Microsoft.Graph.Identity.DirectoryManagement

Microsoft Graph PowerShell Cmdlets

Microsoft.Graph.Identity.DirectoryManagement

Confirm-MgContactMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaContactMemberGroup

Confirm-MgContactMemberObject

Invoke action checkMemberObjects

Note

To view the beta release of this cmdlet, view Confirm-MgBetaContactMemberObject

Confirm-MgContractMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaContractMemberGroup

Confirm-MgContractMemberObject

Invoke action checkMemberObjects

Note

To view the beta release of this cmdlet, view Confirm-MgBetaContractMemberObject

Confirm-MgDeviceMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDeviceMemberGroup

Confirm-MgDeviceMemberObject

Invoke action checkMemberObjects

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDeviceMemberObject

Confirm-MgDirectoryDeletedItemMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDirectoryDeletedItemMemberGroup

Confirm-MgDirectoryDeletedItemMemberObject

Invoke action checkMemberObjects

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDirectoryDeletedItemMemberObject

Confirm-MgDirectoryRoleMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDirectoryRoleMemberGroup

Confirm-MgDirectoryRoleMemberObject

Invoke action checkMemberObjects

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDirectoryRoleMemberObject

Confirm-MgDirectoryRoleTemplateMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDirectoryRoleTemplateMemberGroup

Confirm-MgDirectoryRoleTemplateMemberObject

Invoke action checkMemberObjects

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDirectoryRoleTemplateMemberObject

Confirm-MgDomain

Validates the ownership of the domain.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaDomain

Confirm-MgOrganizationMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the beta release of this cmdlet, view Confirm-MgBetaOrganizationMemberGroup

Confirm-MgOrganizationMemberObject

Invoke action checkMemberObjects

Note

To view the beta release of this cmdlet, view Confirm-MgBetaOrganizationMemberObject

Get-MgAdminPeople

Retrieve the properties and relationships of a peopleAdminSettings object.

Note

To view the beta release of this cmdlet, view Get-MgBetaAdminPeople

Get-MgAdminPeopleItemInsight

Get the properties of an insightsSettings object to display or return item insights in an organization. To learn how to customize the privacy of item insights in an organization, see Customize item insights privacy in Microsoft Graph.

Note

To view the beta release of this cmdlet, view Get-MgBetaAdminPeopleItemInsight

Get-MgAdminPeopleProfileCardProperty

Retrieve the properties of a profileCardProperty entity. The profileCardProperty is identified by its directoryPropertyName property.

Note

To view the beta release of this cmdlet, view Get-MgBetaAdminPeopleProfileCardProperty

Get-MgAdminPeopleProfileCardPropertyCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaAdminPeopleProfileCardPropertyCount

Get-MgAdminPeoplePronoun

Get the properties of the pronounsSettings resource for an organization. For more information on settings to manage pronouns support, see Manage pronouns settings for an organization using the Microsoft Graph API.

Note

To view the beta release of this cmdlet, view Get-MgBetaAdminPeoplePronoun

Get-MgContact

Get the properties and relationships of an organizational contact.

Note

To view the beta release of this cmdlet, view Get-MgBetaContact

Get-MgContactById

Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:

Note

To view the beta release of this cmdlet, view Get-MgBetaContactById

Get-MgContactCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactCount

Get-MgContactDelta

Get newly created, updated, or deleted organizational contacts without having to perform a full read of the entire collection. See change tracking for details.

Note

To view the beta release of this cmdlet, view Get-MgBetaContactDelta

Get-MgContactDirectReport

The contact's direct reports. (The users and contacts that have their manager property set to this contact.) Read-only. Nullable. Supports $expand.

Note

To view the beta release of this cmdlet, view Get-MgBetaContactDirectReport

Get-MgContactDirectReportAsOrgContact

Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact

Note

To view the beta release of this cmdlet, view Get-MgBetaContactDirectReportAsOrgContact

Get-MgContactDirectReportAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the beta release of this cmdlet, view Get-MgBetaContactDirectReportAsUser

Get-MgContactDirectReportCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactDirectReportCount

Get-MgContactDirectReportCountAsOrgContact

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactDirectReportCountAsOrgContact

Get-MgContactDirectReportCountAsUser

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactDirectReportCountAsUser

Get-MgContactManager

Get this organizational contact's manager.

Note

To view the beta release of this cmdlet, view Get-MgBetaContactManager

Get-MgContactMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberGroup

Get-MgContactMemberObject

Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles.

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberObject

Get-MgContactMemberOf

Groups that this contact is a member of. Read-only. Nullable. Supports $expand.

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberOf

Get-MgContactMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberOfAsAdministrativeUnit

Get-MgContactMemberOfAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberOfAsGroup

Get-MgContactMemberOfCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberOfCount

Get-MgContactMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberOfCountAsAdministrativeUnit

Get-MgContactMemberOfCountAsGroup

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactMemberOfCountAsGroup

Get-MgContactServiceProvisioningError

Errors published by a federated service describing a non-transient, service-specific error regarding the properties or link from an organizational contact object . Supports $filter (eq, not, for isResolved and serviceInstance).

Note

To view the beta release of this cmdlet, view Get-MgBetaContactServiceProvisioningError

Get-MgContactServiceProvisioningErrorCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactServiceProvisioningErrorCount

Get-MgContactTransitiveMemberOf

Groups that this contact is a member of, including groups that the contact is nested under. Read-only. Nullable.

Note

To view the beta release of this cmdlet, view Get-MgBetaContactTransitiveMemberOf

Get-MgContactTransitiveMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the beta release of this cmdlet, view Get-MgBetaContactTransitiveMemberOfAsAdministrativeUnit

Get-MgContactTransitiveMemberOfAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the beta release of this cmdlet, view Get-MgBetaContactTransitiveMemberOfAsGroup

Get-MgContactTransitiveMemberOfCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactTransitiveMemberOfCount

Get-MgContactTransitiveMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactTransitiveMemberOfCountAsAdministrativeUnit

Get-MgContactTransitiveMemberOfCountAsGroup

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContactTransitiveMemberOfCountAsGroup

Get-MgContract

Retrieve the properties and relationships of contract object.

