Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
This article provides migration details from Set-AzureADUser command to Microsoft Graph PowerShell.
Summary
- Azure AD Command: Set-AzureADUser
- Azure AD Module: AzureAD
- Microsoft Graph Command: Update-MgUser (Community Examples)
- Graph Module: Microsoft.Graph.Users
- Graph Endpoint: PATCH /users/{user-id}
Permissions
| Permission type | Least privileged permissions | Higher privileged permissions |
|---|---|---|
| Delegated (work or school account) | User.ReadWrite | User.ManageIdentities.All, User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All |
| Delegated (personal Microsoft account) | User.ReadWrite | Not available. |
| Application | User.ManageIdentities.All | User.EnableDisableAccount.All, User.ReadWrite.All, Directory.ReadWrite.All |
View more details on permissions.
Note
- To update sensitive user properties, such as accountEnabled, mobilePhone, and otherMails for users with privileged administrator roles:
- In delegated scenarios, the app must be assigned the Directory.AccessAsUser.All delegated permission and the calling user must have a higher privileged administrator role as indicated in Who can perform sensitive actions.
- In app-only scenarios, the app must be assigned a higher privileged administrator role as indicated in Who can perform sensitive actions.
- Your personal Microsoft account must be tied to a Microsoft Entra tenant to update your profile with the User.ReadWrite delegated permission on a personal Microsoft account.
- Updating the identities property requires the User.ManageIdentities.All permission. Also, adding a B2C local account to an existing user object is not allowed, unless the user object already contains a local account identity.
Property Mapping
| Azure AD Name | Microsoft Graph Name |
|---|---|
| AccountEnabled | AccountEnabled |
| AgeGroup | AgeGroup |
| City | City |
| CompanyName | CompanyName |
| ConsentProvidedForMinor | ConsentProvidedForMinor |
| Country | Country |
| CreationType | CreationType |
| Department | Department |
| DisplayName | DisplayName |
| ExtensionProperty | |
| FacsimileTelephoneNumber | |
| GivenName | GivenName |
| ImmutableId | |
| IsCompromised | |
| JobTitle | JobTitle |
| MailNickName | MailNickname |
| Mobile | |
| ObjectId | |
| OtherMails | OtherMails |
| PasswordPolicies | PasswordPolicies |
| PasswordProfile | PasswordProfile |
| PhysicalDeliveryOfficeName | |
| PostalCode | PostalCode |
| PreferredLanguage | PreferredLanguage |
| ShowInAddressList | ShowInAddressList |
| SignInNames | |
| State | State |
| StreetAddress | StreetAddress |
| Surname | Surname |
| TelephoneNumber | |
| UsageLocation | UsageLocation |
| UserPrincipalName | UserPrincipalName |
| UserState | |
| UserStateChangedOn | |
| UserType | UserType |