Microsoft.Graph.Beta.Applications

Microsoft Graph PowerShell Cmdlets

Microsoft.Graph.Beta.Applications

Add-MgBetaApplicationKey

Add a key credential to an application. This method, along with removeKey, can be used by an application to automate rolling its expiring keys. As part of the request validation for this method, a proof of possession of an existing key is verified before the action can be performed. Applications that don't have any existing valid certificates (no certificates have been added yet, or all certificates have expired), won't be able to use this service action. You can use the Update application operation to perform an update instead.

Note

To view the v1.0 release of this cmdlet, view Add-MgApplicationKey

Add-MgBetaApplicationPassword

Adds a strong password to an application. You can also add passwords while creating the application.

Note

To view the v1.0 release of this cmdlet, view Add-MgApplicationPassword

Add-MgBetaServicePrincipalTokenSigningCertificate

Creates a self-signed signing certificate and returns a selfSignedCertificate object, which is the public part of the generated certificate. The self-signed signing certificate is composed of the following objects which are added to the servicePrincipal: + The keyCredentials object with the following objects: + A private key object with usage set to Sign. + A public key object with usage set to Verify.+ The passwordCredentials object. All the objects have the same value of customKeyIdentifier. The passwordCredential is used to open the PFX file (private key). It and the associated private key object have the same value of keyId. Once set during creation through the displayName property, the subject of the certificate cannot be updated. The startDateTime is set to the same time the certificate is created using the action. The endDateTime can be up to three years after the certificate is created.

Note

To view the v1.0 release of this cmdlet, view Add-MgServicePrincipalTokenSigningCertificate

Clear-MgBetaApplicationVerifiedPublisher

Unset the verifiedPublisher previously set on an application, removing all verified publisher properties. For more information, see Publisher verification.

Note

To view the v1.0 release of this cmdlet, view Clear-MgApplicationVerifiedPublisher

Confirm-MgBetaApplicationMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgApplicationMemberGroup

Confirm-MgBetaApplicationMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgApplicationMemberObject

Confirm-MgBetaServicePrincipalMemberGroup

Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.

Note

To view the v1.0 release of this cmdlet, view Confirm-MgServicePrincipalMemberGroup

Confirm-MgBetaServicePrincipalMemberObject

Invoke action checkMemberObjects

Note

To view the v1.0 release of this cmdlet, view Confirm-MgServicePrincipalMemberObject

Find-MgBetaApplicationSynchronizationJobSchemaDirectory

Discover the latest schema definition for provisioning to an application.

Note

To view the v1.0 release of this cmdlet, view Find-MgApplicationSynchronizationJobSchemaDirectory

Find-MgBetaApplicationSynchronizationTemplateSchemaDirectory

Discover the latest schema definition for provisioning to an application.

Note

To view the v1.0 release of this cmdlet, view Find-MgApplicationSynchronizationTemplateSchemaDirectory

Find-MgBetaServicePrincipalSynchronizationJobSchemaDirectory

Discover the latest schema definition for provisioning to an application.

Note

To view the v1.0 release of this cmdlet, view Find-MgServicePrincipalSynchronizationJobSchemaDirectory

Find-MgBetaServicePrincipalSynchronizationTemplateSchemaDirectory

Discover the latest schema definition for provisioning to an application.

Note

To view the v1.0 release of this cmdlet, view Find-MgServicePrincipalSynchronizationTemplateSchemaDirectory

Get-MgBetaApplication

Get the properties and relationships of an application object.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplication

Get-MgBetaApplicationAppManagementPolicy

The appManagementPolicy applied to this application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationAppManagementPolicy

Get-MgBetaApplicationAppManagementPolicyByRef

The appManagementPolicy applied to this application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationAppManagementPolicyByRef

Get-MgBetaApplicationAppManagementPolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationAppManagementPolicyCount

Get-MgBetaApplicationByAppId

Get the properties and relationships of an application object.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationByAppId

Get-MgBetaApplicationById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationById

Get-MgBetaApplicationByUniqueName

Get the properties and relationships of an application object.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationByUniqueName

Get-MgBetaApplicationConnectorGroup

The connectorGroup the application is using with Microsoft Entra application proxy. Nullable.

Get-MgBetaApplicationConnectorGroupByRef

The connectorGroup the application is using with Microsoft Entra application proxy. Nullable.

Get-MgBetaApplicationCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationCount

Get-MgBetaApplicationCreatedOnBehalfOf

Supports $filter (/$count eq 0, /$count ne 0). Read-only.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationCreatedOnBehalfOf

Get-MgBetaApplicationDelta

Get newly created, updated, or deleted applications without having to perform a full read of the entire resource collection. See Using Delta Query for details.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationDelta

Get-MgBetaApplicationExtensionProperty

Read a directory extension definition represented by an extensionProperty object.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationExtensionProperty

Get-MgBetaApplicationExtensionPropertyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationExtensionPropertyCount

Get-MgBetaApplicationFederatedIdentityCredential

Read the properties and relationships of a federatedIdentityCredential object.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationFederatedIdentityCredential

Get-MgBetaApplicationFederatedIdentityCredentialByName

Read the properties and relationships of a federatedIdentityCredential object.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationFederatedIdentityCredentialByName

Get-MgBetaApplicationFederatedIdentityCredentialCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationFederatedIdentityCredentialCount

Get-MgBetaApplicationHomeRealmDiscoveryPolicy

Get homeRealmDiscoveryPolicies from applications

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationHomeRealmDiscoveryPolicy

Get-MgBetaApplicationHomeRealmDiscoveryPolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationHomeRealmDiscoveryPolicyCount

Get-MgBetaApplicationLogo

The main logo for the application. Not nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationLogo

Get-MgBetaApplicationMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationMemberGroup

Get-MgBetaApplicationMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationMemberObject

Get-MgBetaApplicationOwner

Retrieve a list of owners for an application that are directoryObject types.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwner

Get-MgBetaApplicationOwnerAsEndpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerAsEndpoint

Get-MgBetaApplicationOwnerAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerAsServicePrincipal

Get-MgBetaApplicationOwnerAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerAsUser

Get-MgBetaApplicationOwnerByRef

Retrieve a list of owners for an application that are directoryObject types.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerByRef

Get-MgBetaApplicationOwnerCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerCount

Get-MgBetaApplicationOwnerCountAsEndpoint

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerCountAsEndpoint

Get-MgBetaApplicationOwnerCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerCountAsServicePrincipal

Get-MgBetaApplicationOwnerCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationOwnerCountAsUser

Get-MgBetaApplicationSynchronization

Represents the capability for Microsoft Entra identity synchronization through the Microsoft Graph API.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronization

Get-MgBetaApplicationSynchronizationAccessToken

Acquire an OAuth Access token to authorize the Microsoft Entra provisioning service to provision users into an application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationAccessToken

Get-MgBetaApplicationSynchronizationJob

Performs synchronization by periodically running in the background, polling for changes in one directory, and pushing them to another directory.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationJob

Get-MgBetaApplicationSynchronizationJobBulkUpload

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationJobBulkUpload

Get-MgBetaApplicationSynchronizationJobBulkUploadContent

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationJobBulkUploadContent

Get-MgBetaApplicationSynchronizationJobCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationJobCount

Get-MgBetaApplicationSynchronizationJobSchema

The synchronization schema configured for the job.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationJobSchema

Get-MgBetaApplicationSynchronizationJobSchemaDirectory

Contains the collection of directories and all of their objects.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationJobSchemaDirectory

Get-MgBetaApplicationSynchronizationJobSchemaDirectoryCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationJobSchemaDirectoryCount

Get-MgBetaApplicationSynchronizationSecretCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationSecretCount

Get-MgBetaApplicationSynchronizationTemplate

Pre-configured synchronization settings for a particular application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationTemplate

Get-MgBetaApplicationSynchronizationTemplateCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationTemplateCount

Get-MgBetaApplicationSynchronizationTemplateSchema

Default synchronization schema for the jobs based on this template.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationTemplateSchema

Get-MgBetaApplicationSynchronizationTemplateSchemaDirectory

Contains the collection of directories and all of their objects.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationTemplateSchemaDirectory

Get-MgBetaApplicationSynchronizationTemplateSchemaDirectoryCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationSynchronizationTemplateSchemaDirectoryCount

Get-MgBetaApplicationTemplate

Retrieve the properties of an applicationTemplate object.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTemplate

Get-MgBetaApplicationTemplateCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTemplateCount

Get-MgBetaApplicationTokenIssuancePolicy

List the tokenIssuancePolicy objects that are assigned to an application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTokenIssuancePolicy

Get-MgBetaApplicationTokenIssuancePolicyByRef

List the tokenIssuancePolicy objects that are assigned to an application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTokenIssuancePolicyByRef

Get-MgBetaApplicationTokenIssuancePolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTokenIssuancePolicyCount

Get-MgBetaApplicationTokenLifetimePolicy

List the tokenLifetimePolicy objects that are assigned to an application or servicePrincipal. Only one object is returned in the collection because only one tokenLifetimePolicy can be assigned to an application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTokenLifetimePolicy

Get-MgBetaApplicationTokenLifetimePolicyByRef

List the tokenLifetimePolicy objects that are assigned to an application or servicePrincipal. Only one object is returned in the collection because only one tokenLifetimePolicy can be assigned to an application.

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTokenLifetimePolicyByRef

Get-MgBetaApplicationTokenLifetimePolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgApplicationTokenLifetimePolicyCount

Get-MgBetaApplicationUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaGroupAppRoleAssignment

Represents the app roles a group has been granted for an application. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgGroupAppRoleAssignment

Get-MgBetaGroupAppRoleAssignmentCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgGroupAppRoleAssignmentCount

Get-MgBetaOnPremisePublishingProfile

Get entity from onPremisesPublishingProfiles by key

Get-MgBetaOnPremisePublishingProfileAgent

List of existing onPremisesAgent objects. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileAgentCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileAgentGroup

List of existing onPremisesAgentGroup objects. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileAgentGroupAgent

List of onPremisesAgent that are assigned to an onPremisesAgentGroup. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileAgentGroupAgentCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileAgentGroupByRef

List of onPremisesAgentGroups that an onPremisesAgent is assigned to. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileAgentGroupCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileAgentGroupPublishedResource

List of publishedResource that are assigned to an onPremisesAgentGroup. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceAgentGroup

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceAgentGroupByRef

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceAgentGroupCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileApplicationSegment

Get applicationSegments from onPremisesPublishingProfiles

Get-MgBetaOnPremisePublishingProfileApplicationSegmentCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileConnector

List of existing connector objects for applications published through Application Proxy. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileConnectorCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileConnectorGroup

List of existing connectorGroup objects for applications published through Application Proxy. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfileConnectorGroupApplication

Get applications from onPremisesPublishingProfiles

Get-MgBetaOnPremisePublishingProfileConnectorGroupApplicationByAppId

Get applications from onPremisesPublishingProfiles

Get-MgBetaOnPremisePublishingProfileConnectorGroupApplicationByUniqueName

Get applications from onPremisesPublishingProfiles

Get-MgBetaOnPremisePublishingProfileConnectorGroupApplicationCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileConnectorGroupApplicationLogo

The main logo for the application. Not nullable.

Get-MgBetaOnPremisePublishingProfileConnectorGroupCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileConnectorGroupMember

Get members from onPremisesPublishingProfiles

Get-MgBetaOnPremisePublishingProfileConnectorGroupMemberByRef

Get ref of members from onPremisesPublishingProfiles

Get-MgBetaOnPremisePublishingProfileConnectorGroupMemberCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileConnectorMemberOf

The connectorGroup that the connector is a member of. Read-only.

Get-MgBetaOnPremisePublishingProfileConnectorMemberOfCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfileCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfilePublishedResource

List of existing publishedResource objects. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfilePublishedResourceAgentGroup

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfilePublishedResourceAgentGroupByRef

List of onPremisesAgentGroups that a publishedResource is assigned to. Read-only. Nullable.

Get-MgBetaOnPremisePublishingProfilePublishedResourceAgentGroupCount

Get the number of the resource

Get-MgBetaOnPremisePublishingProfilePublishedResourceCount

Get the number of the resource

Get-MgBetaServicePrincipal

Retrieve the properties and relationships of a servicePrincipal object.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipal

Get-MgBetaServicePrincipalAppManagementPolicy

The appManagementPolicy applied to this service principal.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalAppManagementPolicy

Get-MgBetaServicePrincipalAppManagementPolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalAppManagementPolicyCount

Get-MgBetaServicePrincipalAppRoleAssignedTo

Read the properties and relationships of an appRoleAssignment object.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalAppRoleAssignedTo

Get-MgBetaServicePrincipalAppRoleAssignedToCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalAppRoleAssignedToCount

Get-MgBetaServicePrincipalAppRoleAssignment

Read the properties and relationships of an appRoleAssignment object.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalAppRoleAssignment

Get-MgBetaServicePrincipalAppRoleAssignmentCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalAppRoleAssignmentCount

Get-MgBetaServicePrincipalByAppId

Retrieve the properties and relationships of a servicePrincipal object.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalByAppId

Get-MgBetaServicePrincipalById

Return the directory objects specified in a list of IDs. Some common uses for this function are to:

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalById

Get-MgBetaServicePrincipalClaimMappingPolicy

List the claimsMappingPolicy objects that are assigned to a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalClaimMappingPolicy

Get-MgBetaServicePrincipalClaimMappingPolicyByRef

List the claimsMappingPolicy objects that are assigned to a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalClaimMappingPolicyByRef

Get-MgBetaServicePrincipalClaimMappingPolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalClaimMappingPolicyCount

Get-MgBetaServicePrincipalClaimPolicy

Get the properties and relationships of a customClaimsPolicy object.

Get-MgBetaServicePrincipalCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalCount

Get-MgBetaServicePrincipalCreatedObject

Directory objects created by this service principal. Read-only. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalCreatedObject

Get-MgBetaServicePrincipalCreatedObjectAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalCreatedObjectAsServicePrincipal

Get-MgBetaServicePrincipalCreatedObjectCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalCreatedObjectCount

Get-MgBetaServicePrincipalCreatedObjectCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalCreatedObjectCountAsServicePrincipal

Get-MgBetaServicePrincipalDelegatedPermissionClassification

The permission classifications for delegated permissions exposed by the app that this service principal represents. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalDelegatedPermissionClassification

Get-MgBetaServicePrincipalDelegatedPermissionClassificationCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalDelegatedPermissionClassificationCount

Get-MgBetaServicePrincipalDelta

Get newly created, updated, or deleted service principals without having to perform a full read of the entire resource collection.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalDelta

Get-MgBetaServicePrincipalEndpoint

Endpoints available for discovery. Services like Sharepoint populate this property with a tenant specific SharePoint endpoints that other applications can discover and use in their experiences.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalEndpoint

Get-MgBetaServicePrincipalEndpointCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalEndpointCount

Get-MgBetaServicePrincipalHomeRealmDiscoveryPolicy

List the homeRealmDiscoveryPolicy objects that are assigned to a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalHomeRealmDiscoveryPolicy

Get-MgBetaServicePrincipalHomeRealmDiscoveryPolicyByRef

List the homeRealmDiscoveryPolicy objects that are assigned to a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalHomeRealmDiscoveryPolicyByRef

Get-MgBetaServicePrincipalHomeRealmDiscoveryPolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalHomeRealmDiscoveryPolicyCount

Get-MgBetaServicePrincipalLicenseDetail

Get licenseDetails from servicePrincipals

Get-MgBetaServicePrincipalLicenseDetailCount

Get the number of the resource

Get-MgBetaServicePrincipalLicenseDetailTeamLicensingDetail

Get the license status of a user in Microsoft Teams.

Get-MgBetaServicePrincipalMemberGroup

Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberGroup

Get-MgBetaServicePrincipalMemberObject

Invoke action getMemberObjects

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberObject

Get-MgBetaServicePrincipalMemberOf

Roles that this service principal is a member of. HTTP Methods: GET Read-only. Nullable. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOf

Get-MgBetaServicePrincipalMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOfAsAdministrativeUnit

Get-MgBetaServicePrincipalMemberOfAsDirectoryRole

Get the item of type microsoft.graph.directoryObject as microsoft.graph.directoryRole

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOfAsDirectoryRole

Get-MgBetaServicePrincipalMemberOfAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOfAsGroup

Get-MgBetaServicePrincipalMemberOfCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOfCount

Get-MgBetaServicePrincipalMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOfCountAsAdministrativeUnit

Get-MgBetaServicePrincipalMemberOfCountAsDirectoryRole

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOfCountAsDirectoryRole

Get-MgBetaServicePrincipalMemberOfCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalMemberOfCountAsGroup

Get-MgBetaServicePrincipalOauth2PermissionGrant

Delegated permission grants authorizing this service principal to access an API on behalf of a signed-in user. Read-only. Nullable.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOauth2PermissionGrant

Get-MgBetaServicePrincipalOauth2PermissionGrantCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOauth2PermissionGrantCount

Get-MgBetaServicePrincipalOwnedObject

Directory objects that are owned by this service principal. Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1).

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObject

Get-MgBetaServicePrincipalOwnedObjectAsApplication

Get the item of type microsoft.graph.directoryObject as microsoft.graph.application

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectAsApplication

Get-MgBetaServicePrincipalOwnedObjectAsEndpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectAsEndpoint

Get-MgBetaServicePrincipalOwnedObjectAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectAsGroup

Get-MgBetaServicePrincipalOwnedObjectAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectAsServicePrincipal

Get-MgBetaServicePrincipalOwnedObjectCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectCount

Get-MgBetaServicePrincipalOwnedObjectCountAsApplication

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectCountAsApplication

Get-MgBetaServicePrincipalOwnedObjectCountAsEndpoint

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectCountAsEndpoint

Get-MgBetaServicePrincipalOwnedObjectCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectCountAsGroup

Get-MgBetaServicePrincipalOwnedObjectCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnedObjectCountAsServicePrincipal

Get-MgBetaServicePrincipalOwner

Directory objects that are owners of this servicePrincipal. The owners are a set of nonadmin users or servicePrincipals who are allowed to modify this object. Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1).

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwner

Get-MgBetaServicePrincipalOwnerAsEndpoint

Get the item of type microsoft.graph.directoryObject as microsoft.graph.endpoint

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerAsEndpoint

Get-MgBetaServicePrincipalOwnerAsServicePrincipal

Get the item of type microsoft.graph.directoryObject as microsoft.graph.servicePrincipal

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerAsServicePrincipal

Get-MgBetaServicePrincipalOwnerAsUser

Get the item of type microsoft.graph.directoryObject as microsoft.graph.user

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerAsUser

Get-MgBetaServicePrincipalOwnerByRef

Directory objects that are owners of this servicePrincipal. The owners are a set of nonadmin users or servicePrincipals who are allowed to modify this object. Read-only. Nullable. Supports $expand and $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1).

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerByRef

Get-MgBetaServicePrincipalOwnerCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerCount

Get-MgBetaServicePrincipalOwnerCountAsEndpoint

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerCountAsEndpoint

Get-MgBetaServicePrincipalOwnerCountAsServicePrincipal

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerCountAsServicePrincipal

Get-MgBetaServicePrincipalOwnerCountAsUser

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalOwnerCountAsUser

Get-MgBetaServicePrincipalPasswordSingleSignOnCredential

Get a list of single sign-on credentials using a password for a user or group.

Get-MgBetaServicePrincipalPermissionGrantPreApprovalPolicy

Retrieve the permissionGrantPreApprovalPolicy object for the servicePrincipal.

Get-MgBetaServicePrincipalPermissionGrantPreApprovalPolicyCount

Get the number of the resource

Get-MgBetaServicePrincipalRemoteDesktopSecurityConfiguration

Read the properties and relationships of a remoteDesktopSecurityConfiguration object on a servicePrincipal. Use this configuration to view the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices. Additionally you can view any targetDeviceGroups that have been configured for SSO.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalRemoteDesktopSecurityConfiguration

Get-MgBetaServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

Read the properties and relationships of a targetDeviceGroup object for the remoteDesktopSecurityConfiguration object on the servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

Get-MgBetaServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroupCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroupCount

Get-MgBetaServicePrincipalSynchronization

Represents the capability for Microsoft Entra identity synchronization through the Microsoft Graph API.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronization

Get-MgBetaServicePrincipalSynchronizationAccessToken

Acquire an OAuth Access token to authorize the Microsoft Entra provisioning service to provision users into an application.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationAccessToken

Get-MgBetaServicePrincipalSynchronizationJob

Retrieve the existing synchronization job and its properties.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationJob

Get-MgBetaServicePrincipalSynchronizationJobBulkUpload

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationJobBulkUpload

Get-MgBetaServicePrincipalSynchronizationJobBulkUploadContent

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationJobBulkUploadContent

Get-MgBetaServicePrincipalSynchronizationJobCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationJobCount

Get-MgBetaServicePrincipalSynchronizationJobSchema

Retrieve the schema for a given synchronization job or template.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationJobSchema

Get-MgBetaServicePrincipalSynchronizationJobSchemaDirectory

Contains the collection of directories and all of their objects.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationJobSchemaDirectory

Get-MgBetaServicePrincipalSynchronizationJobSchemaDirectoryCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationJobSchemaDirectoryCount

Get-MgBetaServicePrincipalSynchronizationSecretCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationSecretCount

Get-MgBetaServicePrincipalSynchronizationTemplate

Pre-configured synchronization settings for a particular application.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationTemplate

Get-MgBetaServicePrincipalSynchronizationTemplateCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationTemplateCount

Get-MgBetaServicePrincipalSynchronizationTemplateSchema

Default synchronization schema for the jobs based on this template.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationTemplateSchema

Get-MgBetaServicePrincipalSynchronizationTemplateSchemaDirectory

Contains the collection of directories and all of their objects.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationTemplateSchemaDirectory

Get-MgBetaServicePrincipalSynchronizationTemplateSchemaDirectoryCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalSynchronizationTemplateSchemaDirectoryCount

Get-MgBetaServicePrincipalTokenIssuancePolicy

The tokenIssuancePolicies assigned to this service principal. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTokenIssuancePolicy

Get-MgBetaServicePrincipalTokenIssuancePolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTokenIssuancePolicyCount

Get-MgBetaServicePrincipalTokenLifetimePolicy

The tokenLifetimePolicies assigned to this service principal. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTokenLifetimePolicy

Get-MgBetaServicePrincipalTokenLifetimePolicyCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTokenLifetimePolicyCount

Get-MgBetaServicePrincipalTransitiveMemberOf

Get transitiveMemberOf from servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOf

Get-MgBetaServicePrincipalTransitiveMemberOfAsAdministrativeUnit

Get the item of type microsoft.graph.directoryObject as microsoft.graph.administrativeUnit

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOfAsAdministrativeUnit

Get-MgBetaServicePrincipalTransitiveMemberOfAsDirectoryRole

Get the item of type microsoft.graph.directoryObject as microsoft.graph.directoryRole

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOfAsDirectoryRole

Get-MgBetaServicePrincipalTransitiveMemberOfAsGroup

Get the item of type microsoft.graph.directoryObject as microsoft.graph.group

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOfAsGroup

Get-MgBetaServicePrincipalTransitiveMemberOfCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOfCount

Get-MgBetaServicePrincipalTransitiveMemberOfCountAsAdministrativeUnit

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOfCountAsAdministrativeUnit

Get-MgBetaServicePrincipalTransitiveMemberOfCountAsDirectoryRole

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOfCountAsDirectoryRole

Get-MgBetaServicePrincipalTransitiveMemberOfCountAsGroup

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgServicePrincipalTransitiveMemberOfCountAsGroup

Get-MgBetaServicePrincipalUserOwnedObject

Retrieve a list of recently deleted application and group objects owned by the specified user. This API returns up to 1,000 deleted objects owned by the user, sorted by ID, and doesn't support pagination.

Get-MgBetaUserAppRoleAssignment

Represents the app roles a user has been granted for an application. Supports $expand.

Note

To view the v1.0 release of this cmdlet, view Get-MgUserAppRoleAssignment

Get-MgBetaUserAppRoleAssignmentCount

Get the number of the resource

Note

To view the v1.0 release of this cmdlet, view Get-MgUserAppRoleAssignmentCount

Invoke-MgBetaFilterApplicationSynchronizationJobSchemaOperator

List all operators supported in the scoping filters.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFilterApplicationSynchronizationJobSchemaOperator

Invoke-MgBetaFilterApplicationSynchronizationTemplateSchemaOperator

List all operators supported in the scoping filters.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFilterApplicationSynchronizationTemplateSchemaOperator

Invoke-MgBetaFilterServicePrincipalSynchronizationJobSchemaOperator

List all operators supported in the scoping filters.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFilterServicePrincipalSynchronizationJobSchemaOperator

Invoke-MgBetaFilterServicePrincipalSynchronizationTemplateSchemaOperator

List all operators supported in the scoping filters.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFilterServicePrincipalSynchronizationTemplateSchemaOperator

Invoke-MgBetaFunctionApplicationSynchronizationJobSchema

List all the functions currently supported in the attributeMappingSource.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFunctionApplicationSynchronizationJobSchema

Invoke-MgBetaFunctionApplicationSynchronizationTemplateSchema

List all the functions currently supported in the attributeMappingSource.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFunctionApplicationSynchronizationTemplateSchema

Invoke-MgBetaFunctionServicePrincipalSynchronizationJobSchema

List all the functions currently supported in the attributeMappingSource.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFunctionServicePrincipalSynchronizationJobSchema

Invoke-MgBetaFunctionServicePrincipalSynchronizationTemplateSchema

List all the functions currently supported in the attributeMappingSource.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgFunctionServicePrincipalSynchronizationTemplateSchema

Invoke-MgBetaInstantiateApplicationTemplate

Add an instance of an application from the Microsoft Entra application gallery into your directory. The application template with ID 8adf8e6e-67b2-4cf2-a259-e3dc5476c621 can be used to add a non-gallery app that you can configure different single-sign on (SSO) modes like SAML SSO and password-based SSO.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgInstantiateApplicationTemplate

Invoke-MgBetaParseApplicationSynchronizationJobSchemaExpression

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgParseApplicationSynchronizationJobSchemaExpression

Invoke-MgBetaParseApplicationSynchronizationTemplateSchemaExpression

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgParseApplicationSynchronizationTemplateSchemaExpression

Invoke-MgBetaParseServicePrincipalSynchronizationJobSchemaExpression

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgParseServicePrincipalSynchronizationJobSchemaExpression

Invoke-MgBetaParseServicePrincipalSynchronizationTemplateSchemaExpression

Parse a given string expression into an attributeMappingSource object. For more information about expressions, see Writing Expressions for Attribute Mappings in Microsoft Entra ID.

Note

To view the v1.0 release of this cmdlet, view Invoke-MgParseServicePrincipalSynchronizationTemplateSchemaExpression

New-MgBetaApplication

Create a new application object.

Note

To view the v1.0 release of this cmdlet, view New-MgApplication

New-MgBetaApplicationAppManagementPolicyByRef

Assign an appManagementPolicy policy object to an application or service principal object. The application or service principal adopts this policy over the tenant-wide tenantAppManagementPolicy setting. Only one policy object can be assigned to an application or service principal.

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationAppManagementPolicyByRef

New-MgBetaApplicationExtensionProperty

Create a new directory extension definition, represented by an extensionProperty object.

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationExtensionProperty

New-MgBetaApplicationFederatedIdentityCredential

Create a new federatedIdentityCredential object for an application. By configuring a trust relationship between your Microsoft Entra application registration and the identity provider for your compute platform, you can use tokens issued by that platform to authenticate with Microsoft identity platform and call APIs in the Microsoft ecosystem. Maximum of 20 objects can be added to an application.

