
| New-MgBetaDirectoryRole |
Activate a directory role. To read a directory role or update its members, it must first be activated in the tenant. The Company Administrators and the implicit user directory roles (User, Guest User, and Restricted Guest User roles) are activated by default. To access and assign members to other directory roles, you must first activate it with its corresponding directory role template ID. Note To view the v1.0 release of this cmdlet, view New-MgDirectoryRole |
| New-MgBetaDirectoryRoleMemberByRef |
Create a new directory role member. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs. Note To view the v1.0 release of this cmdlet, view New-MgDirectoryRoleMemberByRef |
| New-MgBetaDirectoryRoleScopedMember |
Create new navigation property to scopedMembers for directoryRoles Note To view the v1.0 release of this cmdlet, view New-MgDirectoryRoleScopedMember |
| New-MgBetaDirectoryRoleTemplate |
Add new entity to directoryRoleTemplates Note To view the v1.0 release of this cmdlet, view New-MgDirectoryRoleTemplate |
| New-MgBetaDirectorySetting |
Create a new setting based on the templates available in directorySettingTemplates. These settings can be at the tenant-level or at the group level. Group settings apply to only Microsoft 365 groups. The template named Group.Unified can be used to configure tenant-wide Microsoft 365 group settings, while the template named Group.Unified.Guest can be used to configure group-specific settings. |
| New-MgBetaDirectorySettingTemplate |
Add new entity to directorySettingTemplates |
| New-MgBetaDirectorySharedEmailDomain |
Create new navigation property to sharedEmailDomains for directory |
| New-MgBetaDirectorySubscription |
Create new navigation property to subscriptions for directory Note To view the v1.0 release of this cmdlet, view New-MgDirectorySubscription |
| New-MgBetaDomain |
Adds a domain to the tenant. Important: You cannot use an associated domain with your Microsoft Entra tenant until ownership is verified. See List verificationDnsRecords for details. Root domains require verification. For example, contoso.com requires verification. If a root domain is verified, subdomains of the root domain are automatically verified. For example, subdomain.contoso.com is automatically be verified if contoso.com has been verified. Note To view the v1.0 release of this cmdlet, view New-MgDomain |
| New-MgBetaDomainFederationConfiguration |
Create a new internalDomainFederation object. Note To view the v1.0 release of this cmdlet, view New-MgDomainFederationConfiguration |
| New-MgBetaDomainServiceConfigurationRecord |
Create new navigation property to serviceConfigurationRecords for domains Note To view the v1.0 release of this cmdlet, view New-MgDomainServiceConfigurationRecord |
| New-MgBetaDomainSharedEmailDomainInvitation |
Create new navigation property to sharedEmailDomainInvitations for domains |
| New-MgBetaDomainVerificationDnsRecord |
Create new navigation property to verificationDnsRecords for domains Note To view the v1.0 release of this cmdlet, view New-MgDomainVerificationDnsRecord |
| New-MgBetaOrganization |
Add new entity to organization Note To view the v1.0 release of this cmdlet, view New-MgOrganization |
| New-MgBetaOrganizationBrandingLocalization |
Create a new organizationalBrandingLocalization object. This creates a localized branding and at the same time, the default branding if it doesn't exist. The default branding is created only once. It's loaded when a localized branding isn't configured for the user's browser language. To retrieve the default branding, see Get branding. Note To view the v1.0 release of this cmdlet, view New-MgOrganizationBrandingLocalization |
| New-MgBetaOrganizationExtension |
Create new navigation property to extensions for organization Note To view the v1.0 release of this cmdlet, view New-MgOrganizationExtension |
| New-MgBetaSubscribedSku |
Add new entity to subscribedSkus Note To view the v1.0 release of this cmdlet, view New-MgSubscribedSku |
| New-MgBetaUserScopedRoleMemberOf |
Create new navigation property to scopedRoleMemberOf for users Note To view the v1.0 release of this cmdlet, view New-MgUserScopedRoleMemberOf |
| Remove-MgBetaAdministrativeUnit |
Delete an administrativeUnit. |
| Remove-MgBetaAdministrativeUnitExtension |
Delete navigation property extensions for administrativeUnits |
| Remove-MgBetaAdministrativeUnitMemberByRef |
Delete ref of navigation property members for administrativeUnits |
| Remove-MgBetaAdministrativeUnitMemberDirectoryObjectByRef |
Delete ref of navigation property members for administrativeUnits |
| Remove-MgBetaAdministrativeUnitScopedRoleMember |
Remove a Microsoft Entra role assignment with administrative unit scope. |
| Remove-MgBetaAdminPeople |
