AzureADPreview
중요
Azure AD 및 MSOnline PowerShell 모듈은 2024년 3월 30일부터 더 이상 사용되지 않습니다. 자세한 내용은 사용 중단 업데이트를 참조하세요. 이 날짜 이후 이러한 모듈에 대한 지원은 Microsoft Graph PowerShell SDK 및 보안 수정에 대한 마이그레이션 지원으로 제한됩니다. 사용되지 않는 모듈은 2025년 3월 30일까지 계속 작동합니다.
Microsoft Entra ID(이전의 Azure AD)와 상호 작용하려면 Microsoft Graph PowerShell 로 마이그레이션하는 것이 좋습니다. 일반적인 마이그레이션 질문은 마이그레이션 FAQ를 참조하세요. 참고: MSOnline 버전 1.0.x는 2024년 6월 30일 이후에 중단이 발생할 수 있습니다.
Graph용 Azure Active Directory PowerShell 미리 보기 모듈은 PowerShell 갤러리, www.powershellgallery.com 다운로드하여 설치할 수 있습니다. 이 갤러리는 PowerShellGet 모듈을 사용합니다. PowerShellGet 모듈에는 PowerShell 3.0 이상이 필요하며 다음 운영 체제 중 하나가 필요합니다.
Windows 10 Windows 8.1 Pro Windows 8.1 Enterprise Windows 7 SP1 Windows Server 2016 TP5 Windows Server 2012 R2 Windows Server 2008 R2 SP1
PowerShellGet을 사용하려면 .NET Framework 4.5 이상도 있어야 합니다. .NET Framework 4.5 이상은 여기에서 설치할 수 있습니다. 자세한 내용은 이 링크를 참조하세요. AzureAD cmdlet 설치에 대한 자세한 내용은 Graph용 Azure Active Directory PowerShell을 참조하세요.
이는 Azure Active Directory PowerShell For Graph 미리 보기 모듈의 cmdlet입니다.
관리 단위
Add-AzureADAdministrativeUnitMember |
Adds an administrative unit member. |
Add-AzureADMSAdministrativeUnitMember |
Adds an administrative unit member. |
Add-AzureADMSScopedRoleMembership |
Adds a scoped role membership to an administrative unit. |
Add-AzureADScopedRoleMembership |
Adds a scoped role membership to an administrative unit. |
Get-AzureADAdministrativeUnit |
Gets an administrative unit. |
Get-AzureADAdministrativeUnitMember |
Gets a member of an administrative unit. |
Get-AzureADMSAdministrativeUnit |
Gets an administrative unit. |
Get-AzureADMSAdministrativeUnitMember |
Gets a member of an administrative unit. |
Get-AzureADMSGroupPermissionGrant |
Retrieves a list of permission grants that have been consented for this group. |
Get-AzureADMSScopedRoleMembership |
Gets a scoped role membership from an administrative unit. |
Get-AzureADScopedRoleMembership |
Gets a scoped role membership from an administrative unit. |
New-AzureADAdministrativeUnit |
Creates an administrative unit. |
New-AzureADMSAdministrativeUnit |
Creates an administrative unit. |
New-AzureADMSAdministrativeUnitMember |
Create a new object as a member of the administrativeUnit. Currently only group objects are supported. |
Remove-AzureADAdministrativeUnit |
Removes an administrative unit. |
Remove-AzureADAdministrativeUnitMember |
Removes an administrative unit member. |
Remove-AzureADMSAdministrativeUnit |
Removes an administrative unit. |
Remove-AzureADMSAdministrativeUnitMember |
Removes an administrative unit member. |
Remove-AzureADMSScopedRoleMembership |
Removes a scoped role membership. |
Remove-AzureADScopedRoleMembership |
Removes a scoped role membership. |
Set-AzureADAdministrativeUnit |
Updates an administrative unit. |
Set-AzureADMSAdministrativeUnit |
Updates an administrative unit. |
애플리케이션
Add-AzureADMSApplicationOwner |
Adds an owner for an application object. |
Get-AzureADMSApplication |
Retrieves the list of applications within the organization. |
Get-AzureADMSApplicationExtensionProperty |
Retrieves the list of extension properties on an application object. |
Get-AzureADMSApplicationOwner |
Retrieves the list of owners for an application object. |
New-AzureADMSApplication |
Creates (registers) a new application object. |
New-AzureADMSApplicationExtensionProperty |
Creates an extension property on an application object. |
New-AzureADMSApplicationKey |
Adds a new key to an application. |
New-AzureADMSApplicationPassword |
Adds a strong password to an application. |
