Add-EntraAdministrativeUnitMember

Add-EntraAdministrativeUnitMember

    -MemberId <String>
    -AdministrativeUnitId <String>
    [<CommonParameters>]

The Add-EntraAdministrativeUnitMember cmdlet adds a Microsoft Entra ID administrative unit member.

Administrative units enable more granular management of permissions and access, particularly in large organizations or where administrative responsibilities are divided across departments or regions.

In delegated scenarios, adding a user, group, or device to an administrative unit requires:

• Privileged Role Administrator

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$user = Get-EntraUser -UserId 'SawyerM@contoso.com'
Add-EntraAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $user.Id

This example demonstrates adding an administrative unit member. Use Get-EntraAdministrativeUnit to find the administrative unit ID and Get-EntraUser to find the user ID.

• AdministrativeUnitId parameter specifies the ID of an administrative unit.
• MemberId parameter specifies the ID of the user or group you want to add as a member of the administrative unit.

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$group = Get-EntraGroup -SearchString 'Sales and Marketing'
Add-EntraAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $group.Id

This example demonstrates adding an administrative unit member. Use Get-EntraAdministrativeUnit to find the administrative unit ID and Get-EntraGroup to find the group ID.

• AdministrativeUnitId parameter specifies the ID of an administrative unit.
• MemberId parameter specifies the ID of the user or group you want to add as a member of the administrative unit.

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$device = Get-EntraDevice -SearchString 'ContosoDesktop01'
Add-EntraAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $device.Id

This example demonstrates adding an administrative unit member. Use Get-EntraAdministrativeUnit to find the administrative unit ID and Get-EntraDevice to find the device ID.

• AdministrativeUnitId parameter specifies the ID of an administrative unit.
• MemberId parameter specifies the ID of the device you want to add as a member of the administrative unit.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.