Delete navigation property people for admin |
| Remove-MgBetaAdminPeopleItemInsight |
Delete navigation property itemInsights for admin Note To view the v1.0 release of this cmdlet, view Remove-MgAdminPeopleItemInsight |
| Remove-MgBetaAdminPeopleProfileCardProperty |
Delete the profileCardProperty object specified by its directoryPropertyName from the organization's profile card, and remove any localized customizations for that property. Note To view the v1.0 release of this cmdlet, view Remove-MgAdminPeopleProfileCardProperty |
| Remove-MgBetaAdminPeoplePronoun |
Delete navigation property pronouns for admin |
| Remove-MgBetaContact |
Delete entity from contacts Note To view the v1.0 release of this cmdlet, view Remove-MgContact |
| Remove-MgBetaContract |
Delete entity from contracts Note To view the v1.0 release of this cmdlet, view Remove-MgContract |
| Remove-MgBetaDevice |
Delete a registered device. Note To view the v1.0 release of this cmdlet, view Remove-MgDevice |
| Remove-MgBetaDeviceByDeviceId |
Delete a registered device. Note To view the v1.0 release of this cmdlet, view Remove-MgDeviceByDeviceId |
| Remove-MgBetaDeviceCommand |
Delete navigation property commands for devices |
| Remove-MgBetaDeviceExtension |
Delete navigation property extensions for devices Note To view the v1.0 release of this cmdlet, view Remove-MgDeviceExtension |
| Remove-MgBetaDeviceRegisteredOwnerByRef |
Remove a user as a registered owner of the device. Note To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredOwnerDirectoryObjectByRef |
| Remove-MgBetaDeviceRegisteredOwnerDirectoryObjectByRef |
Remove a user as a registered owner of the device. Note To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredOwnerDirectoryObjectByRef |
| Remove-MgBetaDeviceRegisteredUserByRef |
Remove a user as a registered user of the device. Note To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredUserDirectoryObjectByRef |
| Remove-MgBetaDeviceRegisteredUserDirectoryObjectByRef |
Remove a user as a registered user of the device. Note To view the v1.0 release of this cmdlet, view Remove-MgDeviceRegisteredUserDirectoryObjectByRef |
| Remove-MgBetaDeviceUsageRights |
Delete navigation property usageRights for devices |
| Remove-MgBetaDirectoryAdministrativeUnit |
Delete navigation property administrativeUnits for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnit |
| Remove-MgBetaDirectoryAdministrativeUnitExtension |
Delete navigation property extensions for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitExtension |
| Remove-MgBetaDirectoryAdministrativeUnitMemberByRef |
Delete ref of navigation property members for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitMemberDirectoryObjectByRef |
| Remove-MgBetaDirectoryAdministrativeUnitMemberDirectoryObjectByRef |
Delete ref of navigation property members for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitMemberDirectoryObjectByRef |
| Remove-MgBetaDirectoryAdministrativeUnitScopedRoleMember |
Delete navigation property scopedRoleMembers for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAdministrativeUnitScopedRoleMember |
| Remove-MgBetaDirectoryAttributeSet |
Delete navigation property attributeSets for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryAttributeSet |
| Remove-MgBetaDirectoryCertificateAuthority |
Delete navigation property certificateAuthorities for directory |
| Remove-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration |
Delete the properties and relationships of a certificateBasedApplicationConfiguration object. |
| Remove-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority |
Delete a certificateAuthorityAsEntity object. You can't delete all items in the collection because this collection requires at least one object that is a root authority to always persist. |
| Remove-MgBetaDirectoryCustomSecurityAttributeDefinition |
Delete navigation property customSecurityAttributeDefinitions for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryCustomSecurityAttributeDefinition |
| Remove-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue |
Delete navigation property allowedValues for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue |
| Remove-MgBetaDirectoryDeletedItem |
Delete navigation property deletedItems for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryDeletedItem |
| Remove-MgBetaDirectoryDeviceLocalCredential |
Delete navigation property deviceLocalCredentials for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryDeviceLocalCredential |
| Remove-MgBetaDirectoryExternalUserProfile |
Delete an externalUserProfile object. Note: To permanently delete the externalUserProfile, follow permanently delete an item. To restore an externalUserProfile, follow restore a deleted item. |