Note

To view the beta release of this cmdlet, view Get-MgBetaContract

Get-MgContractById

Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:

Note

To view the beta release of this cmdlet, view Get-MgBetaContractById

Get-MgContractCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaContractCount

Get-MgContractDelta

Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details.

Note

To view the beta release of this cmdlet, view Get-MgBetaContractDelta

Get-MgContractMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the beta release of this cmdlet, view Get-MgBetaContractMemberGroup

Get-MgContractMemberObject

Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles.

Note

To view the beta release of this cmdlet, view Get-MgBetaContractMemberObject

Get-MgDevice

Get the properties and relationships of a device object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDevice

Get-MgDeviceByDeviceId

Get the properties and relationships of a device object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceByDeviceId

Get-MgDeviceById

Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceById

Get-MgDeviceCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceCount

Get-MgDeviceDelta

Get newly created, updated, or deleted devices without performing a full read of the entire resource collection. For more information, see Using delta query.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceDelta

Get-MgDeviceExtension

The collection of open extensions defined for the device. Read-only. Nullable.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceExtension

Get-MgDeviceExtensionCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceExtensionCount

Get-MgDeviceMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberGroup

Get-MgDeviceMemberObject

Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberObject

Get-MgDeviceMemberOf

Groups and administrative units that this device is a member of. Read-only. Nullable. Supports $expand.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberOf

Get-MgDeviceMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberOfAsAdministrativeUnit

Get-MgDeviceMemberOfAsGroup

Get groups and administrative units that this device is a direct member of. This operation is not transitive.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberOfAsGroup

Get-MgDeviceMemberOfCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberOfCount

Get-MgDeviceMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberOfCountAsAdministrativeUnit

Get-MgDeviceMemberOfCountAsGroup

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceMemberOfCountAsGroup

Get-MgDeviceRegisteredOwner

Retrieve a list of users that are registered owners of the device. A registered owner is the user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Currently, there can be only one owner.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwner

Get-MgDeviceRegisteredOwnerAsAppRoleAssignment

Get the item of type microsoft.graph.directoryObject as microsoft.graph.appRoleAssignment

Get-MgDeviceRegisteredOwnerAsEndpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerAsEndpoint

Get-MgDeviceRegisteredOwnerAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerAsServicePrincipal

Get-MgDeviceRegisteredOwnerAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerAsUser

Get-MgDeviceRegisteredOwnerByRef

Retrieve a list of users that are registered owners of the device. A registered owner is the user that cloud joined the device or registered their personal device. The registered owner is set at the time of registration. Currently, there can be only one owner.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerByRef

Get-MgDeviceRegisteredOwnerCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerCount

Get-MgDeviceRegisteredOwnerCountAsAppRoleAssignment

Get the number of the resource

Get-MgDeviceRegisteredOwnerCountAsEndpoint

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerCountAsEndpoint

Get-MgDeviceRegisteredOwnerCountAsServicePrincipal

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerCountAsServicePrincipal

Get-MgDeviceRegisteredOwnerCountAsUser

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredOwnerCountAsUser

Get-MgDeviceRegisteredUser

Retrieve a list of users that are registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUser

Get-MgDeviceRegisteredUserAsAppRoleAssignment

Get the item of type microsoft.graph.directoryObject as microsoft.graph.appRoleAssignment

Get-MgDeviceRegisteredUserAsEndpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserAsEndpoint

Get-MgDeviceRegisteredUserAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserAsServicePrincipal

Get-MgDeviceRegisteredUserAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserAsUser

Get-MgDeviceRegisteredUserByRef

Retrieve a list of users that are registered users of the device. For cloud joined devices and registered personal devices, registered users are set to the same value as registered owners at the time of registration.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserByRef

Get-MgDeviceRegisteredUserCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserCount

Get-MgDeviceRegisteredUserCountAsAppRoleAssignment

Get the number of the resource

Get-MgDeviceRegisteredUserCountAsEndpoint

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserCountAsEndpoint

Get-MgDeviceRegisteredUserCountAsServicePrincipal

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserCountAsServicePrincipal

Get-MgDeviceRegisteredUserCountAsUser

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceRegisteredUserCountAsUser

Get-MgDeviceTransitiveMemberOf

Groups and administrative units that the device is a member of. This operation is transitive. Supports $expand.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceTransitiveMemberOf

Get-MgDeviceTransitiveMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceTransitiveMemberOfAsAdministrativeUnit

Get-MgDeviceTransitiveMemberOfAsGroup

Get the groups and administrative units that the device is a member of. This API request is transitive, and will also return all groups and administrative units the device is a nested member of.

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceTransitiveMemberOfAsGroup

Get-MgDeviceTransitiveMemberOfCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceTransitiveMemberOfCount

Get-MgDeviceTransitiveMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceTransitiveMemberOfCountAsAdministrativeUnit

Get-MgDeviceTransitiveMemberOfCountAsGroup

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDeviceTransitiveMemberOfCountAsGroup

Get-MgDirectory

Get directory

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectory

Get-MgDirectoryAdministrativeUnit

Retrieve the properties and relationships of an administrativeUnit object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnit

Get-MgDirectoryAdministrativeUnitCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitCount

Get-MgDirectoryAdministrativeUnitDelta

Invoke function delta

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitDelta

Get-MgDirectoryAdministrativeUnitExtension

The collection of open extensions defined for this administrative unit. Nullable.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitExtension

Get-MgDirectoryAdministrativeUnitExtensionCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitExtensionCount

Get-MgDirectoryAdministrativeUnitMember

Use this API to get the members list (users, groups, or devices) in an administrative unit.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMember

Get-MgDirectoryAdministrativeUnitMemberAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberAsApplication

Get-MgDirectoryAdministrativeUnitMemberAsDevice

Get the item of type microsoft.graph.directoryObject as microsoft.graph.device

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberAsDevice

Get-MgDirectoryAdministrativeUnitMemberAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberAsGroup

Get-MgDirectoryAdministrativeUnitMemberAsOrgContact

Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberAsOrgContact

Get-MgDirectoryAdministrativeUnitMemberAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberAsServicePrincipal

Get-MgDirectoryAdministrativeUnitMemberAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberAsUser

Get-MgDirectoryAdministrativeUnitMemberByRef

Use this API to get the members list (users, groups, or devices) in an administrative unit.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberByRef

Get-MgDirectoryAdministrativeUnitMemberCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberCount

Get-MgDirectoryAdministrativeUnitMemberCountAsApplication

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberCountAsApplication

Get-MgDirectoryAdministrativeUnitMemberCountAsDevice

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberCountAsDevice

Get-MgDirectoryAdministrativeUnitMemberCountAsGroup

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberCountAsGroup

Get-MgDirectoryAdministrativeUnitMemberCountAsOrgContact

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberCountAsOrgContact

Get-MgDirectoryAdministrativeUnitMemberCountAsServicePrincipal

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberCountAsServicePrincipal

Get-MgDirectoryAdministrativeUnitMemberCountAsUser

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitMemberCountAsUser

Get-MgDirectoryAdministrativeUnitScopedRoleMember

Get a Microsoft Entra role assignment with administrative unit scope.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitScopedRoleMember

Get-MgDirectoryAdministrativeUnitScopedRoleMemberCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAdministrativeUnitScopedRoleMemberCount

Get-MgDirectoryAttributeSet

Read the properties and relationships of an attributeSet object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAttributeSet

Get-MgDirectoryAttributeSetCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryAttributeSetCount

Get-MgDirectoryCustomSecurityAttributeDefinition

Read the properties and relationships of a customSecurityAttributeDefinition object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryCustomSecurityAttributeDefinition

Get-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

Read the properties and relationships of an allowedValue object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

Get-MgDirectoryCustomSecurityAttributeDefinitionAllowedValueCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValueCount

Get-MgDirectoryCustomSecurityAttributeDefinitionCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryCustomSecurityAttributeDefinitionCount

Get-MgDirectoryDeletedItem

Retrieve the properties of a recently deleted application, group, servicePrincipal, administrative unit, or user object from deleted items.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItem

Get-MgDirectoryDeletedItemAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemAsAdministrativeUnit

Get-MgDirectoryDeletedItemAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemAsApplication

Get-MgDirectoryDeletedItemAsDevice

Get the item of type microsoft.graph.directoryObject as microsoft.graph.device

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemAsDevice

Get-MgDirectoryDeletedItemAsGroup

Retrieve a list of recently deleted directory objects. Currently, deleted items functionality is only supported for the application, servicePrincipal, group, administrative unit, and user resources.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemAsGroup

Get-MgDirectoryDeletedItemAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemAsServicePrincipal

Get-MgDirectoryDeletedItemAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemAsUser

Get-MgDirectoryDeletedItemById

Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemById

Get-MgDirectoryDeletedItemCountAsAdministrativeUnit

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemCountAsAdministrativeUnit

Get-MgDirectoryDeletedItemCountAsApplication

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemCountAsApplication

Get-MgDirectoryDeletedItemCountAsDevice

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemCountAsDevice

Get-MgDirectoryDeletedItemCountAsGroup

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemCountAsGroup

Get-MgDirectoryDeletedItemCountAsServicePrincipal

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemCountAsServicePrincipal

Get-MgDirectoryDeletedItemCountAsUser

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemCountAsUser

Get-MgDirectoryDeletedItemMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemMemberGroup

Get-MgDirectoryDeletedItemMemberObject

Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeletedItemMemberObject

Get-MgDirectoryDeviceLocalCredential

Retrieve the properties of a deviceLocalCredentialInfo for a specified device object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeviceLocalCredential

Get-MgDirectoryDeviceLocalCredentialCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryDeviceLocalCredentialCount

Get-MgDirectoryFederationConfiguration

Configure domain federation with organizations whose identity provider (IdP) supports either the SAML or WS-Fed protocol.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryFederationConfiguration

Get-MgDirectoryFederationConfigurationCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryFederationConfigurationCount

Get-MgDirectoryOnPremiseSynchronization

Read the properties and relationships of an onPremisesDirectorySynchronization object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryOnPremiseSynchronization

Get-MgDirectoryOnPremiseSynchronizationCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryOnPremiseSynchronizationCount

Get-MgDirectoryRole

Retrieve the properties of a directoryRole object. The role must be activated in tenant for a successful response. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRole

Get-MgDirectoryRoleById

Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleById

Get-MgDirectoryRoleByRoleTemplateId

Retrieve the properties of a directoryRole object. The role must be activated in tenant for a successful response. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleByRoleTemplateId

Get-MgDirectoryRoleCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleCount

Get-MgDirectoryRoleDelta

Get newly created, updated, or deleted directory roles without having to perform a full read of the entire resource collection. See Using Delta Query for details.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleDelta

Get-MgDirectoryRoleMember

Retrieve the list of principals that are assigned to the directory role. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMember

Get-MgDirectoryRoleMemberAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberAsApplication

Get-MgDirectoryRoleMemberAsDevice

Get the item of type microsoft.graph.directoryObject as microsoft.graph.device

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberAsDevice

Get-MgDirectoryRoleMemberAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberAsGroup

Get-MgDirectoryRoleMemberAsOrgContact

Get the item of type microsoft.graph.directoryObject as microsoft.graph.orgContact

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberAsOrgContact

Get-MgDirectoryRoleMemberAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberAsServicePrincipal

Get-MgDirectoryRoleMemberAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberAsUser

Get-MgDirectoryRoleMemberByRef

Retrieve the list of principals that are assigned to the directory role. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberByRef

Get-MgDirectoryRoleMemberCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberCount

Get-MgDirectoryRoleMemberCountAsApplication

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberCountAsApplication

Get-MgDirectoryRoleMemberCountAsDevice

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberCountAsDevice

Get-MgDirectoryRoleMemberCountAsGroup

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberCountAsGroup

Get-MgDirectoryRoleMemberCountAsOrgContact

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberCountAsOrgContact

Get-MgDirectoryRoleMemberCountAsServicePrincipal

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberCountAsServicePrincipal

Get-MgDirectoryRoleMemberCountAsUser

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberCountAsUser

Get-MgDirectoryRoleMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberGroup

Get-MgDirectoryRoleMemberObject

Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleMemberObject

Get-MgDirectoryRoleScopedMember

Members of this directory role that are scoped to administrative units. Read-only. Nullable.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleScopedMember

Get-MgDirectoryRoleScopedMemberCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleScopedMemberCount

Get-MgDirectoryRoleTemplate

Retrieve the properties and relationships of a directoryroletemplate object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleTemplate

Get-MgDirectoryRoleTemplateById

Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleTemplateById

Get-MgDirectoryRoleTemplateCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleTemplateCount

Get-MgDirectoryRoleTemplateDelta

Get newly created, updated, or deleted directory objects without performing a full read of the entire directoryObject collection. For more information about the delta function, see Use delta query to track changes in Microsoft Graph data for details.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleTemplateDelta

Get-MgDirectoryRoleTemplateMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleTemplateMemberGroup

Get-MgDirectoryRoleTemplateMemberObject

Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectoryRoleTemplateMemberObject

Get-MgDirectorySubscription

Get a specific commercial subscription that an organization acquired.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectorySubscription

Get-MgDirectorySubscriptionByCommerceSubscriptionId

Get a specific commercial subscription that an organization acquired.

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectorySubscriptionByCommerceSubscriptionId

Get-MgDirectorySubscriptionCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDirectorySubscriptionCount

Get-MgDomain

Retrieve the properties and relationships of domain object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDomain

Get-MgDomainCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainCount

Get-MgDomainFederationConfiguration

Read the properties and relationships of an internalDomainFederation object.

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainFederationConfiguration

Get-MgDomainFederationConfigurationCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainFederationConfigurationCount

Get-MgDomainNameReference

The objects such as users and groups that reference the domain ID. Read-only, Nullable. Supports $expand and $filter by the OData type of objects returned. For example, /domains/{domainId}/domainNameReferences/microsoft.graph.user and /domains/{domainId}/domainNameReferences/microsoft.graph.group.

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainNameReference

Get-MgDomainNameReferenceCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainNameReferenceCount

Get-MgDomainRootDomain

Get rootDomain from domains

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainRootDomain

Get-MgDomainServiceConfigurationRecord

DNS records the customer adds to the DNS zone file of the domain before the domain can be used by Microsoft Online services. Read-only, Nullable. Supports $expand.

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainServiceConfigurationRecord

Get-MgDomainServiceConfigurationRecordCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainServiceConfigurationRecordCount

Get-MgDomainVerificationDnsRecord

DNS records that the customer adds to the DNS zone file of the domain before the customer can complete domain ownership verification with Microsoft Entra ID. Read-only, Nullable. Supports $expand.

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainVerificationDnsRecord

Get-MgDomainVerificationDnsRecordCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaDomainVerificationDnsRecordCount

Get-MgOrganization

Get the properties and relationships of the currently authenticated organization. Since the organization resource supports extensions, you can also use the GET operation to get custom properties and extension data in an organization instance.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganization

Get-MgOrganizationBranding

Retrieve the default organizational branding object, if the Accept-Language header is set to 0 or default. If no default organizational branding object exists, this method returns a 404 Not Found error. If the Accept-Language header is set to an existing locale identified by the value of its id, this method retrieves the branding for the specified locale. This method retrieves only non-Stream properties, for example, usernameHintText and signInPageText. To retrieve Stream types of the default branding, for example, bannerLogo and backgroundImage, use the GET organizationalBrandingLocalization method.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBranding

Get-MgOrganizationBrandingBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingBackgroundImage

Get-MgOrganizationBrandingBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingBannerLogo

Get-MgOrganizationBrandingCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingCustomCss

Get-MgOrganizationBrandingFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingFavicon

Get-MgOrganizationBrandingHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingHeaderLogo

Get-MgOrganizationBrandingLocalization

Read the properties and relationships of an organizationalBrandingLocalization object. To retrieve a localization branding object, specify the value of id in the URL.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalization

Get-MgOrganizationBrandingLocalizationBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationBackgroundImage

Get-MgOrganizationBrandingLocalizationBannerLogo

Read the properties and relationships of an organizationalBrandingLocalization object. To retrieve a localization branding object, specify the value of id in the URL.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationBannerLogo

Get-MgOrganizationBrandingLocalizationCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationCount

Get-MgOrganizationBrandingLocalizationCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationCustomCss

Get-MgOrganizationBrandingLocalizationFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationFavicon

Get-MgOrganizationBrandingLocalizationHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationHeaderLogo

Get-MgOrganizationBrandingLocalizationSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationSquareLogo

Get-MgOrganizationBrandingLocalizationSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingLocalizationSquareLogoDark

Get-MgOrganizationBrandingSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingSquareLogo

Get-MgOrganizationBrandingSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationBrandingSquareLogoDark

Get-MgOrganizationById

Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to:

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationById

Get-MgOrganizationCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationCount

Get-MgOrganizationExtension

The collection of open extensions defined for the organization. Read-only. Nullable.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationExtension

Get-MgOrganizationExtensionCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationExtensionCount

Get-MgOrganizationMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationMemberGroup

Get-MgOrganizationMemberObject

Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles.

Note

To view the beta release of this cmdlet, view Get-MgBetaOrganizationMemberObject

Get-MgSubscribedSku

Get a specific commercial subscription that an organization has acquired.