Remove-AzureADMSApplication |
Deletes an application object. |
Remove-AzureADMSApplicationExtensionProperty |
Deletes an extension property from an application object. |
Remove-AzureADMSApplicationKey |
Removes a key from an application. |
Remove-AzureADMSApplicationOwner |
Removes an owner from an application object. |
Remove-AzureADMSApplicationPassword |
Remove a password from an application. |
Set-AzureADMSApplication |
Updates the properties of an application object. |
Set-AzureADMSApplicationLogo |
Sets the logo for an application object. |
애플리케이션 프록시 애플리케이션 관리
Get-AzureADApplicationProxyApplication |
The Get-AzureADApplicationProxyApplication cmdlet retrieves an application configured for Application Proxy in Azure Active Directory. |
Get-AzureADApplicationProxyApplicationConnectorGroup |
The Get-AzureADApplicationProxyApplicationConnectorGroup cmdlet retrieves the connector group assigned for a specific application. |
New-AzureADApplicationProxyApplication |
The New-AzureADApplicationProxyApplication cmdlet creates a new application configured for Application Proxy in Azure Active Directory. |
Remove-AzureADApplicationProxyApplication |
Deletes an Application Proxy application. |
Remove-AzureADApplicationProxyApplicationConnectorGroup |
The Remove-AzureADApplicationProxyApplicationConnectorGroup cmdlet sets the connector group assigned for the specified application to 'Default' and removes the current assignment. |
Set-AzureADApplicationProxyApplication |
The Set-AzureADApplicationProxyApplication allows you to modify and set configurations for an application in Azure Active Directory configured to use ApplicationProxy. |
Set-AzureADApplicationProxyApplicationCustomDomainCertificate |
The Set-AzureADApplicationProxyApplicationCustomDomainCertificate cmdlet assigns a certificate to an application configured for Application Proxy in Azure Active Directory (AD). This will upload the certificate and allow the application to use Custom Domains. |
Set-AzureADApplicationProxyApplicationSingleSignOn |
The Set-AzureADApplicationProxyApplicationSingleSignOn cmdlet allows you to set and modify single sign-on (SSO) settings for an application configured for Application Proxy in Azure Active Directory. |
애플리케이션 프록시 커넥터 관리
Get-AzureADApplicationProxyConnector |
The Get-AzureADApplicationProxyApplicationConnector cmdlet a list of all connectors, or if specified, details of a specific connector. |
Get-AzureADApplicationProxyConnectorGroup |
The Get-AzureADApplicationProxyConnectorGroup cmdlet retrieves a list of all connector groups, or if specified, details of a specific connector group. |
Get-AzureADApplicationProxyConnectorGroupMembers |
The Get-AzureADApplicationProxyConnectorGroupMembers gets all the Application Proxy connectors associated with the given connector group. |
Get-AzureADApplicationProxyConnectorMemberOf |
The Get-AzureADApplicationProxyConnectorMemberOf command gets the ConnectorGroup that the specified Connector is a member of. |
New-AzureADApplicationProxyConnectorGroup |
The New-AzureADApplicationProxyConnectorGroup cmdlet creates a new Application Proxy Connector group. |
Remove-AzureADApplicationProxyConnectorGroup |
The Remove-AzureADApplicationProxyApplicationConnectorGroup cmdlet deletes an Application Proxy Connector group. |
Set-AzureADApplicationProxyApplicationConnectorGroup |
The Set-AzureADApplicationProxyApplicationConnectorGroup cmdlet assigns the given connector group to a specified application. |
Set-AzureADApplicationProxyConnector |