| Remove-MgBetaDirectoryFeatureRolloutPolicy |
Delete navigation property featureRolloutPolicies for directory |
| Remove-MgBetaDirectoryFeatureRolloutPolicyApplyToByRef |
Delete ref of navigation property appliesTo for directory |
| Remove-MgBetaDirectoryFeatureRolloutPolicyApplyToDirectoryObjectByRef |
Delete ref of navigation property appliesTo for directory |
| Remove-MgBetaDirectoryFederationConfiguration |
Delete a samlOrWsFedExternalDomainFederation object. Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryFederationConfiguration |
| Remove-MgBetaDirectoryImpactedResource |
Delete navigation property impactedResources for directory |
| Remove-MgBetaDirectoryInboundSharedUserProfile |
Delete navigation property inboundSharedUserProfiles for directory |
| Remove-MgBetaDirectoryInboundSharedUserProfilePersonalData |
Create a request to remove the personal data for an inboundSharedUserProfile. |
| Remove-MgBetaDirectoryOnPremiseSynchronization |
Delete navigation property onPremisesSynchronization for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryOnPremiseSynchronization |
| Remove-MgBetaDirectoryOutboundSharedUserProfile |
Delete navigation property outboundSharedUserProfiles for directory |
| Remove-MgBetaDirectoryOutboundSharedUserProfileTenant |
Delete navigation property tenants for directory |
| Remove-MgBetaDirectoryOutboundSharedUserProfileTenantPersonalData |
Create a request to remove the personal data for an outboundSharedUserProfile. |
| Remove-MgBetaDirectoryPendingExternalUserProfile |
Delete a pendingExternalUserProfile object. Note: To permanently delete the pendingExternalUserProfile, follow permanently delete an item. To restore a pendingExternalUserProfile, follow restore a deleted item. |
| Remove-MgBetaDirectoryRecommendation |
Delete navigation property recommendations for directory |
| Remove-MgBetaDirectoryRecommendationImpactedResource |
Delete navigation property impactedResources for directory |
| Remove-MgBetaDirectoryRole |
Delete entity from directoryRoles Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRole |
| Remove-MgBetaDirectoryRoleByRoleTemplateId |
Delete entity from directoryRoles by roleTemplateId Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleByRoleTemplateId |
| Remove-MgBetaDirectoryRoleMemberByRef |
Remove a member from a directoryRole. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs. Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleMemberDirectoryObjectByRef |
| Remove-MgBetaDirectoryRoleMemberDirectoryObjectByRef |
Remove a member from a directoryRole. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs. Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleMemberDirectoryObjectByRef |
| Remove-MgBetaDirectoryRoleScopedMember |
Delete navigation property scopedMembers for directoryRoles Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleScopedMember |
| Remove-MgBetaDirectoryRoleTemplate |
Delete entity from directoryRoleTemplates Note To view the v1.0 release of this cmdlet, view Remove-MgDirectoryRoleTemplate |
| Remove-MgBetaDirectorySetting |
Delete a directory setting. |
| Remove-MgBetaDirectorySettingTemplate |
Delete entity from directorySettingTemplates |
| Remove-MgBetaDirectorySharedEmailDomain |
Delete navigation property sharedEmailDomains for directory |
| Remove-MgBetaDirectorySubscription |
Delete navigation property subscriptions for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectorySubscription |
| Remove-MgBetaDirectorySubscriptionByCommerceSubscriptionId |
Delete navigation property subscriptions for directory Note To view the v1.0 release of this cmdlet, view Remove-MgDirectorySubscriptionByCommerceSubscriptionId |
| Remove-MgBetaDirectorySubscriptionByOcpSubscriptionId |
Delete navigation property subscriptions for directory |
| Remove-MgBetaDomain |
Delete a domain from a tenant. Note To view the v1.0 release of this cmdlet, view Remove-MgDomain |
| Remove-MgBetaDomainFederationConfiguration |
Deletes an internalDomainFederation object. Note To view the v1.0 release of this cmdlet, view Remove-MgDomainFederationConfiguration |
| Remove-MgBetaDomainServiceConfigurationRecord |
Delete navigation property serviceConfigurationRecords for domains Note To view the v1.0 release of this cmdlet, view Remove-MgDomainServiceConfigurationRecord |
| Remove-MgBetaDomainSharedEmailDomainInvitation |
Delete navigation property sharedEmailDomainInvitations for domains |
| Remove-MgBetaDomainVerificationDnsRecord |
Delete navigation property verificationDnsRecords for domains Note To view the v1.0 release of this cmdlet, view Remove-MgDomainVerificationDnsRecord |
| Remove-MgBetaOrganization |
Delete entity from organization Note To view the v1.0 release of this cmdlet, view Remove-MgOrganization |
