Set-AzureADMSPermissionGrantConditionSet

This article provides migration details from Set-AzureADMSPermissionGrantConditionSet command to Microsoft Graph PowerShell.

Summary

Azure AD Command: Set-AzureADMSPermissionGrantConditionSet
Azure AD Module: AzureAD
Microsoft Graph Command: Update-MgPolicyPermissionGrantPolicyInclude (Community Examples); Update-MgPolicyPermissionGrantPolicyExclude (Community Examples)
Graph Module: Microsoft.Graph.Identity.SignIns
Graph Endpoint: PATCH /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/excludes/{permissionGrantConditionSet-id} | /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/includes/{permissionGrantConditionSet-id}

Permission type	Least privileged permissions	Higher privileged permissions
Delegated (work or school account)	Policy.ReadWrite.PermissionGrant	Not available.
Delegated (personal Microsoft account)	Not supported.	Not supported.
Application	Policy.ReadWrite.PermissionGrant	Not available.

Azure AD Name	Microsoft Graph Name
ClientApplicationIds	ClientApplicationIds
ClientApplicationPublisherIds	ClientApplicationPublisherIds
ClientApplicationsFromVerifiedPublisherOnly	ClientApplicationsFromVerifiedPublisherOnly
ClientApplicationTenantIds	ClientApplicationTenantIds
ConditionSetType	NA
Id	Id
PermissionClassification	PermissionClassification
Permissions	Permissions
PermissionType	PermissionType
PolicyId	PermissionGrantPolicyId
ResourceApplication	ResourceApplication