New-AzureADUser

Indicates whether the user's account is enabled.

This specifies the user's age group.

Specifies the user's city.

This specifies the user's company name.

Specifies the user's country or region.

Indicates whether the user account is a local account for an Azure Active Directory B2C tenant.

Possible values are LocalAccount and null. When creating a local account, the property is required and you must set it to LocalAccount. When creating a work or school account, do not specify the property or set it to null.

Specifies the user's department.

Specifies the user's display name.

This specifies the user's telephone number.

Specifies the user's given name.

This property is used to associate an on-premises Active Directory user account to their Azure AD user object. This property must be specified when creating a new user account in the Graph if you are using a federated domain for the user's userPrincipalName (UPN) property.

Important: The $ and _ characters cannot be used when specifying this property.

Indicates whether this user is compromised.

Specifies the user's job title.

Specifies the user's mail nickname.

Specifies the user's mobile phone number.

A list of additional email addresses for the user. For example, [email protected], [email protected].

Specifies password policies for the user.

This value is an enumeration with one possible value being DisableStrongPassword, which allows weaker passwords than the default policy to be specified. DisablePasswordExpiration can also be specified. The two may be specified together; for example: "DisablePasswordExpiration, DisableStrongPassword".

Specifies the user's password profile. Note that the parameter type for this parameter is PasswordProfile. In order to pass a parameter of this type, you first need to;

1. create a variable in PowerShell with that type:

$PasswordProfile = New-Object -TypeName Microsoft.Open.AzureAD.Model.PasswordProfile

1. Set the value of the password in this variable:

$PasswordProfile.Password = "\<Password\>"

1. Finally pass this variable to the cmdlet:

New-AzureADUser -PasswordProfile $PasswordProfile ...

Other attributes that can be set in the PasswordProfile are:

• $PasswordProfile.EnforceChangePasswordPolicy - a boolean indicating that the change password policy is enabled or disabled for this user.
• $PasswordProfile.ForceChangePasswordNextLogin - a boolean indicating that the user must change the password at the next sign in.

Specifies the user's physical delivery office name.

Specifies the user's postal code.

Specifies the user's preferred language.

If True, show this user in the address list.

Specifies the collection of sign-in names for a local account in an Azure Active Directory B2C tenant.

Each sign-in name must be unique across the company/tenant. The property must be specified when you create a local account user. Do not specify it when you create a work or school account.

Specifies the user's state.

Specifies the user's street address.

Specifies the user's surname.

Specifies a telephone number.

A two letter country or region code (ISO standard 3166).

It's required for users that will be assigned licenses due to legal requirements to check for availability of services in countries and regions. Examples include: US, JP, and GB.

Specifies the user's principal name (UPN).

The UPN is an Internet-style login name for the user based on the Internet standard RFC 822. By convention, this should map to the user's email name. The general format is alias@domain.

For work or school accounts, the domain must be present in the tenant's collection of verified domains. This property is required when a work or school account is created; it is optional for local accounts.

A string value that can be used to classify user types in your directory, such as "Member" and "Guest".