| Remove-MgBetaOrganizationBranding |
Delete the default organizational branding object. To delete the organizationalBranding object, all images (Stream types) must first be removed from the object. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBranding |
| Remove-MgBetaOrganizationBrandingBackgroundImage |
Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingBackgroundImage |
| Remove-MgBetaOrganizationBrandingBannerLogo |
A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingBannerLogo |
| Remove-MgBetaOrganizationBrandingCustomCss |
CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingCustomCss |
| Remove-MgBetaOrganizationBrandingFavicon |
A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingFavicon |
| Remove-MgBetaOrganizationBrandingHeaderLogo |
A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingHeaderLogo |
| Remove-MgBetaOrganizationBrandingLocalization |
Delete a localized branding object. To delete the organizationalBrandingLocalization object, all images (Stream types) must first be removed from the object. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalization |
| Remove-MgBetaOrganizationBrandingLocalizationBackgroundImage |
Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationBackgroundImage |
| Remove-MgBetaOrganizationBrandingLocalizationBannerLogo |
A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationBannerLogo |
| Remove-MgBetaOrganizationBrandingLocalizationCustomCss |
CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationCustomCss |
| Remove-MgBetaOrganizationBrandingLocalizationFavicon |
A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationFavicon |
| Remove-MgBetaOrganizationBrandingLocalizationHeaderLogo |
A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationHeaderLogo |
| Remove-MgBetaOrganizationBrandingLocalizationSquareLogo |
A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationSquareLogo |
| Remove-MgBetaOrganizationBrandingLocalizationSquareLogoDark |
A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingLocalizationSquareLogoDark |
| Remove-MgBetaOrganizationBrandingSquareLogo |
A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingSquareLogo |
| Remove-MgBetaOrganizationBrandingSquareLogoDark |
A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationBrandingSquareLogoDark |
| Remove-MgBetaOrganizationExtension |
Delete navigation property extensions for organization Note To view the v1.0 release of this cmdlet, view Remove-MgOrganizationExtension |
| Remove-MgBetaOrganizationPartnerInformation |
Delete navigation property partnerInformation for organization |
| Remove-MgBetaOrganizationSetting |
Delete navigation property settings for organization |
| Remove-MgBetaOrganizationSettingContactInsight |
Delete navigation property contactInsights for organization |
| Remove-MgBetaOrganizationSettingItemInsight |
Delete navigation property itemInsights for organization |
| Remove-MgBetaOrganizationSettingMicrosoftApplicationDataAccess |
Delete navigation property microsoftApplicationDataAccess for organization |
| Remove-MgBetaOrganizationSettingPersonInsight |
Delete navigation property peopleInsights for organization |
| Remove-MgBetaSubscribedSku |
Delete entity from subscribedSkus Note To view the v1.0 release of this cmdlet, view Remove-MgSubscribedSku |
| Remove-MgBetaUserScopedRoleMemberOf |
Delete navigation property scopedRoleMemberOf for users Note To view the v1.0 release of this cmdlet, view Remove-MgUserScopedRoleMemberOf |
| Rename-MgBetaTenantRelationshipManagedTenantManagementActionTenantDeploymentStatus |
Changes the tenant level deployment status for the management action. This information is used to provide insights into what management actions are in a specific state. As example there might be a plan to apply the require multi-factor authentication for admins, so it would be ideal to change the status to planned to reflect the appropriate status. |
| Reset-MgBetaTenantRelationshipManagedTenantOnboardingStatus |
Carries out the appropriate procedures to reset the onboarding status for the managed tenant that was removed from the multitenant management platform using the offboardTenant action. By invoking this action the platform attempts to onboard the managed tenant for management. |
| Restore-MgBetaDirectoryDeletedItem |
Restore a recently deleted application, externalUserProfile, group, pendingExternalUserProfile, servicePrincipal, administrative unit, or user object from deleted items. If an item was accidentally deleted, you can fully restore the item. This isn't applicable to security groups, which are deleted permanently. Also, restoring an application doesn't restore the associated service principal automatically. You must call this API to explicitly restore the deleted service principal. A recently deleted item remains available for up to 30 days. After 30 days, the item is permanently deleted. Note To view the v1.0 release of this cmdlet, view Restore-MgDirectoryDeletedItem |
