az ad

Note

This command group has commands that are defined in both Azure CLI and at least one extension. Install each extension to benefit from its extended capabilities. Learn more about extensions.

Manage Microsoft Entra ID (formerly known as Azure Active Directory, Azure AD, AAD) entities needed for Azure role-based access control (Azure RBAC) through Microsoft Graph API.

Commands

Name	Description	Type	Status
az ad app	Manage Microsoft Entra applications.	Core	GA
az ad app create	Create an application.	Core	GA
az ad app credential	Manage an application's password or certificate credentials.	Core	GA
az ad app credential delete	Delete an application's password or certificate credentials.	Core	GA
az ad app credential list	List an application's password or certificate credential metadata. (The content of the password or certificate credential is not retrievable.).	Core	GA
az ad app credential reset	Reset an application's password or certificate credentials.	Core	GA
az ad app delete	Delete an application.	Core	GA
az ad app federated-credential	Manage application federated identity credentials.	Core	GA
az ad app federated-credential create	Create application federated identity credential.	Core	GA
az ad app federated-credential delete	Delete application federated identity credential.	Core	GA
az ad app federated-credential list	List application federated identity credentials.	Core	GA
az ad app federated-credential show	Show application federated identity credential.	Core	GA
az ad app federated-credential update	Update application federated identity credential.	Core	GA
az ad app list	List applications.	Core	GA
az ad app owner	Manage application owners.	Core	GA
az ad app owner add	Add an application owner.	Core	GA
az ad app owner list	List application owners.	Core	GA
az ad app owner remove	Remove an application owner.	Core	GA
az ad app permission	Manage an application's OAuth2 permissions.	Core	GA
az ad app permission add	Add an API permission.	Core	GA
az ad app permission admin-consent	Grant Application & Delegated permissions through admin-consent.	Core	GA
az ad app permission delete	Remove an API permission.	Core	GA
az ad app permission grant	Grant the app an API Delegated permissions.	Core	GA
az ad app permission list	List API permissions the application has requested.	Core	GA
az ad app permission list-grants	List Oauth2 permission grants.	Core	GA
az ad app show	Get the details of an application.	Core	GA
az ad app update	Update an application.	Core	GA
az ad ds	Manage domain service with azure active directory.	Extension	Experimental
az ad ds create	Create a new domain service with the specified parameters.	Extension	Experimental
az ad ds delete	The Delete Domain Service operation deletes an existing Domain Service.	Extension	Experimental
az ad ds list	List domain services in resource group or in subscription.	Extension	Experimental
az ad ds show	Get the specified domain service.	Extension	Experimental
az ad ds update	Update the existing deployment properties for domain service.	Extension	Experimental
az ad ds wait	Place the CLI in a waiting state until a condition of the ad ds is met.	Extension	Experimental
az ad group	Manage Microsoft Entra groups.	Core	GA
az ad group create	Create a group.	Core	GA
az ad group delete	Delete a group.	Core	GA
az ad group get-member-groups	Get a collection of object IDs of groups of which the specified group is a member.	Core	GA
az ad group list	List groups in the directory.	Core	GA
az ad group member	Manage group members.	Core	GA
az ad group member add	Add a member to a group.	Core	GA
az ad group member check	Check if a member is in a group.	Core	GA
az ad group member list	Get the members of a group.	Core	GA
az ad group member remove	Remove a member from a group.	Core	GA
az ad group owner	Manage group owners.	Core	GA
az ad group owner add	Add a group owner.	Core	GA
az ad group owner list	List group owners.	Core	GA
az ad group owner remove	Remove a group owner.	Core	GA
az ad group show	Get the details of a group.	Core	GA
az ad signed-in-user	Show graph information about current signed-in user in CLI.	Core	GA
az ad signed-in-user list-owned-objects	Get the list of directory objects that are owned by the user.	Core	GA
az ad signed-in-user show	Get the details for the currently logged-in user.	Core	GA
az ad sp	Manage Microsoft Entra service principals.	Core	GA
az ad sp create	Create a service principal.	Core	GA
az ad sp create-for-rbac	Create a service principal and configure its access to Azure resources.	Core	GA
az ad sp credential	Manage a service principal's password or certificate credentials.	Core	GA
az ad sp credential delete	Delete a service principal's password or certificate credentials.	Core	GA
az ad sp credential list	List a service principal's password or certificate credential metadata. (The content of the password or certificate credential is not retrievable.).	Core	GA
az ad sp credential reset	Reset a service principal's password or certificate credentials.	Core	GA
az ad sp delete	Delete a service principal.	Core	GA
az ad sp list	List service principals.	Core	GA
az ad sp owner	Manage service principal owners.	Core	GA
az ad sp owner list	List service principal owners.	Core	GA
az ad sp show	Get the details of a service principal.	Core	GA
az ad sp update	Update a service principal.	Core	GA
az ad user	Manage Microsoft Entra users.	Core	GA
az ad user create	Create a user.	Core	GA
az ad user delete	Delete a user.	Core	GA
az ad user get-member-groups	Get groups of which the user is a member.	Core	GA
az ad user list	List users.	Core	GA
az ad user show	Get the details of a user.	Core	GA
az ad user update	Update a user.	Core	GA