Edit

Share via

Add-EntraBetaAdministrativeUnitMember

  • Reference
Module:
Microsoft.Entra.Beta

Adds an administrative unit member.

Syntax

Add-EntraBetaAdministrativeUnitMember
   -MemberId <String>
   -AdministrativeUnitId <String>
   [<CommonParameters>]

Description

The Add-EntraBetaAdministrativeUnitMember cmdlet adds a Microsoft Entra ID administrative unit member.

Administrative units enable more granular management of permissions and access, particularly in large organizations or where administrative responsibilities are divided across departments or regions.

In delegated scenarios, adding a user, group, or device to an administrative unit requires:

  • Privileged Role Administrator

Examples

Example 1: Add an administrative unit member

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraBetaAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$user = Get-EntraBetaUser -UserId 'SawyerM@contoso.com'
Add-EntraBetaAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $user.Id

This example demonstrates adding an administrative unit member. Use Get-EntraBetaAdministrativeUnit to find the administrative unit ID and Get-EntraBetaUser to find the user ID.

  • AdministrativeUnitId parameter specifies the ID of an administrative unit.
  • MemberId parameter specifies the ID of the user you want to add as a member of the administrative unit.

Example 2: Add a group to an administrative unit

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraBetaAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$group = Get-EntraBetaGroup -SearchString 'Sales and Marketing'
Add-EntraBetaAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $group.Id

This example demonstrates adding an administrative unit member. Use Get-EntraBetaAdministrativeUnit to find the administrative unit ID and Get-EntraBetaGroup to find the group ID.

  • AdministrativeUnitId parameter specifies the ID of an administrative unit.
  • MemberId parameter specifies the ID of the group you want to add as a member of the administrative unit.

Example 3: Add a device to an administrative unit

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraBetaAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$device = Get-EntraBetaDevice -SearchString 'ContosoDesktop01'
Add-EntraBetaAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $device.Id

This example demonstrates adding an administrative unit member. Use Get-EntraBetaAdministrativeUnit to find the administrative unit ID and Get-EntraBetaDevice to find the device ID.

  • AdministrativeUnitId parameter specifies the ID of an administrative unit.
  • MemberId parameter specifies the ID of the device you want to add as a member of the administrative unit.

Parameters

-AdministrativeUnitId

Specifies the ID of a Microsoft Entra ID administrative unit.

Type:System.String
Aliases:ObjectId
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-MemberId

Specifies the unique ID of the specific Microsoft Entra ID object that is assigned as owner/manager/member.

Type:System.String
Aliases:RefObjectId
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False