Set-AzureADMSAuthorizationPolicy

This article provides migration details from Set-AzureADMSAuthorizationPolicy command to Microsoft Graph PowerShell.

Summary

• Azure AD Command: Set-AzureADMSAuthorizationPolicy
• Azure AD Module: AzureAD
• Microsoft Graph Command: Update-MgPolicyAuthorizationPolicy (Community Examples)
• Graph Module: Microsoft.Graph.Identity.SignIns
• Graph Endpoint: PATCH /policies/authorizationPolicy | /policies/authorizationPolicy/{authorizationPolicy-id}

Permissions

Permission type	Least privileged permissions	Higher privileged permissions
Delegated (work or school account)	Policy.ReadWrite.Authorization	Not available.
Delegated (personal Microsoft account)	Not supported.	Not supported.
Application	Policy.ReadWrite.Authorization	Not available.

Property Mapping

Azure AD Name	Microsoft Graph Name
AllowedToSignUpEmailBasedSubscriptions	AllowedToSignUpEmailBasedSubscriptions
AllowedToUseSSPR	AllowedToUseSSPR
AllowEmailVerifiedUsersToJoinOrganization	AllowEmailVerifiedUsersToJoinOrganization
BlockMsolPowerShell	BlockMsolPowerShell
DefaultUserRolePermissions	DefaultUserRolePermissions
DefaultUserRolePermissions	DefaultUserRolePermissions
DisplayName	DisplayName
Description	Description