Note

To view the beta release of this cmdlet, view Get-MgBetaSubscribedSku

Get-MgUserScopedRoleMemberOf

Get scopedRoleMemberOf from users

Note

To view the beta release of this cmdlet, view Get-MgBetaUserScopedRoleMemberOf

Get-MgUserScopedRoleMemberOfCount

Get the number of the resource

Note

To view the beta release of this cmdlet, view Get-MgBetaUserScopedRoleMemberOfCount

Invoke-MgAvailableDirectoryFederationConfigurationProviderType

Get all identity providers supported in a directory.

Note

To view the beta release of this cmdlet, view Invoke-MgBetaAvailableDirectoryFederationConfigurationProviderType

Invoke-MgForceDomainDelete

Delete a domain using an asynchronous long-running operation. Before performing this operation, you must update or remove any references to Exchange as the provisioning service. The following actions are performed as part of this operation: After the domain deletion completes, API operations for the deleted domain return an HTTP 404 status code. To verify deletion of a domain, you can perform a get domain operation.

Note

To view the beta release of this cmdlet, view Invoke-MgBetaForceDomainDelete

Invoke-MgPromoteDomain

Promote a verified subdomain to the root domain. A verified domain has its isVerified property set to true.

Note

To view the beta release of this cmdlet, view Invoke-MgBetaPromoteDomain

Invoke-MgRetryContactServiceProvisioning

Invoke action retryServiceProvisioning

Note

To view the beta release of this cmdlet, view Invoke-MgBetaRetryContactServiceProvisioning

New-MgAdminPeopleProfileCardProperty

Create a new profileCardProperty for an organization. The new property is identified by its directoryPropertyName property. For more information about how to add properties to the profile card for an organization, see Add or remove custom attributes on a profile card using the profile card API.

Note

To view the beta release of this cmdlet, view New-MgBetaAdminPeopleProfileCardProperty

New-MgContact

Add new entity to contacts

Note

To view the beta release of this cmdlet, view New-MgBetaContact

New-MgContract

Add new entity to contracts

Note

To view the beta release of this cmdlet, view New-MgBetaContract

New-MgDevice

Create and register a new device in the organization.

Note

To view the beta release of this cmdlet, view New-MgBetaDevice

New-MgDeviceExtension

Create new navigation property to extensions for devices

Note

To view the beta release of this cmdlet, view New-MgBetaDeviceExtension

New-MgDeviceRegisteredOwnerByRef

Add a user as a registered owner of the device.

Note

To view the beta release of this cmdlet, view New-MgBetaDeviceRegisteredOwnerByRef

New-MgDeviceRegisteredUserByRef

Add a registered user for the device.

Note

To view the beta release of this cmdlet, view New-MgBetaDeviceRegisteredUserByRef

New-MgDirectoryAdministrativeUnit

Use this API to create a new administrativeUnit.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryAdministrativeUnit

New-MgDirectoryAdministrativeUnitExtension

Create new navigation property to extensions for directory

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryAdministrativeUnitExtension

New-MgDirectoryAdministrativeUnitMember

Use this API to add a member (user, group, or device) to an administrative unit. Currently it's only possible to add one member at a time to an administrative unit.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryAdministrativeUnitMember

New-MgDirectoryAdministrativeUnitMemberByRef

Use this API to add a member (user, group, or device) to an administrative unit. Currently it's only possible to add one member at a time to an administrative unit.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryAdministrativeUnitMemberByRef

New-MgDirectoryAdministrativeUnitScopedRoleMember

Assign a Microsoft Entra role with administrative unit scope. For a list of roles that can be assigned with administrative unit scope, see Assign Microsoft Entra roles with administrative unit scope.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryAdministrativeUnitScopedRoleMember

New-MgDirectoryAttributeSet

Create a new attributeSet object.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryAttributeSet

New-MgDirectoryCustomSecurityAttributeDefinition

Create a new customSecurityAttributeDefinition object.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryCustomSecurityAttributeDefinition

New-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

Create a new allowedValue object.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

New-MgDirectoryDeviceLocalCredential

Create new navigation property to deviceLocalCredentials for directory

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryDeviceLocalCredential

New-MgDirectoryFederationConfiguration

Create new navigation property to federationConfigurations for directory

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryFederationConfiguration

New-MgDirectoryOnPremiseSynchronization

Create new navigation property to onPremisesSynchronization for directory

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryOnPremiseSynchronization

New-MgDirectoryRole

Activate a directory role. To read a directory role or update its members, it must first be activated in the tenant. The Company Administrators and the implicit user directory roles (User, Guest User, and Restricted Guest User roles) are activated by default. To access and assign members to other directory roles, you must first activate it with its corresponding directory role template ID.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryRole

New-MgDirectoryRoleMemberByRef

Create a new directory role member. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryRoleMemberByRef

New-MgDirectoryRoleScopedMember

Create new navigation property to scopedMembers for directoryRoles

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryRoleScopedMember

New-MgDirectoryRoleTemplate

Add new entity to directoryRoleTemplates

Note

To view the beta release of this cmdlet, view New-MgBetaDirectoryRoleTemplate

New-MgDirectorySubscription

Create new navigation property to subscriptions for directory

Note

To view the beta release of this cmdlet, view New-MgBetaDirectorySubscription

New-MgDomain

Adds a domain to the tenant. Important: You cannot use an associated domain with your Microsoft Entra tenant until ownership is verified. See List verificationDnsRecords for details. Root domains require verification. For example, contoso.com requires verification. If a root domain is verified, subdomains of the root domain are automatically verified. For example, subdomain.contoso.com is automatically be verified if contoso.com has been verified.

Note

To view the beta release of this cmdlet, view New-MgBetaDomain

New-MgDomainFederationConfiguration

Create a new internalDomainFederation object.