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationFederatedIdentityCredential

New-MgBetaApplicationOwnerByRef

Add an owner to an application. Currently, only individual users are supported as owners of applications.

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationOwnerByRef

New-MgBetaApplicationSynchronizationJob

Create new navigation property to jobs for applications

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationSynchronizationJob

New-MgBetaApplicationSynchronizationJobOnDemand

Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationSynchronizationJobOnDemand

New-MgBetaApplicationSynchronizationJobSchemaDirectory

Create new navigation property to directories for applications

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationSynchronizationJobSchemaDirectory

New-MgBetaApplicationSynchronizationTemplate

Create new navigation property to templates for applications

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationSynchronizationTemplate

New-MgBetaApplicationSynchronizationTemplateSchemaDirectory

Create new navigation property to directories for applications

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationSynchronizationTemplateSchemaDirectory

New-MgBetaApplicationTokenIssuancePolicyByRef

Assign a tokenIssuancePolicy to an application.

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationTokenIssuancePolicyByRef

New-MgBetaApplicationTokenLifetimePolicyByRef

Assign a tokenLifetimePolicy to an application or servicePrincipal. You can have multiple tokenLifetimePolicy policies in a tenant but can assign only one tokenLifetimePolicy per application.

Note

To view the v1.0 release of this cmdlet, view New-MgApplicationTokenLifetimePolicyByRef

New-MgBetaGroupAppRoleAssignment

Use this API to assign an app role to a security group. All direct members of the group will be considered assigned. Security groups with dynamic memberships are supported. To grant an app role assignment to a group, you need three identifiers: Additional licenses might be required to use a group to manage access to applications.

Note

To view the v1.0 release of this cmdlet, view New-MgGroupAppRoleAssignment

New-MgBetaOnPremisePublishingProfile

Add new entity to onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileAgent

Create new navigation property to agents for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileAgentGroup

Create new navigation property to agentGroups for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileAgentGroupAgent

Create new navigation property to agents for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileAgentGroupByRef

Create new navigation property ref to agentGroups for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileAgentGroupPublishedResource

Create new navigation property to publishedResources for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceAgentGroup

Create new navigation property to agentGroups for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceAgentGroupByRef

Create new navigation property ref to agentGroups for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileConnector

Create new navigation property to connectors for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileConnectorGroup

Create new navigation property to connectorGroups for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileConnectorGroupMemberByRef

Create new navigation property ref to members for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfileConnectorMemberOfByRef

Create new navigation property ref to memberOf for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfilePublishedResource

Create new navigation property to publishedResources for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfilePublishedResourceAgentGroup

Create new navigation property to agentGroups for onPremisesPublishingProfiles

New-MgBetaOnPremisePublishingProfilePublishedResourceAgentGroupByRef

Create new navigation property ref to agentGroups for onPremisesPublishingProfiles

New-MgBetaServicePrincipal

Create a new servicePrincipal object.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipal

New-MgBetaServicePrincipalAppRoleAssignedTo

Assign an app role for a resource service principal, to a user, group, or client service principal. App roles that are assigned to service principals are also known as application permissions. Application permissions can be granted directly with app role assignments, or through a consent experience. To grant an app role assignment, you need three identifiers:

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalAppRoleAssignedTo

New-MgBetaServicePrincipalAppRoleAssignment

Assign an app role to a client service principal. App roles that are assigned to service principals are also known as application permissions. Application permissions can be granted directly with app role assignments, or through a consent experience. To grant an app role assignment to a client service principal, you need three identifiers:

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalAppRoleAssignment

New-MgBetaServicePrincipalClaimMappingPolicyByRef

Assign a claimsMappingPolicy to a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalClaimMappingPolicyByRef

New-MgBetaServicePrincipalDelegatedPermissionClassification

Classify a delegated permission by adding a delegatedPermissionClassification to the servicePrincipal representing the API.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalDelegatedPermissionClassification

New-MgBetaServicePrincipalEndpoint

Create new navigation property to endpoints for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalEndpoint

New-MgBetaServicePrincipalHomeRealmDiscoveryPolicyByRef

Assign a homeRealmDiscoveryPolicy to a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalHomeRealmDiscoveryPolicyByRef

New-MgBetaServicePrincipalLicenseDetail

Create new navigation property to licenseDetails for servicePrincipals

New-MgBetaServicePrincipalOwnerByRef

Add an owner for the servicePrincipal. Service principal owners can be users, the service principal itself, or other service principals.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalOwnerByRef

New-MgBetaServicePrincipalPasswordSingleSignOnCredential

Create single sign-on credentials using a password for a user or group.

New-MgBetaServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

Create a new targetDeviceGroup object for the remoteDesktopSecurityConfiguration object on the servicePrincipal. You can configure a maximum of 10 target device groups for the remoteDesktopSecurityConfiguraiton object on the servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

New-MgBetaServicePrincipalSynchronizationJob

Create new synchronization job with a default synchronization schema. The job is created in a disabled state. Call Start job to start synchronization.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalSynchronizationJob

New-MgBetaServicePrincipalSynchronizationJobOnDemand

Select a user and provision the account on-demand. The rate limit for this API is 5 requests per 10 seconds. No user or group will be provisioned on-demand that would not have been provisioned through the regular provisioning cycles.

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalSynchronizationJobOnDemand

New-MgBetaServicePrincipalSynchronizationJobSchemaDirectory

Create new navigation property to directories for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalSynchronizationJobSchemaDirectory

New-MgBetaServicePrincipalSynchronizationTemplate

Create new navigation property to templates for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalSynchronizationTemplate

New-MgBetaServicePrincipalSynchronizationTemplateSchemaDirectory

Create new navigation property to directories for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view New-MgServicePrincipalSynchronizationTemplateSchemaDirectory

New-MgBetaUserAppRoleAssignment

Use this API to assign an app role to a user, creating an appRoleAssignment object. To grant an app role assignment to a user, you need three identifiers:

Note

To view the v1.0 release of this cmdlet, view New-MgUserAppRoleAssignment

Ping-MgBetaApplicationSynchronization

Invoke function Ping

Ping-MgBetaServicePrincipalSynchronization

Invoke function Ping

Remove-MgBetaApplication

Deletes an application. When deleted, apps are moved to a temporary container and can be restored within 30 days. After that time, they are permanently deleted.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplication

Remove-MgBetaApplicationAppManagementPolicyAppManagementPolicyByRef

Remove an appManagementPolicy policy object from an application or service principal object. When you remove the appManagementPolicy, the application or service principal adopts the tenant-wide tenantAppManagementPolicy setting.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationAppManagementPolicyAppManagementPolicyByRef

Remove-MgBetaApplicationAppManagementPolicyByRef

Remove an appManagementPolicy policy object from an application or service principal object. When you remove the appManagementPolicy, the application or service principal adopts the tenant-wide tenantAppManagementPolicy setting.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationAppManagementPolicyAppManagementPolicyByRef

Remove-MgBetaApplicationByAppId

Deletes an application. When deleted, apps are moved to a temporary container and can be restored within 30 days. After that time, they are permanently deleted.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationByAppId

Remove-MgBetaApplicationByUniqueName

Deletes an application. When deleted, apps are moved to a temporary container and can be restored within 30 days. After that time, they are permanently deleted.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationByUniqueName

Remove-MgBetaApplicationConnectorGroupByRef

Delete ref of navigation property connectorGroup for applications

Remove-MgBetaApplicationExtensionProperty

Delete a directory extension definition represented by an extensionProperty object. You can delete only directory extensions that aren't synced from on-premises active directory (AD).