The Set-AzureADApplicationProxyConnector cmdlet allows reassignment of the connector to another connector group. |
Set-AzureADApplicationProxyConnectorGroup |
The Set-AzureADApplicationProxyConnectorGroup cmdlet allows you to change the name of a given Application Proxy connector group. |
애플리케이션
Add-AzureADApplicationOwner |
Adds an owner to an application. |
Add-AzureADApplicationPolicy |
The Add-AzureADApplicationPolicy cmdlet is not available at this time. |
Get-AzureADApplication |
Gets an application. |
Get-AzureADApplicationExtensionProperty |
Gets application extension properties. |
Get-AzureADApplicationKeyCredential |
Gets the key credentials for an application. |
Get-AzureADApplicationLogo |
Retrieve the logo of an application |
Get-AzureADApplicationOwner |
Gets the owner of an application. |
Get-AzureADApplicationPasswordCredential |
Gets the password credential for an application. |
Get-AzureADApplicationPolicy |
Gets an application policy. |
Get-AzureADApplicationServiceEndpoint |
Retrieve the service endpoint of an application |
Get-AzureADDeletedApplication |
Retrieves the list of previously deleted applications |
New-AzureADApplication |
Creates an application. |
New-AzureADApplicationExtensionProperty |
Creates an application extension property. |
New-AzureADApplicationKeyCredential |
Creates a key credential for an application. |
New-AzureADApplicationPasswordCredential |
Creates a password credential for an application. |
Remove-AzureADApplication |
Delete an application by objectId. |
Remove-AzureADApplicationExtensionProperty |
Removes an application extension property. |
Remove-AzureADApplicationKeyCredential |
Removes a key credential from an application. |
Remove-AzureADApplicationOwner |
Removes an owner from an application. |
Remove-AzureADApplicationPasswordCredential |
Removes a password credential from an application. |
Remove-AzureADMSApplicationVerifiedPublisher |
Removes the verified publisher from an application. |
Set-AzureADApplication |
Updates an application. |
Set-AzureADApplicationLogo |
Sets the logo for an Application |
Set-AzureADMSApplicationVerifiedPublisher |
Sets the verified publisher of an application to a verified Microsoft Partner Network (MPN) identifier. |
AzureADPreview
Add-AzureADMSServicePrincipalDelegatedPermissionClassification |
Add a classification for a delegated permission. |
Get-AzureADApplicationSignInDetailedSummary |
Get detailed sign in summaries |
Get-AzureADApplicationSignInSummary |
Get signin summary by last number of days |
Get-AzureADExternalDomainFederation |
Get an externalDomainFederation by external domain name. |
Get-AzureADMSApplicationTemplate |
Retrieve a list of applicationTemplate objects |
Get-AzureADMSConditionalAccessPolicy |
Gets an Azure Active Directory conditional access policy. |
Get-AzureADMSNamedLocationPolicy |
Gets an Azure Active Directory named location policy. |
Get-AzureADMSPasswordSingleSignOnCredential |
Gets the password SSO credentials |
Get-AzureADMSPermissionGrantConditionSet |
Get an Azure Active Directory permission grant condition set by id. |
Get-AzureADMSPermissionGrantPolicy |
Gets a permission grant policy. |
Get-AzureADMSServicePrincipalDelegatedPermissionClassification |
Retreive the delegated permission classification objects on a service principal. |
Get-AzureADPrivilegedRole |
{{ Fill in the Synopsis }} |
Get-AzureADPrivilegedRoleAssignment |
{{ Fill in the Synopsis }} |
Get-CrossCloudVerificationCode |
{{ Fill in the Synopsis }} |
New-AzureADExternalDomainFederation |
Create a new externalDomainFederation in Azure Active Directory |