Note

To view the beta release of this cmdlet, view New-MgBetaDomainFederationConfiguration

New-MgDomainServiceConfigurationRecord

Create new navigation property to serviceConfigurationRecords for domains

Note

To view the beta release of this cmdlet, view New-MgBetaDomainServiceConfigurationRecord

New-MgDomainVerificationDnsRecord

Create new navigation property to verificationDnsRecords for domains

Note

To view the beta release of this cmdlet, view New-MgBetaDomainVerificationDnsRecord

New-MgOrganization

Add new entity to organization

Note

To view the beta release of this cmdlet, view New-MgBetaOrganization

New-MgOrganizationBrandingLocalization

Create a new organizationalBrandingLocalization object. This creates a localized branding and at the same time, the default branding if it doesn't exist. The default branding is created only once. It's loaded when a localized branding isn't configured for the user's browser language. To retrieve the default branding, see Get branding.

Note

To view the beta release of this cmdlet, view New-MgBetaOrganizationBrandingLocalization

New-MgOrganizationExtension

Create new navigation property to extensions for organization

Note

To view the beta release of this cmdlet, view New-MgBetaOrganizationExtension

New-MgSubscribedSku

Add new entity to subscribedSkus

Note

To view the beta release of this cmdlet, view New-MgBetaSubscribedSku

New-MgUserScopedRoleMemberOf

Create new navigation property to scopedRoleMemberOf for users

Note

To view the beta release of this cmdlet, view New-MgBetaUserScopedRoleMemberOf

Remove-MgAdminPeopleItemInsight

Delete navigation property itemInsights for admin

Note

To view the beta release of this cmdlet, view Remove-MgBetaAdminPeopleItemInsight

Remove-MgAdminPeopleProfileCardProperty

Delete the profileCardProperty object specified by its directoryPropertyName from the organization's profile card, and remove any localized customizations for that property.

Note

To view the beta release of this cmdlet, view Remove-MgBetaAdminPeopleProfileCardProperty

Remove-MgContact

Delete entity from contacts

Note

To view the beta release of this cmdlet, view Remove-MgBetaContact

Remove-MgContract

Delete entity from contracts

Note

To view the beta release of this cmdlet, view Remove-MgBetaContract

Remove-MgDevice

Delete a registered device.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDevice

Remove-MgDeviceByDeviceId

Delete a registered device.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDeviceByDeviceId

Remove-MgDeviceExtension

Delete navigation property extensions for devices

Note

To view the beta release of this cmdlet, view Remove-MgBetaDeviceExtension

Remove-MgDeviceRegisteredOwnerByRef

Remove a user as a registered owner of the device.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDeviceRegisteredOwnerDirectoryObjectByRef

Remove-MgDeviceRegisteredOwnerDirectoryObjectByRef

Remove a user as a registered owner of the device.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDeviceRegisteredOwnerDirectoryObjectByRef

Remove-MgDeviceRegisteredUserByRef

Remove a user as a registered user of the device.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDeviceRegisteredUserDirectoryObjectByRef

Remove-MgDeviceRegisteredUserDirectoryObjectByRef

Remove a user as a registered user of the device.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDeviceRegisteredUserDirectoryObjectByRef

Remove-MgDirectoryAdministrativeUnit

Delete an administrativeUnit.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryAdministrativeUnit

Remove-MgDirectoryAdministrativeUnitExtension

Delete navigation property extensions for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryAdministrativeUnitExtension

Remove-MgDirectoryAdministrativeUnitMemberByRef

Use this API to remove a member (user, group, or device) from an administrative unit.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryAdministrativeUnitMemberDirectoryObjectByRef

Remove-MgDirectoryAdministrativeUnitMemberDirectoryObjectByRef

Use this API to remove a member (user, group, or device) from an administrative unit.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryAdministrativeUnitMemberDirectoryObjectByRef

Remove-MgDirectoryAdministrativeUnitScopedRoleMember

Remove a Microsoft Entra role assignment with administrative unit scope.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryAdministrativeUnitScopedRoleMember

Remove-MgDirectoryAttributeSet

Delete navigation property attributeSets for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryAttributeSet

Remove-MgDirectoryCustomSecurityAttributeDefinition

Delete navigation property customSecurityAttributeDefinitions for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryCustomSecurityAttributeDefinition

Remove-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

Delete navigation property allowedValues for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

Remove-MgDirectoryDeletedItem

Permanently delete a recently deleted application, group, servicePrincipal, or user object from deleted items. After an item is permanently deleted, it cannot be restored. Administrative units cannot be permanently deleted by using the deletedItems API. Soft-deleted administrative units will be permanently deleted 30 days after initial deletion unless they are restored.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryDeletedItem

Remove-MgDirectoryDeviceLocalCredential

Delete navigation property deviceLocalCredentials for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryDeviceLocalCredential

Remove-MgDirectoryFederationConfiguration

Delete a samlOrWsFedExternalDomainFederation object.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryFederationConfiguration

Remove-MgDirectoryOnPremiseSynchronization

Delete navigation property onPremisesSynchronization for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryOnPremiseSynchronization

Remove-MgDirectoryRole

Delete entity from directoryRoles

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryRole

Remove-MgDirectoryRoleByRoleTemplateId

Delete entity from directoryRoles by roleTemplateId

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryRoleByRoleTemplateId

Remove-MgDirectoryRoleMemberByRef

Remove a member from a directoryRole. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryRoleMemberDirectoryObjectByRef

Remove-MgDirectoryRoleMemberDirectoryObjectByRef

Remove a member from a directoryRole. You can use both the object ID and template ID of the directoryRole with this API. The template ID of a built-in role is immutable and can be seen in the role description on the Microsoft Entra admin center. For details, see Role template IDs.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryRoleMemberDirectoryObjectByRef

Remove-MgDirectoryRoleScopedMember

Delete navigation property scopedMembers for directoryRoles

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryRoleScopedMember

Remove-MgDirectoryRoleTemplate

Delete entity from directoryRoleTemplates

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectoryRoleTemplate

Remove-MgDirectorySubscription

Delete navigation property subscriptions for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectorySubscription

Remove-MgDirectorySubscriptionByCommerceSubscriptionId

Delete navigation property subscriptions for directory

Note

To view the beta release of this cmdlet, view Remove-MgBetaDirectorySubscriptionByCommerceSubscriptionId

Remove-MgDomain

Delete a domain from a tenant.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDomain

Remove-MgDomainFederationConfiguration

Delete an internalDomainFederation object.