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationExtensionProperty

Remove-MgBetaApplicationFederatedIdentityCredential

Deletes a federatedIdentityCredential object from an application.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationFederatedIdentityCredential

Remove-MgBetaApplicationFederatedIdentityCredentialByName

Deletes a federatedIdentityCredential object from an application.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationFederatedIdentityCredentialByName

Remove-MgBetaApplicationKey

Remove a key credential from an application. This method along with addKey can be used by an application to automate rolling its expiring keys. As part of the request validation for this method, a proof of possession of an existing key is verified before the action can be performed.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationKey

Remove-MgBetaApplicationLogo

The main logo for the application. Not nullable.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationLogo

Remove-MgBetaApplicationOwnerByRef

Remove an owner from an application. As a recommended best practice, apps should have at least two owners.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationOwnerDirectoryObjectByRef

Remove-MgBetaApplicationOwnerDirectoryObjectByRef

Remove an owner from an application. As a recommended best practice, apps should have at least two owners.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationOwnerDirectoryObjectByRef

Remove-MgBetaApplicationPassword

Removes a password from an application.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationPassword

Remove-MgBetaApplicationSynchronization

Delete navigation property synchronization for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronization

Remove-MgBetaApplicationSynchronizationJob

Delete navigation property jobs for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationJob

Remove-MgBetaApplicationSynchronizationJobBulkUpload

Delete navigation property bulkUpload for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationJobBulkUpload

Remove-MgBetaApplicationSynchronizationJobBulkUploadContent

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationJobBulkUploadContent

Remove-MgBetaApplicationSynchronizationJobSchema

Delete navigation property schema for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationJobSchema

Remove-MgBetaApplicationSynchronizationJobSchemaDirectory

Delete navigation property directories for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationJobSchemaDirectory

Remove-MgBetaApplicationSynchronizationTemplate

Delete navigation property templates for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationTemplate

Remove-MgBetaApplicationSynchronizationTemplateSchema

Delete navigation property schema for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationTemplateSchema

Remove-MgBetaApplicationSynchronizationTemplateSchemaDirectory

Delete navigation property directories for applications

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationSynchronizationTemplateSchemaDirectory

Remove-MgBetaApplicationTokenIssuancePolicyByRef

Remove a tokenIssuancePolicy from an application.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationTokenIssuancePolicyTokenIssuancePolicyByRef

Remove-MgBetaApplicationTokenIssuancePolicyTokenIssuancePolicyByRef

Remove a tokenIssuancePolicy from an application.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationTokenIssuancePolicyTokenIssuancePolicyByRef

Remove-MgBetaApplicationTokenLifetimePolicyByRef

Remove a tokenLifetimePolicy from an application or servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationTokenLifetimePolicyTokenLifetimePolicyByRef

Remove-MgBetaApplicationTokenLifetimePolicyTokenLifetimePolicyByRef

Remove a tokenLifetimePolicy from an application or servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Remove-MgApplicationTokenLifetimePolicyTokenLifetimePolicyByRef

Remove-MgBetaGroupAppRoleAssignment

Deletes an appRoleAssignment that a group has been granted.

Note

To view the v1.0 release of this cmdlet, view Remove-MgGroupAppRoleAssignment

Remove-MgBetaOnPremisePublishingProfile

Delete entity from onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgent

Delete navigation property agents for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgentGroup

Delete navigation property agentGroups for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgentGroupAgent

Delete navigation property agents for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgentGroupByRef

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgentGroupOnPremiseAgentGroupByRef

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgentGroupPublishedResource

Delete navigation property publishedResources for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceAgentGroupByRef

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileAgentGroupPublishedResourceAgentGroupOnPremiseAgentGroupByRef

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileConnector

Delete navigation property connectors for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileConnectorGroup

Delete navigation property connectorGroups for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileConnectorGroupApplicationLogo

The main logo for the application. Not nullable.

Remove-MgBetaOnPremisePublishingProfileConnectorGroupMemberByRef

Delete ref of navigation property members for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileConnectorGroupMemberConnectorByRef

Delete ref of navigation property members for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileConnectorMemberOfByRef

Delete ref of navigation property memberOf for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfileConnectorMemberOfConnectorGroupByRef

Delete ref of navigation property memberOf for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfilePublishedResource

Delete navigation property publishedResources for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfilePublishedResourceAgentGroupByRef

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Remove-MgBetaOnPremisePublishingProfilePublishedResourceAgentGroupOnPremiseAgentGroupByRef

Delete ref of navigation property agentGroups for onPremisesPublishingProfiles

Remove-MgBetaServicePrincipal

Delete a servicePrincipal object.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipal

Remove-MgBetaServicePrincipalAppRoleAssignedTo

Deletes an appRoleAssignment that a user, group, or client service principal has been granted for a resource service principal.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalAppRoleAssignedTo

Remove-MgBetaServicePrincipalAppRoleAssignment

Deletes an appRoleAssignment that a service principal has been granted. App roles that are assigned to service principals are also known as application permissions. Deleting an app role assignment for a service principal is equivalent to revoking the app-only permission grant.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalAppRoleAssignment

Remove-MgBetaServicePrincipalByAppId

Delete a servicePrincipal object.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalByAppId

Remove-MgBetaServicePrincipalClaimMappingPolicyByRef

Remove a claimsMappingPolicy from a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalClaimMappingPolicyClaimMappingPolicyByRef

Remove-MgBetaServicePrincipalClaimMappingPolicyClaimMappingPolicyByRef

Remove a claimsMappingPolicy from a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalClaimMappingPolicyClaimMappingPolicyByRef

Remove-MgBetaServicePrincipalDelegatedPermissionClassification

Deletes a delegatedPermissionClassification which had previously been set for a delegated permission.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalDelegatedPermissionClassification

Remove-MgBetaServicePrincipalEndpoint

Delete navigation property endpoints for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalEndpoint

Remove-MgBetaServicePrincipalHomeRealmDiscoveryPolicyByRef

Remove a homeRealmDiscoveryPolicy from a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalHomeRealmDiscoveryPolicyHomeRealmDiscoveryPolicyByRef

Remove-MgBetaServicePrincipalHomeRealmDiscoveryPolicyHomeRealmDiscoveryPolicyByRef

Remove a homeRealmDiscoveryPolicy from a servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalHomeRealmDiscoveryPolicyHomeRealmDiscoveryPolicyByRef

Remove-MgBetaServicePrincipalLicenseDetail

Delete navigation property licenseDetails for servicePrincipals

Remove-MgBetaServicePrincipalOwnerByRef

Remove an owner from a servicePrincipal object. As a recommended best practice, service principals should have at least two owners.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalOwnerDirectoryObjectByRef

Remove-MgBetaServicePrincipalOwnerDirectoryObjectByRef

Remove an owner from a servicePrincipal object. As a recommended best practice, service principals should have at least two owners.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalOwnerDirectoryObjectByRef

Remove-MgBetaServicePrincipalPasswordSingleSignOnCredential

Delete single sign-on credentials using a password for a user or group.