New-AzureADMSApplicationFromApplicationTemplate |
Instantiates an application |
New-AzureADMSConditionalAccessPolicy |
Creates a new conditional access policy in Azure Active Directory. |
New-AzureADMSNamedLocationPolicy |
Creates a new named location policy in Azure Active Directory. |
New-AzureADMSPasswordSingleSignOnCredential |
Creates the password SSO credentials |
New-AzureADMSPermissionGrantConditionSet |
Create a new Azure Active Directory permission grant condition set in a given policy. |
New-AzureADMSPermissionGrantPolicy |
Creates a permission grant policy. |
New-AzureADPrivilegedRoleAssignment |
{{ Fill in the Synopsis }} |
Remove-AzureADApplicationPolicy |
Removes an application policy. |
Remove-AzureADDeletedApplication |
{{ Fill in the Synopsis }} |
Remove-AzureADExternalDomainFederation |
Delete an externalDomainFederation by external domain name. |
Remove-AzureADMSConditionalAccessPolicy |
Deletes a conditional access policy in Azure Active Directory by Id. |
Remove-AzureADMSNamedLocationPolicy |
Deletes an Azure Active Directory named location policy by PolicyId. |
Remove-AzureADMSPasswordSingleSignOnCredential |
Removes the password SSO credentials |
Remove-AzureADMSPermissionGrantConditionSet |
Delete an Azure Active Directory permission grant condition set by id |
Remove-AzureADMSPermissionGrantPolicy |
Removes a permission grant policy. |
Remove-AzureADMSServicePrincipalDelegatedPermissionClassification |
Remove delegated permission classification. |
Remove-AzureADServicePrincipalPolicy | |
Set-AzureADMSConditionalAccessPolicy |
Updates a conditional access policy in Azure Active Directory by Id. |
Set-AzureADMSNamedLocationPolicy |
Updates a named location policy in Azure Active Directory by PolicyId. |
Set-AzureADMSPasswordSingleSignOnCredential |
Sets the password SSO credentials |
Set-AzureADMSPermissionGrantConditionSet |
Update an existing Azure Active Directory permission grant condition set. |
Set-AzureADMSPermissionGrantPolicy |
Updates a permission grant policy. |
인증 기관
Get-AzureADTrustedCertificateAuthority |
Gets the trusted certificate authority. |
New-AzureADTrustedCertificateAuthority |
Creates a trusted certificate authority. |
Remove-AzureADTrustedCertificateAuthority |
Removes a trusted certificate authority. |
Set-AzureADTrustedCertificateAuthority |
Updates a trusted certificate authority. |
디렉터리에 연결
Connect-AzureAD |
Connects with an authenticated account to use Active Directory cmdlet requests. |
Disconnect-AzureAD |
Disconnects the current session from an Azure Active Directory tenant. |
Get-AzureADCurrentSessionInfo |
This cmdlet will return the current session state |
연락처
Get-AzureADContact |
Gets a contact from Azure Active Directory. |
Get-AzureADContactDirectReport |
Get the direct reports for a contact. |
Get-AzureADContactManager |
Gets the manager of a contact. |
Get-AzureADContactMembership |
Get a contact membership. |
Get-AzureADContactThumbnailPhoto |
Retrieves the thumbnail photo of a contact |
Remove-AzureADContact |
Removes a contact. |
Remove-AzureADContactManager |
Removes a contact's manager. |
Select-AzureADGroupIdsContactIsMemberOf |
Get groups in which a contact is a member. |
계약
Get-AzureADContract |
Gets a contract. |
사용자 지정 보안 특성
Add-AzureADMScustomSecurityAttributeDefinitionAllowedValues |
Adds a predefined value for a custom security attribute definition. |
Get-AzureADMSAttributeSet |
Gets a list of attribute sets. |
Get-AzureADMSCustomSecurityAttributeDefinition |
