Edit

Share via

Get-EntraGroupAppRoleAssignment

Module:
Microsoft.Entra Module v1.1

Gets a group application role assignment.

Syntax

Default (Default) 

Get-EntraGroupAppRoleAssignment

    -GroupId <String>
    [-All]
    [-Top <Int32>]
    [-Property <String[]>]
    [<CommonParameters>]

Description

The Get-EntraGroupAppRoleAssignment cmdlet gets a group application role assignment in Microsoft Entra ID. Specify the GroupId parameter to get a group application role assignment.

Examples

Example 1: Retrieve application role assignments of a group

Connect-Entra -Scopes 'Directory.Read.All'
$group = Get-EntraGroup -SearchString 'Contoso marketing'
Get-EntraGroupAppRoleAssignment -GroupId $group.Id

ObjectId                                    ResourceDisplayName                 PrincipalDisplayName
--------                                    -------------------                 --------------------
MSVrBV4APk--eAGnHqMKBLflsQG3rU1EmDFKvgra41I Microsoft Device Management Checkin Ask HR
MSVrBV4APk--eAGnHqMKBExhQK4StEFHidLvUymzo4I ProvisioningPowerBi                 Ask HR
MSVrBV4APk--eAGnHqMKBDtEqPRvu8xLqWHDSXUhoTE M365 License Manager                Ask HR

This example retrieves the application role assignments of a group.

  • -GroupId parameter specifies the ID of a group in Microsoft Entra ID.

Example 2: Retrieve all application role assignments of a group

Connect-Entra -Scopes 'Directory.Read.All'
$group = Get-EntraGroup -SearchString 'Contoso marketing'
Get-EntraGroupAppRoleAssignment -GroupId $group.Id -All

ObjectId                                    ResourceDisplayName                 PrincipalDisplayName
--------                                    -------------------                 --------------------
MSVrBV4APk--eAGnHqMKBLflsQG3rU1EmDFKvgra41I Microsoft Device Management Checkin Ask HR
MSVrBV4APk--eAGnHqMKBExhQK4StEFHidLvUymzo4I ProvisioningPowerBi                 Ask HR
MSVrBV4APk--eAGnHqMKBDtEqPRvu8xLqWHDSXUhoTE M365 License Manager                Ask HR

This example retrieves all application role assignments of the specified group.

  • -GroupId parameter specifies the ID of a group in Microsoft Entra ID.

Example 3: Retrieve top two application role assignments of a group

Connect-Entra -Scopes 'Directory.Read.All'
$group = Get-EntraGroup -SearchString 'Contoso marketing'
Get-EntraGroupAppRoleAssignment -GroupId $group.Id -Top 2

ObjectId                                    ResourceDisplayName                 PrincipalDisplayName
--------                                    -------------------                 --------------------
MSVrBV4APk--eAGnHqMKBLflsQG3rU1EmDFKvgra41I Microsoft Device Management Checkin Ask HR
MSVrBV4APk--eAGnHqMKBExhQK4StEFHidLvUymzo4I ProvisioningPowerBi                 Ask HR

This example retrieves top two application role assignments of the specified group. You can use -Limit as an alias for -Top.

  • -GroupId parameter specifies the ID of a group in Microsoft Entra ID.

Parameters

-All

List all pages.

Parameter properties

Type:System.Management.Automation.SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-GroupId

Specifies the ID of a group in Microsoft Entra ID.

Parameter properties

Type:System.String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:ObjectId

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:True
Value from pipeline by property name:True
Value from remaining arguments:False

-Property

Specifies properties to be returned

Parameter properties

Type:

System.String[]

Default value:None
Supports wildcards:False
DontShow:False
Aliases:Select

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Top

Specifies the maximum number of records to return.

Parameter properties

Type:System.Int32
Default value:None
Supports wildcards:False
DontShow:False
Aliases:Limit

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:True
Value from pipeline by property name:True
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.