| Set-MgBetaOrganizationBrandingBackgroundImage |
Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingBackgroundImage |
| Set-MgBetaOrganizationBrandingBannerLogo |
A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingBannerLogo |
| Set-MgBetaOrganizationBrandingCustomCss |
CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingCustomCss |
| Set-MgBetaOrganizationBrandingFavicon |
A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingFavicon |
| Set-MgBetaOrganizationBrandingHeaderLogo |
A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingHeaderLogo |
| Set-MgBetaOrganizationBrandingLocalizationBackgroundImage |
Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationBackgroundImage |
| Set-MgBetaOrganizationBrandingLocalizationBannerLogo |
Update the properties of an organizationalBrandingLocalization object for a specific localization. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationBannerLogo |
| Set-MgBetaOrganizationBrandingLocalizationCustomCss |
CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationCustomCss |
| Set-MgBetaOrganizationBrandingLocalizationFavicon |
A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationFavicon |
| Set-MgBetaOrganizationBrandingLocalizationHeaderLogo |
A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationHeaderLogo |
| Set-MgBetaOrganizationBrandingLocalizationSquareLogo |
A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationSquareLogo |
| Set-MgBetaOrganizationBrandingLocalizationSquareLogoDark |
A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingLocalizationSquareLogoDark |
| Set-MgBetaOrganizationBrandingSquareLogo |
A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingSquareLogo |
| Set-MgBetaOrganizationBrandingSquareLogoDark |
A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo. Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationBrandingSquareLogoDark |
| Set-MgBetaOrganizationMobileDeviceManagementAuthority |
Set mobile device management authority Note To view the v1.0 release of this cmdlet, view Set-MgOrganizationMobileDeviceManagementAuthority |
| Set-MgBetaTenantRelationshipManagedTenantTag |
Assign the tenant tag to the specified managed tenants. |
| Test-MgBetaAdministrativeUnitProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. |
| Test-MgBetaContactProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. Note To view the v1.0 release of this cmdlet, view Test-MgContactProperty |
| Test-MgBetaContractProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. Note To view the v1.0 release of this cmdlet, view Test-MgContractProperty |
| Test-MgBetaDeviceProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. Note To view the v1.0 release of this cmdlet, view Test-MgDeviceProperty |
| Test-MgBetaDirectoryDeletedItemProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. Note To view the v1.0 release of this cmdlet, view Test-MgDirectoryDeletedItemProperty |
| Test-MgBetaDirectoryRoleProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. Note To view the v1.0 release of this cmdlet, view Test-MgDirectoryRoleProperty |
| Test-MgBetaDirectoryRoleTemplateProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. Note To view the v1.0 release of this cmdlet, view Test-MgDirectoryRoleTemplateProperty |
| Test-MgBetaDirectorySettingTemplateProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. |
| Test-MgBetaOrganizationProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. Note To view the v1.0 release of this cmdlet, view Test-MgOrganizationProperty |
| Update-MgBetaAdministrativeUnit |
Update the properties of an administrativeUnit object. |
| Update-MgBetaAdministrativeUnitExtension |
Update the navigation property extensions in administrativeUnits |
| Update-MgBetaAdministrativeUnitScopedRoleMember |
Update the navigation property scopedRoleMembers in administrativeUnits |
| Update-MgBetaAdminPeople |
Update the navigation property people in admin |
| Update-MgBetaAdminPeopleItemInsight |
Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:- Customize item insights privacy - Customize people insights privacy Note To view the v1.0 release of this cmdlet, view Update-MgAdminPeopleItemInsight |
| Update-MgBetaAdminPeopleProfileCardProperty |
Update the properties of a profileCardProperty object, identified by its directoryPropertyName property. Note To view the v1.0 release of this cmdlet, view Update-MgAdminPeopleProfileCardProperty |
| Update-MgBetaAdminPeoplePronoun |