Gets a list of custom security attribute definitions. |
Get-AzureADMSCustomSecurityAttributeDefinitionAllowedValue |
Gets the predefined value for a custom security attribute definition. |
New-AzureADMSAttributeSet |
Adds a new attribute set. |
New-AzureADMSCustomSecurityAttributeDefinition |
Adds a new custom security attribute definition. |
Set-AzureADMSAttributeSet |
Updates an existing attribute set. |
Set-AzureADMSCustomSecurityAttributeDefinition |
Updates an existing custom security attribute definition. |
Set-AzureADMSCustomSecurityAttributeDefinitionAllowedValue |
Updates an existing custom security attribute definition predefined value. |
삭제된 개체
Get-AzureADMSDeletedDirectoryObject |
This cmdlet is used to retrieve a soft deleted directory object from the directory |
Get-AzureADMSDeletedGroup |
This cmdlet is used to retrieve the soft deleted groups in a directory. |
Remove-AzureADMSDeletedDirectoryObject |
This cmdlet is used to permanently delete a previously deleted directory object |
Restore-AzureADDeletedApplication |
Restores a previously deleted application |
Restore-AzureADMSDeletedDirectoryObject |
This cmdlet is used to restore a previously deleted object. |
디바이스
Add-AzureADDeviceRegisteredOwner |
Adds a registered owner for a device. |
Add-AzureADDeviceRegisteredUser |
Adds a registered user for a device. |
Get-AzureADDevice |
Gets a device from Active Directory. |
Get-AzureADDeviceConfiguration |
This cmdlet retrieves the device configuration object |
Get-AzureADDeviceRegisteredOwner |
Gets the registered owner of a device. |
Get-AzureADDeviceRegisteredUser |
Gets a registered user. |
New-AzureADDevice |
Creates a device. |
Remove-AzureADDevice |
Deletes a device. |
Remove-AzureADDeviceRegisteredOwner |
Removes the registered owner of a device. |
Remove-AzureADDeviceRegisteredUser |
Removes a registered user from a device. |
Set-AzureADDevice |
Updates a device. |
디렉터리
Get-AzureADSubscribedSku |
Gets subscribed SKUs to Microsoft services. |
Get-AzureADTenantDetail |
Gets the details of a tenant. |
Set-AzureADTenantDetail |
Set contact details for a tenant |
디렉터리 감사
Get-AzureADAuditDirectoryLogs |
Get directory audit logs |
Get-AzureADAuditSignInLogs |
Get audit logs of sign ins. |
디렉터리 개체
Get-AzureADObjectByObjectId |
Retrieves the object(s) specified by the objectIds parameter |
디렉터리 역할
Add-AzureADDirectoryRoleMember |
Adds a member to a directory role. |
Enable-AzureADDirectoryRole |
Activates an existing directory role in Azure Active Directory. |
Get-AzureADDirectoryRole |
Gets a directory role. |
Get-AzureADDirectoryRoleMember |
Gets members of a directory role. |
Get-AzureADDirectoryRoleTemplate |
Gets directory role templates. |
Remove-AzureADDirectoryRoleMember |
Removes a member of a directory role. |
디렉터리 설정
Get-AzureADDirectorySetting |
Gets a directory setting. |
Get-AzureADDirectorySettingTemplate |
Gets a directory setting template. |
New-AzureADDirectorySetting |
Creates a directory settings object. |
Remove-AzureADDirectorySetting |
Deletes a directory setting in Azure Active Directory. |
Set-AzureADDirectorySetting |
Updates a directory setting in Azure Active Directory. |
도메인
Confirm-AzureADDomain |
Validate the ownership of a domain. |
Get-AzureADDomain |
Gets a domain. |
Get-AzureADDomainNameReference |
This cmdlet retrieves the objects that are referenced by a given domain name |
Get-AzureADDomainServiceConfigurationRecord |
Gets the domain's service configuration records from the serviceConfigurationRecords navigation property. |
Get-AzureADDomainVerificationDnsRecord |