Remove-MgBetaServicePrincipalRemoteDesktopSecurityConfiguration

Delete a remoteDesktopSecurityConfiguration object on a servicePrincipal. Removing remoteDesktopSecurityConfiguration object on the servicePrincipal disables the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices, and removes any target device groups that you configured for SSO.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalRemoteDesktopSecurityConfiguration

Remove-MgBetaServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

Delete a targetDeviceGroup object for the remoteDesktopSecurityConfiguration object on the servicePrincipal. Any user authenticating using the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to a Microsoft Entra joined or Microsoft Entra hybrid joined device that's in the removed targetDeviceGroup doesn't get SSO prompts.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

Remove-MgBetaServicePrincipalSynchronization

Delete navigation property synchronization for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronization

Remove-MgBetaServicePrincipalSynchronizationJob

Stop the synchronization job, and permanently delete all the state associated with it. Synchronized accounts are left as-is.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationJob

Remove-MgBetaServicePrincipalSynchronizationJobBulkUpload

Delete navigation property bulkUpload for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationJobBulkUpload

Remove-MgBetaServicePrincipalSynchronizationJobBulkUploadContent

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationJobBulkUploadContent

Remove-MgBetaServicePrincipalSynchronizationJobSchema

Delete navigation property schema for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationJobSchema

Remove-MgBetaServicePrincipalSynchronizationJobSchemaDirectory

Delete navigation property directories for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationJobSchemaDirectory

Remove-MgBetaServicePrincipalSynchronizationTemplate

Delete navigation property templates for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationTemplate

Remove-MgBetaServicePrincipalSynchronizationTemplateSchema

Delete navigation property schema for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationTemplateSchema

Remove-MgBetaServicePrincipalSynchronizationTemplateSchemaDirectory

Delete navigation property directories for servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Remove-MgServicePrincipalSynchronizationTemplateSchemaDirectory

Remove-MgBetaUserAppRoleAssignment

Delete an appRoleAssignment that has been granted to a user.

Note

To view the v1.0 release of this cmdlet, view Remove-MgUserAppRoleAssignment

Restart-MgBetaApplicationSynchronizationJob

Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.

Note

To view the v1.0 release of this cmdlet, view Restart-MgApplicationSynchronizationJob

Restart-MgBetaServicePrincipalSynchronizationJob

Restart a stopped synchronization job, forcing it to reprocess all the objects in the directory. Optionally clears existing the synchronization state and previous errors.

Note

To view the v1.0 release of this cmdlet, view Restart-MgServicePrincipalSynchronizationJob

Set-MgBetaApplicationConnectorGroupByRef

Assign a connectorGroup to an application.

Set-MgBetaApplicationLogo

The main logo for the application. Not nullable.

Note

To view the v1.0 release of this cmdlet, view Set-MgApplicationLogo

Set-MgBetaApplicationSynchronization

Update the navigation property synchronization in applications

Note

To view the v1.0 release of this cmdlet, view Set-MgApplicationSynchronization

Set-MgBetaApplicationSynchronizationJobBulkUploadContent

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Set-MgApplicationSynchronizationJobBulkUploadContent

Set-MgBetaApplicationSynchronizationSecret

Update property secrets value.

Note

To view the v1.0 release of this cmdlet, view Set-MgApplicationSynchronizationSecret

Set-MgBetaApplicationVerifiedPublisher

Set the the verifiedPublisher on an application. For more information, including prerequisites to setting a verified publisher, see Publisher verification.

Note

To view the v1.0 release of this cmdlet, view Set-MgApplicationVerifiedPublisher

Set-MgBetaOnPremisePublishingProfileConnectorGroupApplicationLogo

The main logo for the application. Not nullable.

Set-MgBetaServicePrincipalClaimPolicy

Update a customClaimsPolicy object.

Set-MgBetaServicePrincipalSynchronization

Update the navigation property synchronization in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Set-MgServicePrincipalSynchronization

Set-MgBetaServicePrincipalSynchronizationJobBulkUploadContent

The bulk upload operation for the job.

Note

To view the v1.0 release of this cmdlet, view Set-MgServicePrincipalSynchronizationJobBulkUploadContent

Set-MgBetaServicePrincipalSynchronizationSecret

Provide credentials for establishing connectivity with the target system.

Note

To view the v1.0 release of this cmdlet, view Set-MgServicePrincipalSynchronizationSecret

Start-MgBetaApplicationSynchronizationJob

Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don't create scripts to call the start job continuously while it's running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine.

Note

To view the v1.0 release of this cmdlet, view Start-MgApplicationSynchronizationJob

Start-MgBetaServicePrincipalSynchronizationJob

Start an existing synchronization job. If the job is in a paused state, it continues processing changes from the point where it was paused. If the job is in quarantine, the quarantine status is cleared. Don't create scripts to call the start job continuously while it's running because that can cause the service to stop running. Use the start job only when the job is currently paused or in quarantine.

Note

To view the v1.0 release of this cmdlet, view Start-MgServicePrincipalSynchronizationJob

Suspend-MgBetaApplicationSynchronizationJob

Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.

Note

To view the v1.0 release of this cmdlet, view Suspend-MgApplicationSynchronizationJob

Suspend-MgBetaServicePrincipalSynchronizationJob

Temporarily stop a running synchronization job. All the progress, including job state, is persisted, and the job continues from where it left off when a start call is made.

Note

To view the v1.0 release of this cmdlet, view Suspend-MgServicePrincipalSynchronizationJob

Test-MgBetaApplicationProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgApplicationProperty

Test-MgBetaApplicationSynchronizationJobCredential

Validate that the credentials are valid in the tenant.

Note

To view the v1.0 release of this cmdlet, view Test-MgApplicationSynchronizationJobCredential

Test-MgBetaServicePrincipalProperty

Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. For validating properties of an existing group, use the validateProperties function for groups. The following validations are performed for the display name and mail nickname properties: 1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate the mail nickname is unique This API returns with the first failure encountered. If one or more properties fail multiple validations, only the property with the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy.

Note

To view the v1.0 release of this cmdlet, view Test-MgServicePrincipalProperty

Test-MgBetaServicePrincipalSynchronizationJobCredential

Validate that the credentials are valid in the tenant.

Note

To view the v1.0 release of this cmdlet, view Test-MgServicePrincipalSynchronizationJobCredential

Update-MgBetaApplication

Create a new application object if it doesn't exist, or update the properties of an existing application object.