Note

To view the beta release of this cmdlet, view Remove-MgBetaDomainFederationConfiguration

Remove-MgDomainServiceConfigurationRecord

Delete navigation property serviceConfigurationRecords for domains

Note

To view the beta release of this cmdlet, view Remove-MgBetaDomainServiceConfigurationRecord

Remove-MgDomainVerificationDnsRecord

Delete navigation property verificationDnsRecords for domains

Note

To view the beta release of this cmdlet, view Remove-MgBetaDomainVerificationDnsRecord

Remove-MgOrganization

Delete entity from organization

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganization

Remove-MgOrganizationBranding

Delete the default organizational branding object. To delete the organizationalBranding object, all images (Stream types) must first be removed from the object.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBranding

Remove-MgOrganizationBrandingBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingBackgroundImage

Remove-MgOrganizationBrandingBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingBannerLogo

Remove-MgOrganizationBrandingCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingCustomCss

Remove-MgOrganizationBrandingFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingFavicon

Remove-MgOrganizationBrandingHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingHeaderLogo

Remove-MgOrganizationBrandingLocalization

Delete a localized branding object. To delete the organizationalBrandingLocalization object, all images (Stream types) must first be removed from the object.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalization

Remove-MgOrganizationBrandingLocalizationBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalizationBackgroundImage

Remove-MgOrganizationBrandingLocalizationBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalizationBannerLogo

Remove-MgOrganizationBrandingLocalizationCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalizationCustomCss

Remove-MgOrganizationBrandingLocalizationFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalizationFavicon

Remove-MgOrganizationBrandingLocalizationHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalizationHeaderLogo

Remove-MgOrganizationBrandingLocalizationSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalizationSquareLogo

Remove-MgOrganizationBrandingLocalizationSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingLocalizationSquareLogoDark

Remove-MgOrganizationBrandingSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingSquareLogo

Remove-MgOrganizationBrandingSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationBrandingSquareLogoDark

Remove-MgOrganizationExtension

Delete navigation property extensions for organization

Note

To view the beta release of this cmdlet, view Remove-MgBetaOrganizationExtension

Remove-MgSubscribedSku

Delete entity from subscribedSkus

Note

To view the beta release of this cmdlet, view Remove-MgBetaSubscribedSku

Remove-MgUserScopedRoleMemberOf

Delete navigation property scopedRoleMemberOf for users

Note

To view the beta release of this cmdlet, view Remove-MgBetaUserScopedRoleMemberOf

Restore-MgDirectoryDeletedItem

Restore a recently deleted application, group, servicePrincipal, administrative unit, or user object from deleted items. If an item was accidentally deleted, you can fully restore the item. However, security groups can't be restored. Also, restoring an application doesn't restore the associated service principal automatically. You must call this API to explicitly restore the deleted service principal. A recently deleted item remains available for up to 30 days. After 30 days, the item is permanently deleted.

Note

To view the beta release of this cmdlet, view Restore-MgBetaDirectoryDeletedItem

Set-MgOrganizationBrandingBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingBackgroundImage

Set-MgOrganizationBrandingBannerLogo

A banner version of your company logo that appears on the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingBannerLogo

Set-MgOrganizationBrandingCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingCustomCss

Set-MgOrganizationBrandingFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingFavicon

Set-MgOrganizationBrandingHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingHeaderLogo

Set-MgOrganizationBrandingLocalizationBackgroundImage

Image that appears as the background of the sign-in page. The allowed types are PNG or JPEG not smaller than 300 KB and not larger than 1920 × 1080 pixels. A smaller image reduces bandwidth requirements and make the page load faster.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingLocalizationBackgroundImage

Set-MgOrganizationBrandingLocalizationBannerLogo

Update the properties of an organizationalBrandingLocalization object for a specific localization.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingLocalizationBannerLogo

Set-MgOrganizationBrandingLocalizationCustomCss

CSS styling that appears on the sign-in page. The allowed format is .css format only and not larger than 25 KB.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingLocalizationCustomCss

Set-MgOrganizationBrandingLocalizationFavicon

A custom icon (favicon) to replace a default Microsoft product favicon on a Microsoft Entra tenant.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingLocalizationFavicon

Set-MgOrganizationBrandingLocalizationHeaderLogo

A company logo that appears in the header of the sign-in page. The allowed types are PNG or JPEG not larger than 36 × 245 pixels. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingLocalizationHeaderLogo

Set-MgOrganizationBrandingLocalizationSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingLocalizationSquareLogo

Set-MgOrganizationBrandingLocalizationSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingLocalizationSquareLogoDark

Set-MgOrganizationBrandingSquareLogo

A square version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingSquareLogo

Set-MgOrganizationBrandingSquareLogoDark

A square dark version of your company logo that appears in Windows 10 out-of-box experiences (OOBE) and when Windows Autopilot is enabled for deployment. Allowed types are PNG or JPEG not larger than 240 x 240 pixels and not more than 10 KB in size. We recommend using a transparent image with no padding around the logo.

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationBrandingSquareLogoDark

Set-MgOrganizationMobileDeviceManagementAuthority

Set mobile device management authority

Note

To view the beta release of this cmdlet, view Set-MgBetaOrganizationMobileDeviceManagementAuthority

Test-MgContactProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy.

Note

To view the beta release of this cmdlet, view Test-MgBetaContactProperty

Test-MgContractProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy.

Note

To view the beta release of this cmdlet, view Test-MgBetaContractProperty

Test-MgDeviceProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy.

Note

To view the beta release of this cmdlet, view Test-MgBetaDeviceProperty

Test-MgDirectoryDeletedItemProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy.

Note

To view the beta release of this cmdlet, view Test-MgBetaDirectoryDeletedItemProperty

Test-MgDirectoryRoleProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy.