Retrieve the domain verification DNS record for a domain |
New-AzureADDomain |
Creates a domain. |
Remove-AzureADDomain |
Removes a domain. |
Set-AzureADDomain |
Updates a domain. |
Extension Properties
Get-AzureADExtensionProperty |
Gets extension properties registered with Azure AD. |
그룹
Add-AzureADGroupMember |
Adds a member to a group. |
Add-AzureADGroupOwner |
Adds an owner to a group. |
Add-AzureADMSLifecyclePolicyGroup |
Adds a group to a lifecycle policy |
Get-AzureADGroup |
Gets a group. |
Get-AzureADGroupAppRoleAssignment |
Gets a group application role assignment. |
Get-AzureADGroupMember |
Gets a member of a group. |
Get-AzureADGroupOwner |
Gets an owner of a group. |
Get-AzureADMSGroup |
Gets information about groups in Azure AD. |
Get-AzureADMSGroupLifecyclePolicy |
Retrieves the properties and relationships of a groupLifecyclePolicies object in Azure Active Directory |
Get-AzureADMSLifecyclePolicyGroup |
Retrieves the lifecycle policy object to which a group belongs. |
New-AzureADGroup |
Creates a group. |
New-AzureADGroupAppRoleAssignment |
Assign a group of users to an application role. |
New-AzureADMSGroup |
Creates an Azure AD group. |
New-AzureADMSGroupLifecyclePolicy |
Creates a new groupLifecyclePolicy |
Remove-AzureADGroup |
Removes a group. |
Remove-AzureADGroupAppRoleAssignment |
Delete a group application role assignment. |
Remove-AzureADGroupMember |
Removes a member from a group. |
Remove-AzureADGroupOwner |
Removes an owner from a group. |
Remove-AzureADMSGroup |
Removes an Azure AD group. |
Remove-AzureADMSGroupLifecyclePolicy |
Deletes a groupLifecyclePolicies object |
Remove-AzureADMSLifecyclePolicyGroup |
Removes a group from a lifecycle policy |
Reset-AzureADMSLifeCycleGroup |
Renews a group by updating the RenewedDateTime property on a group to the current DateTime. |
Select-AzureADGroupIdsGroupIsMemberOf |
Gets group IDs that a group is a member of. |
Set-AzureADGroup |
Updates a specific group in Azure Active Directory |
Set-AzureADMSGroup |
{{Fill in the Synopsis}} |
Set-AzureADMSGroupLifecyclePolicy |
Updates a specific group Lifecycle Policy in Azure Active Directory |
ID 공급자 관리
Get-AzureADMSIdentityProvider |
This cmdlet is used to retrieve the configured identity providers in the directory. |
New-AzureADMSIdentityProvider |
This cmdlet is used to configure a new identity provider in the directory. |
Remove-AzureADMSIdentityProvider |
This cmdlet is used to delete an identity provider in the directory. |
Set-AzureADMSIdentityProvider |
This cmdlet is used to update the properties of an existing identity provider configured in the directory. |
OAuth2
Get-AzureADOAuth2PermissionGrant |
Gets OAuth2PermissionGrant entities. |
Remove-AzureADOAuth2PermissionGrant |
Removes an oAuth2PermissionGrant. |
개체 설정
Get-AzureADObjectSetting |
Gets an object setting. |
New-AzureADObjectSetting |
Creates a settings object. |
Remove-AzureADObjectSetting |
Deletes settings in Azure Active Directory. |
Set-AzureADObjectSetting |
Updates object settings. |
정책
Get-AzureADMSAuthorizationPolicy |
Gets an authorization policy. |
Get-AzureADPolicy |
Gets a policy. |
Get-AzureADPolicyAppliedObject | |
New-AzureADPolicy |
Creates a policy. |
Remove-AzureADPolicy |
Removes a policy. |
Set-AzureADMSAuthorizationPolicy |
Updates an authorization policy. |
Set-AzureADPolicy |
Updates a policy. |
권한 있는 역할 관리
Add-AzureADMSPrivilegedResource |
Use this API to add a new azure AD MS privileged resource. |
Close-AzureADMSPrivilegedRoleAssignmentRequest |
