Remove-AzureADMSPermissionGrantConditionSet

This article provides migration details from Remove-AzureADMSPermissionGrantConditionSet command to Microsoft Graph PowerShell.

Summary

• Azure AD Command: Remove-AzureADMSPermissionGrantConditionSet
• Azure AD Module: AzureAD
• Microsoft Graph Command: Remove-MgPolicyPermissionGrantPolicyInclude (Community Examples); Remove-MgPolicyPermissionGrantPolicyExclude (Community Examples)
• Graph Module: Microsoft.Graph.Identity.SignIns
• Graph Endpoint: DELETE /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/excludes/{permissionGrantConditionSet-id} | /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/includes/{permissionGrantConditionSet-id}

Permissions

Permission type	Least privileged permissions	Higher privileged permissions
Delegated (work or school account)	Policy.ReadWrite.PermissionGrant	Not available.
Delegated (personal Microsoft account)	Not supported.	Not supported.
Application	Policy.ReadWrite.PermissionGrant	Not available.

Property Mapping

Azure AD Name	Microsoft Graph Name
ConditionSetType	NA
Id	PermissionGrantConditionSetId
PolicyId	PermissionGrantPolicyId