Update the properties of a pronounsSettings object in an organization. For more information on settings to manage pronouns support, see Manage pronouns settings for an organization using the Microsoft Graph API. Note To view the v1.0 release of this cmdlet, view Update-MgAdminPeoplePronoun |
| Update-MgBetaContact |
Update entity in contacts Note To view the v1.0 release of this cmdlet, view Update-MgContact |
| Update-MgBetaContract |
Update entity in contracts Note To view the v1.0 release of this cmdlet, view Update-MgContract |
| Update-MgBetaDevice |
Update the properties of a device. Only certain properties of a device can be updated through approved Mobile Device Management (MDM) apps. Note To view the v1.0 release of this cmdlet, view Update-MgDevice |
| Update-MgBetaDeviceByDeviceId |
Update the properties of a device. Only certain properties of a device can be updated through approved Mobile Device Management (MDM) apps. Note To view the v1.0 release of this cmdlet, view Update-MgDeviceByDeviceId |
| Update-MgBetaDeviceCommand |
Update the navigation property commands in devices |
| Update-MgBetaDeviceExtension |
Update the navigation property extensions in devices Note To view the v1.0 release of this cmdlet, view Update-MgDeviceExtension |
| Update-MgBetaDeviceUsageRights |
Update the navigation property usageRights in devices |
| Update-MgBetaDirectory |
Update directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectory |
| Update-MgBetaDirectoryAdministrativeUnit |
Update the navigation property administrativeUnits in directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryAdministrativeUnit |
| Update-MgBetaDirectoryAdministrativeUnitExtension |
Update the navigation property extensions in directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryAdministrativeUnitExtension |
| Update-MgBetaDirectoryAdministrativeUnitScopedRoleMember |
Update the navigation property scopedRoleMembers in directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryAdministrativeUnitScopedRoleMember |
| Update-MgBetaDirectoryAttributeSet |
Update the properties of an attributeSet object. Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryAttributeSet |
| Update-MgBetaDirectoryCertificateAuthority |
Update the navigation property certificateAuthorities in directory |
| Update-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfiguration |
Update the properties of a certificateBasedApplicationConfiguration object. To update the trustedCertificateAuthorities within a certificateBasedApplicationConfiguration object, use the Update certificateAuthorityAsEntity operation. |
| Update-MgBetaDirectoryCertificateAuthorityCertificateBasedApplicationConfigurationTrustedCertificateAuthority |
Update the properties of a certificateAuthorityAsEntity object. |
| Update-MgBetaDirectoryCustomSecurityAttributeDefinition |
Update the properties of a customSecurityAttributeDefinition object. Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryCustomSecurityAttributeDefinition |
| Update-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue |
Update the properties of an allowedValue object. Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue |
| Update-MgBetaDirectoryDeviceLocalCredential |
Update the navigation property deviceLocalCredentials in directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryDeviceLocalCredential |
| Update-MgBetaDirectoryExternalUserProfile |
Update the properties of a externalUserProfile object. |
| Update-MgBetaDirectoryFeatureRolloutPolicy |
Update the navigation property featureRolloutPolicies in directory |
| Update-MgBetaDirectoryFederationConfiguration |
Update the navigation property federationConfigurations in directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryFederationConfiguration |
| Update-MgBetaDirectoryImpactedResource |
Update the navigation property impactedResources in directory |
| Update-MgBetaDirectoryInboundSharedUserProfile |
Update the navigation property inboundSharedUserProfiles in directory |
| Update-MgBetaDirectoryOnPremiseSynchronization |
Update the properties of an onPremisesDirectorySynchronization object. Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryOnPremiseSynchronization |
| Update-MgBetaDirectoryOutboundSharedUserProfile |
Update the navigation property outboundSharedUserProfiles in directory |
| Update-MgBetaDirectoryOutboundSharedUserProfileTenant |
Update the navigation property tenants in directory |
| Update-MgBetaDirectoryPendingExternalUserProfile |
Update the properties of a pendingExternalUserProfile object. |
| Update-MgBetaDirectoryRecommendation |
Update the navigation property recommendations in directory |
| Update-MgBetaDirectoryRecommendationImpactedResource |
Update the navigation property impactedResources in directory |