Cancel a AzureADMSPrivilegedRoleAssignmentRequest |
Get-AzureADMSPrivilegedResource |
Get azure AD MS privileged resource |
Get-AzureADMSPrivilegedRoleAssignment |
Get role assignments for a specific provider and resource |
Get-AzureADMSPrivilegedRoleAssignmentRequest |
Get role assignment request for a specific resource |
Get-AzureADMSPrivilegedRoleDefinition |
Get role definitions |
Get-AzureADMSPrivilegedRoleSetting |
Get role settings |
Open-AzureADMSPrivilegedRoleAssignmentRequest |
Create a role assignment request |
Set-AzureADMSPrivilegedRoleAssignmentRequest |
Update a role assignment request |
Set-AzureADMSPrivilegedRoleSetting |
Update role setting |
역할 관리
Get-AzureADMSRoleAssignment |
Gets information about role assignments in Azure AD. |
Get-AzureADMSRoleDefinition |
Gets information about role definitions in Azure AD. |
New-AzureADMSRoleAssignment |
Creates an Azure AD role assignment. |
New-AzureADMSRoleDefinition |
Creates an Azure AD role definition. |
Remove-AzureADMSRoleAssignment |
Removes a role assignment. |
Remove-AzureADMSRoleDefinition |
Removes a role definition. |
Set-AzureADMSRoleDefinition |
Update a role definition. |
서비스 주체
Add-AzureADServicePrincipalOwner |
Adds an owner to a service principal. |
Add-AzureADServicePrincipalPolicy |
Adds a service principal policy. |
Get-AzureADMSServicePrincipal |
Gets a service principal. |
Get-AzureADServiceAppRoleAssignedTo |
{{Fill in the Synopsis}} |
Get-AzureADServiceAppRoleAssignment |
Gets a service principal application role assignment. |
Get-AzureADServicePrincipal |
Gets a service principal. |
Get-AzureADServicePrincipalCreatedObject |
Get objects created by a service principal. |
Get-AzureADServicePrincipalKeyCredential |
Get key credentials for a service principal. |
Get-AzureADServicePrincipalMembership |
Get a service principal membership. |
Get-AzureADServicePrincipalOAuth2PermissionGrant |
Gets an oAuth2PermissionGrant object. |
Get-AzureADServicePrincipalOwnedObject |
Gets an object owned by a service principal. |
Get-AzureADServicePrincipalOwner |
Get the owner of a service principal. |
Get-AzureADServicePrincipalPasswordCredential |
Get credentials for a service principal. |
Get-AzureADServicePrincipalPolicy | |
New-AzureADServiceAppRoleAssignment |
Assigns a service principal to an application role. |
New-AzureADServicePrincipal |
Creates a service principal. |
New-AzureADServicePrincipalKeyCredential |
Create a new key credential for a service principal |
New-AzureADServicePrincipalPasswordCredential |
Creates a password credential for a service principal. |
Remove-AzureADServiceAppRoleAssignment |
Removes a service principal application role assignment. |
Remove-AzureADServicePrincipal |
Removes a service principal. |
Remove-AzureADServicePrincipalKeyCredential |
Removes a key credential from a service principal. |
Remove-AzureADServicePrincipalOwner |
Removes an owner from a service principal. |
Remove-AzureADServicePrincipalPasswordCredential |
Removes a password credential from a service principal. |
Select-AzureADGroupIdsServicePrincipalIsMemberOf |
Selects the groups in which a service principal is a member. |
Set-AzureADMSServicePrincipal |
Updates a service principal. |
Set-AzureADServicePrincipal |
Updates a service principal. |
단계적 롤아웃
Add-AzureADMSFeatureRolloutPolicyDirectoryObject |
Allows an admin to add a group to the cloud authentication roll-out policy in Azure AD. Users in this group will start authenticating to the cloud per policy. |
Get-AzureADMSFeatureRolloutPolicy |