Note

To view the beta release of this cmdlet, view Test-MgBetaDirectoryRoleProperty

Test-MgDirectoryRoleTemplateProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy.

Note

To view the beta release of this cmdlet, view Test-MgBetaDirectoryRoleTemplateProperty

Test-MgOrganizationProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy.

Note

To view the beta release of this cmdlet, view Test-MgBetaOrganizationProperty

Update-MgAdminPeopleItemInsight

Update privacy settings to display or return the specified type of insights in an organization. Currently, itemInsights is the only supported type of settings. To learn more about customizing insights privacy for your organization, see Customize item insights privacy in Microsoft Graph.

Note

To view the beta release of this cmdlet, view Update-MgBetaAdminPeopleItemInsight

Update-MgAdminPeopleProfileCardProperty

Update the properties of a profileCardProperty object, identified by its directoryPropertyName property.

Note

To view the beta release of this cmdlet, view Update-MgBetaAdminPeopleProfileCardProperty

Update-MgAdminPeoplePronoun

Update the properties of a pronounsSettings object in an organization. For more information on settings to manage pronouns support, see Manage pronouns settings for an organization using the Microsoft Graph API.

Note

To view the beta release of this cmdlet, view Update-MgBetaAdminPeoplePronoun

Update-MgContact

Update entity in contacts

Note

To view the beta release of this cmdlet, view Update-MgBetaContact

Update-MgContract

Update entity in contracts

Note

To view the beta release of this cmdlet, view Update-MgBetaContract

Update-MgDevice

Update the properties of a registered device. Only certain properties of a device can be updated through approved Mobile Device Managment (MDM) apps.

Note

To view the beta release of this cmdlet, view Update-MgBetaDevice

Update-MgDeviceByDeviceId

Update the properties of a registered device. Only certain properties of a device can be updated through approved Mobile Device Managment (MDM) apps.

Note

To view the beta release of this cmdlet, view Update-MgBetaDeviceByDeviceId

Update-MgDeviceExtension

Update the navigation property extensions in devices

Note

To view the beta release of this cmdlet, view Update-MgBetaDeviceExtension

Update-MgDirectory

Update directory

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectory

Update-MgDirectoryAdministrativeUnit

Update the properties of an administrativeUnit object.

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryAdministrativeUnit

Update-MgDirectoryAdministrativeUnitExtension

Update the navigation property extensions in directory

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryAdministrativeUnitExtension

Update-MgDirectoryAdministrativeUnitScopedRoleMember

Update the navigation property scopedRoleMembers in directory

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryAdministrativeUnitScopedRoleMember

Update-MgDirectoryAttributeSet

Update the properties of an attributeSet object.

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryAttributeSet

Update-MgDirectoryCustomSecurityAttributeDefinition

Update the properties of a customSecurityAttributeDefinition object.

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryCustomSecurityAttributeDefinition

Update-MgDirectoryCustomSecurityAttributeDefinitionAllowedValue

Update the properties of an allowedValue object.

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryCustomSecurityAttributeDefinitionAllowedValue

Update-MgDirectoryDeviceLocalCredential

Update the navigation property deviceLocalCredentials in directory

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryDeviceLocalCredential

Update-MgDirectoryFederationConfiguration

Update the navigation property federationConfigurations in directory

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryFederationConfiguration

Update-MgDirectoryOnPremiseSynchronization

Update the properties of an onPremisesDirectorySynchronization object.

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryOnPremiseSynchronization

Update-MgDirectoryRole

Update entity in directoryRoles

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryRole

Update-MgDirectoryRoleByRoleTemplateId

Update entity in directoryRoles by roleTemplateId

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryRoleByRoleTemplateId

Update-MgDirectoryRoleScopedMember

Update the navigation property scopedMembers in directoryRoles

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryRoleScopedMember

Update-MgDirectoryRoleTemplate

Update entity in directoryRoleTemplates

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectoryRoleTemplate

Update-MgDirectorySubscription

Update the navigation property subscriptions in directory

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectorySubscription

Update-MgDirectorySubscriptionByCommerceSubscriptionId

Update the navigation property subscriptions in directory

Note

To view the beta release of this cmdlet, view Update-MgBetaDirectorySubscriptionByCommerceSubscriptionId

Update-MgDomain

Update the properties of domain object. Only verified domains can be updated.

Note

To view the beta release of this cmdlet, view Update-MgBetaDomain

Update-MgDomainFederationConfiguration

Update the properties of an internalDomainFederation object.

Note

To view the beta release of this cmdlet, view Update-MgBetaDomainFederationConfiguration

Update-MgDomainServiceConfigurationRecord

Update the navigation property serviceConfigurationRecords in domains

Note

To view the beta release of this cmdlet, view Update-MgBetaDomainServiceConfigurationRecord

Update-MgDomainVerificationDnsRecord

Update the navigation property verificationDnsRecords in domains

Note

To view the beta release of this cmdlet, view Update-MgBetaDomainVerificationDnsRecord

Update-MgOrganization

Update the properties of a organization object.

Note

To view the beta release of this cmdlet, view Update-MgBetaOrganization

Update-MgOrganizationBranding

Update the properties of the default branding object specified by the organizationalBranding resource.

Note

To view the beta release of this cmdlet, view Update-MgBetaOrganizationBranding

Update-MgOrganizationBrandingLocalization

Update the properties of an organizationalBrandingLocalization object for a specific localization.

Note

To view the beta release of this cmdlet, view Update-MgBetaOrganizationBrandingLocalization

Update-MgOrganizationExtension

Update the navigation property extensions in organization

Note

To view the beta release of this cmdlet, view Update-MgBetaOrganizationExtension

Update-MgSubscribedSku

Update entity in subscribedSkus

Note

To view the beta release of this cmdlet, view Update-MgBetaSubscribedSku

Update-MgUserScopedRoleMemberOf

Update the navigation property scopedRoleMemberOf in users

Note

To view the beta release of this cmdlet, view Update-MgBetaUserScopedRoleMemberOf