Share via


az ad

Note

This command group has commands that are defined in both Azure CLI and at least one extension. Install each extension to benefit from its extended capabilities. Learn more about extensions.

Manage Microsoft Entra ID (formerly known as Azure Active Directory, Azure AD, AAD) entities needed for Azure role-based access control (Azure RBAC) through Microsoft Graph API.

Commands

Name Description Type Status
az ad app

Manage Microsoft Entra applications.

Core GA
az ad app create

Create an application.

Core GA
az ad app credential

Manage an application's password or certificate credentials.

Core GA
az ad app credential delete

Delete an application's password or certificate credentials.

Core GA
az ad app credential list

List an application's password or certificate credential metadata. (The content of the password or certificate credential is not retrievable.).

Core GA
az ad app credential reset

Reset an application's password or certificate credentials.

Core GA
az ad app delete

Delete an application.

Core GA
az ad app federated-credential

Manage application federated identity credentials.

Core GA
az ad app federated-credential create

Create application federated identity credential.

Core GA
az ad app federated-credential delete

Delete application federated identity credential.

Core GA
az ad app federated-credential list

List application federated identity credentials.

Core GA
az ad app federated-credential show

Show application federated identity credential.

Core GA
az ad app federated-credential update

Update application federated identity credential.

Core GA
az ad app list

List applications.

Core GA
az ad app owner

Manage application owners.

Core GA
az ad app owner add

Add an application owner.

Core GA
az ad app owner list

List application owners.

Core GA
az ad app owner remove

Remove an application owner.

Core GA
az ad app permission

Manage an application's OAuth2 permissions.

Core GA
az ad app permission add

Add an API permission.

Core GA
az ad app permission admin-consent

Grant Application & Delegated permissions through admin-consent.

Core GA
az ad app permission delete

Remove an API permission.

Core GA
az ad app permission grant

Grant the app an API Delegated permissions.

Core GA
az ad app permission list

List API permissions the application has requested.

Core GA
az ad app permission list-grants

List Oauth2 permission grants.

Core GA
az ad app show

Get the details of an application.

Core GA
az ad app update

Update an application.

Core GA
az ad ds

Manage domain service with azure active directory.

Extension Experimental
az ad ds create

Create a new domain service with the specified parameters.

Extension Experimental
az ad ds delete

The Delete Domain Service operation deletes an existing Domain Service.

Extension Experimental
az ad ds list

List domain services in resource group or in subscription.

Extension Experimental
az ad ds show

Get the specified domain service.

Extension Experimental
az ad ds update

Update the existing deployment properties for domain service.

Extension Experimental
az ad ds wait

Place the CLI in a waiting state until a condition of the ad ds is met.

Extension Experimental
az ad group

Manage Microsoft Entra groups.

Core GA
az ad group create

Create a group.

Core GA
az ad group delete

Delete a group.

Core GA
az ad group get-member-groups

Get a collection of object IDs of groups of which the specified group is a member.

Core GA
az ad group list

List groups in the directory.

Core GA
az ad group member

Manage group members.

Core GA
az ad group member add

Add a member to a group.

Core GA
az ad group member check

Check if a member is in a group.

Core GA
az ad group member list

Get the members of a group.

Core GA
az ad group member remove

Remove a member from a group.

Core GA
az ad group owner

Manage group owners.

Core GA
az ad group owner add

Add a group owner.

Core GA
az ad group owner list

List group owners.

Core GA
az ad group owner remove

Remove a group owner.

Core GA
az ad group show

Get the details of a group.

Core GA
az ad signed-in-user

Show graph information about current signed-in user in CLI.

Core GA
az ad signed-in-user list-owned-objects

Get the list of directory objects that are owned by the user.

Core GA
az ad signed-in-user show

Get the details for the currently logged-in user.

Core GA
az ad sp

Manage Microsoft Entra service principals.

Core GA
az ad sp create

Create a service principal.

Core GA
az ad sp create-for-rbac

Create a service principal and configure its access to Azure resources.

Core GA
az ad sp credential

Manage a service principal's password or certificate credentials.

Core GA
az ad sp credential delete

Delete a service principal's password or certificate credentials.

Core GA
az ad sp credential list

List a service principal's password or certificate credential metadata. (The content of the password or certificate credential is not retrievable.).

Core GA
az ad sp credential reset

Reset a service principal's password or certificate credentials.

Core GA
az ad sp delete

Delete a service principal.

Core GA
az ad sp list

List service principals.

Core GA
az ad sp owner

Manage service principal owners.

Core GA
az ad sp owner list

List service principal owners.

Core GA
az ad sp show

Get the details of a service principal.

Core GA
az ad sp update

Update a service principal.

Core GA
az ad user

Manage Microsoft Entra users.

Core GA
az ad user create

Create a user.

Core GA
az ad user delete

Delete a user.

Core GA
az ad user get-member-groups

Get groups of which the user is a member.

Core GA
az ad user list

List users.

Core GA
az ad user show

Get the details of a user.

Core GA
az ad user update

Update a user.

Core GA