Gets the policy for cloud authentication roll-out in Azure Active Directory. |
New-AzureADMSFeatureRolloutPolicy |
Allows an admin to create the policy for cloud authentication roll-out in Azure AD. |
Remove-AzureADMSFeatureRolloutPolicy |
Allows an admin to remove the policy for cloud authentication roll-out in Azure AD. |
Remove-AzureADMSFeatureRolloutPolicyDirectoryObject |
Allows an admin to remove a group from the cloud authentication rollout policy in Azure AD. Users in this group will revert back to the authenticating using the global policy (in most cases this will be federation). |
Set-AzureADMSFeatureRolloutPolicy |
Allows an admin to modify the policy for cloud authentication roll-out in Azure AD. |
트러스트 프레임워크 정책 관리
Get-AzureADMSTrustFrameworkPolicy |
This cmdlet is used to retrieve the created trust framework policies (custom policies) in the directory. |
New-AzureADMSTrustFrameworkPolicy |
This cmdlet is used to create a trust framework policy (custom policy) in the directory. |
Remove-AzureADMSTrustFrameworkPolicy |
This cmdlet is used to delete a trust framework policy (custom policy) in the directory. |
Set-AzureADMSTrustFrameworkPolicy |
This cmdlet is used to update a trust framework policy (custom policy) in the directory. |
사용자
Get-AzureADMSUser |
Gets a user. |
Get-AzureADUser |
Gets a user. |
Get-AzureADUserAppRoleAssignment |
Get a user application role assignment. |
Get-AzureADUserCreatedObject |
Get objects created by the user. |
Get-AzureADUserDirectReport |
Get the user's direct reports. |
Get-AzureADUserExtension |
Gets a user extension. |
Get-AzureADUserLicenseDetail |
Retrieves license details for a user |
Get-AzureADUserManager |
Gets the manager of a user. |
Get-AzureADUserMembership |
Get user memberships. |
Get-AzureADUserOAuth2PermissionGrant |
Gets an oAuth2PermissionGrant object. |
Get-AzureADUserOwnedDevice |
Get registered devices owned by a user. |
Get-AzureADUserOwnedObject |
Get objects owned by a user. |
Get-AzureADUserRegisteredDevice |
Get devices registered by a user. |
Get-AzureADUserThumbnailPhoto |
Retrieve the thumbnail photo of a user |
New-AzureADMSInvitation |
This cmdlet is used to invite a new external user to your directory. |
New-AzureADUser |
Creates an AD user. |
New-AzureADUserAppRoleAssignment |
Assigns a user to an application role. |
Remove-AzureADUser |
Removes a user. |
Remove-AzureADUserAppRoleAssignment |
Removes a user application role assignment. |
Remove-AzureADUserExtension |
Removes a user extension. |
Remove-AzureADUserManager |
Removes a user's manager. |
Revoke-AzureADSignedInUserAllRefreshToken |
Invalidates the refresh tokens issued to applications for the current user. |
Revoke-AzureADUserAllRefreshToken |
Invalidates the refresh tokens issued to applications for a user. |
Select-AzureADGroupIdsUserIsMemberOf |
Selects the groups that a user is a member of. |
Set-AzureADMSUser |
Updates a user. |
Set-AzureADUser |
Updates a user. |
Set-AzureADUserExtension |
Sets a user extension. |
Set-AzureADUserLicense |
Adds or removes licenses for a Microsoft online service to the list of assigned licenses for a user. Note The Set-AzureADUserLicense cmdlet is deprecated. Learn how to assign licenses with Microsoft Graph PowerShell. For more info, see the Assign License Microsoft Graph API. |
Set-AzureADUserManager |
Updates a user's manager. |
Set-AzureADUserPassword |
Sets the password of a user. |
Set-AzureADUserThumbnailPhoto |
Set the thumbnail photo for a user |
Update-AzureADSignedInUserPassword |
Updates the password for the signed-in user. |