| Update-MgBetaDirectoryRole |
Update entity in directoryRoles Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryRole |
| Update-MgBetaDirectoryRoleByRoleTemplateId |
Update entity in directoryRoles by roleTemplateId Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryRoleByRoleTemplateId |
| Update-MgBetaDirectoryRoleScopedMember |
Update the navigation property scopedMembers in directoryRoles Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryRoleScopedMember |
| Update-MgBetaDirectoryRoleTemplate |
Update entity in directoryRoleTemplates Note To view the v1.0 release of this cmdlet, view Update-MgDirectoryRoleTemplate |
| Update-MgBetaDirectorySetting |
Update the properties of a specific directory setting object. |
| Update-MgBetaDirectorySettingTemplate |
Update entity in directorySettingTemplates |
| Update-MgBetaDirectorySharedEmailDomain |
Update the navigation property sharedEmailDomains in directory |
| Update-MgBetaDirectorySubscription |
Update the navigation property subscriptions in directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectorySubscription |
| Update-MgBetaDirectorySubscriptionByCommerceSubscriptionId |
Update the navigation property subscriptions in directory Note To view the v1.0 release of this cmdlet, view Update-MgDirectorySubscriptionByCommerceSubscriptionId |
| Update-MgBetaDirectorySubscriptionByOcpSubscriptionId |
Update the navigation property subscriptions in directory |
| Update-MgBetaDomain |
Update the properties of domain object. Only verified domains can be updated. Note To view the v1.0 release of this cmdlet, view Update-MgDomain |
| Update-MgBetaDomainFederationConfiguration |
Update the properties of an internalDomainFederation object. Note To view the v1.0 release of this cmdlet, view Update-MgDomainFederationConfiguration |
| Update-MgBetaDomainServiceConfigurationRecord |
Update the navigation property serviceConfigurationRecords in domains Note To view the v1.0 release of this cmdlet, view Update-MgDomainServiceConfigurationRecord |
| Update-MgBetaDomainSharedEmailDomainInvitation |
Update the navigation property sharedEmailDomainInvitations in domains |
| Update-MgBetaDomainVerificationDnsRecord |
Update the navigation property verificationDnsRecords in domains Note To view the v1.0 release of this cmdlet, view Update-MgDomainVerificationDnsRecord |
| Update-MgBetaOrganization |
Update the properties of the currently authenticated organization. In this case, organization is defined as a collection of exactly one record, and so its ID must be specified in the request. The ID is also known as the tenantId of the organization. Note To view the v1.0 release of this cmdlet, view Update-MgOrganization |
| Update-MgBetaOrganizationBranding |
Update the properties of the default branding object specified by the organizationalBranding resource. Note To view the v1.0 release of this cmdlet, view Update-MgOrganizationBranding |
| Update-MgBetaOrganizationBrandingLocalization |
Update the properties of an organizationalBrandingLocalization object for a specific localization. Note To view the v1.0 release of this cmdlet, view Update-MgOrganizationBrandingLocalization |
| Update-MgBetaOrganizationExtension |
Update the navigation property extensions in organization Note To view the v1.0 release of this cmdlet, view Update-MgOrganizationExtension |
| Update-MgBetaOrganizationPartnerInformation |
Update the navigation property partnerInformation in organization |
| Update-MgBetaOrganizationSetting |
Update the navigation property settings in organization |
| Update-MgBetaOrganizationSettingContactInsight |
Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:- Customize item insights privacy - Customize people insights privacy |
| Update-MgBetaOrganizationSettingItemInsight |
Update the navigation property itemInsights in organization |
| Update-MgBetaOrganizationSettingMicrosoftApplicationDataAccess |
Update the settings in a microsoftApplicationDataAccessSettings object that specify access from Microsoft applications to Microsoft 365 user data in an organization. |
| Update-MgBetaOrganizationSettingPersonInsight |
Update privacy settings to display or return the specified type of insights in an organization. The type of settings can be contact insights, item insights, or people insights. To learn more about customizing insights privacy for your organization, see:- Customize item insights privacy - Customize people insights privacy |
| Update-MgBetaSubscribedSku |
Update entity in subscribedSkus Note To view the v1.0 release of this cmdlet, view Update-MgSubscribedSku |
| Update-MgBetaUserScopedRoleMemberOf |
Update the navigation property scopedRoleMemberOf in users Note To view the v1.0 release of this cmdlet, view Update-MgUserScopedRoleMemberOf |