Note

To view the v1.0 release of this cmdlet, view Update-MgApplication

Update-MgBetaApplicationByAppId

Create a new application object if it doesn't exist, or update the properties of an existing application object.

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationByAppId

Update-MgBetaApplicationByUniqueName

Create a new application object if it doesn't exist, or update the properties of an existing application object.

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationByUniqueName

Update-MgBetaApplicationExtensionProperty

Update the navigation property extensionProperties in applications

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationExtensionProperty

Update-MgBetaApplicationFederatedIdentityCredential

Create a new federatedIdentityCredential object for an application if it doesn't exist, or update the properties of an existing federatedIdentityCredential object. By configuring a trust relationship between your Microsoft Entra application registration and the identity provider for your compute platform, you can use tokens issued by that platform to authenticate with Microsoft identity platform and call APIs in the Microsoft ecosystem. Maximum of 20 objects can be added to an application.

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationFederatedIdentityCredential

Update-MgBetaApplicationFederatedIdentityCredentialByName

Create a new federatedIdentityCredential object for an application if it doesn't exist, or update the properties of an existing federatedIdentityCredential object. By configuring a trust relationship between your Microsoft Entra application registration and the identity provider for your compute platform, you can use tokens issued by that platform to authenticate with Microsoft identity platform and call APIs in the Microsoft ecosystem. Maximum of 20 objects can be added to an application.

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationFederatedIdentityCredentialByName

Update-MgBetaApplicationSynchronizationJob

Update the navigation property jobs in applications

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationSynchronizationJob

Update-MgBetaApplicationSynchronizationJobBulkUpload

Update the navigation property bulkUpload in applications

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationSynchronizationJobBulkUpload

Update-MgBetaApplicationSynchronizationJobSchema

Update the navigation property schema in applications

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationSynchronizationJobSchema

Update-MgBetaApplicationSynchronizationJobSchemaDirectory

Update the navigation property directories in applications

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationSynchronizationJobSchemaDirectory

Update-MgBetaApplicationSynchronizationTemplate

Update (override) the synchronization template associated with a given application.

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationSynchronizationTemplate

Update-MgBetaApplicationSynchronizationTemplateSchema

Update the navigation property schema in applications

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationSynchronizationTemplateSchema

Update-MgBetaApplicationSynchronizationTemplateSchemaDirectory

Update the navigation property directories in applications

Note

To view the v1.0 release of this cmdlet, view Update-MgApplicationSynchronizationTemplateSchemaDirectory

Update-MgBetaGroupAppRoleAssignment

Update the navigation property appRoleAssignments in groups

Note

To view the v1.0 release of this cmdlet, view Update-MgGroupAppRoleAssignment

Update-MgBetaOnPremisePublishingProfile

Update entity in onPremisesPublishingProfiles

Update-MgBetaOnPremisePublishingProfileAgent

Update the navigation property agents in onPremisesPublishingProfiles

Update-MgBetaOnPremisePublishingProfileAgentGroup

Update the navigation property agentGroups in onPremisesPublishingProfiles

Update-MgBetaOnPremisePublishingProfileAgentGroupAgent

Update the navigation property agents in onPremisesPublishingProfiles

Update-MgBetaOnPremisePublishingProfileAgentGroupPublishedResource

Update the navigation property publishedResources in onPremisesPublishingProfiles

Update-MgBetaOnPremisePublishingProfileConnector

Update the navigation property connectors in onPremisesPublishingProfiles

Update-MgBetaOnPremisePublishingProfileConnectorGroup

Update the navigation property connectorGroups in onPremisesPublishingProfiles

Update-MgBetaOnPremisePublishingProfilePublishedResource

Update the navigation property publishedResources in onPremisesPublishingProfiles

Update-MgBetaServicePrincipal

Create a new servicePrincipal object if it doesn't exist, or update the properties of an existing servicePrincipal object.

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipal

Update-MgBetaServicePrincipalAppRoleAssignedTo

Update the navigation property appRoleAssignedTo in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalAppRoleAssignedTo

Update-MgBetaServicePrincipalAppRoleAssignment

Update the navigation property appRoleAssignments in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalAppRoleAssignment

Update-MgBetaServicePrincipalByAppId

Create a new servicePrincipal object if it doesn't exist, or update the properties of an existing servicePrincipal object.

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalByAppId

Update-MgBetaServicePrincipalClaimPolicy

Update a customClaimsPolicy object.

Update-MgBetaServicePrincipalDelegatedPermissionClassification

Update the navigation property delegatedPermissionClassifications in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalDelegatedPermissionClassification

Update-MgBetaServicePrincipalEndpoint

Update the navigation property endpoints in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalEndpoint

Update-MgBetaServicePrincipalLicenseDetail

Update the navigation property licenseDetails in servicePrincipals

Update-MgBetaServicePrincipalPasswordSingleSignOnCredential

Update single sign-on credentials using a password for a user or group.

Update-MgBetaServicePrincipalRemoteDesktopSecurityConfiguration

Update the properties of a remoteDesktopSecurityConfiguration object on the servicePrincipal. Use this configuration to enable or disable the Microsoft Entra ID Remote Desktop Services (RDS) authentication protocol to authenticate a user to Microsoft Entra joined or Microsoft Entra hybrid joined devices.

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalRemoteDesktopSecurityConfiguration

Update-MgBetaServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

Update the properties of a targetDeviceGroup object for remoteDesktopSecurityConfiguration object on the servicePrincipal. You can configure a maximum of 10 target device groups for the remoteDesktopSecurityConfiguraiton object on the servicePrincipal.

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalRemoteDesktopSecurityConfigurationTargetDeviceGroup

Update-MgBetaServicePrincipalSynchronizationJob

Update the navigation property jobs in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalSynchronizationJob

Update-MgBetaServicePrincipalSynchronizationJobBulkUpload

Update the navigation property bulkUpload in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalSynchronizationJobBulkUpload

Update-MgBetaServicePrincipalSynchronizationJobSchema

Update the synchronization schema for a given job or template. This method fully replaces the current schema with the one provided in the request. To update the schema of a template, make the call on the application object. You must be the owner of the application.

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalSynchronizationJobSchema

Update-MgBetaServicePrincipalSynchronizationJobSchemaDirectory

Update the navigation property directories in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalSynchronizationJobSchemaDirectory

Update-MgBetaServicePrincipalSynchronizationTemplate

Update the navigation property templates in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalSynchronizationTemplate

Update-MgBetaServicePrincipalSynchronizationTemplateSchema

Update the navigation property schema in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalSynchronizationTemplateSchema

Update-MgBetaServicePrincipalSynchronizationTemplateSchemaDirectory

Update the navigation property directories in servicePrincipals

Note

To view the v1.0 release of this cmdlet, view Update-MgServicePrincipalSynchronizationTemplateSchemaDirectory

Update-MgBetaUserAppRoleAssignment

Update the navigation property appRoleAssignments in users

Note

To view the v1.0 release of this cmdlet, view Update-MgUserAppRoleAssignment