Edit

Share via

Remove-EntraBetaFeatureRolloutPolicyDirectoryObject

  • Reference
Module:
Microsoft.Entra.Beta

Allows an admin to remove a group from the cloud authentication rollout policy in Microsoft Entra ID.

Syntax

Remove-EntraBetaFeatureRolloutPolicyDirectoryObject
      -DirectoryObjectId <String>
      -FeatureRolloutPolicyId <String>
      [<CommonParameters>]

Description

An admin uses the Remove-EntraBetaFeatureRolloutPolicyDirectoryObject cmdlet to remove groups from the cloud authentication roll-out policy.

Users in these groups start authenticating against the global authentication policy (for example, federation). Specify DirectoryObjectId and FeatureRolloutPolicyId parameter to remove groups from the cloud authentication roll-out policy.

Examples

Example 1: Removes a group from the cloud authentication roll-out policy from Microsoft Entra ID

Connect-Entra -Scopes 'Directory.ReadWrite.All'
$policy = Get-EntraFeatureRolloutPolicy -Filter "displayName eq 'MFA Rollout Policy'"
$group = Get-EntraGroup -Filter "displayName eq 'Sales and Marketing'"
Remove-EntraBetaFeatureRolloutPolicyDirectoryObject -FeatureRolloutPolicyId $policy.Id  -DirectoryObjectId $group.Id

This command removes a group from the cloud authentication roll-out policy from Microsoft Entra ID.

  • -FeatureRolloutPolicyId Parameter specifies the ID of the cloud authentication roll-out policy.
  • -DirectoryObjectId parameter specifies the ID of the specific Microsoft Entra ID directory object that assigned to the cloud authentication roll-out policy.

Parameters

-DirectoryObjectId

The unique identifier of the specific Microsoft Entra ID object that assigned to the cloud authentication roll-out policy in Microsoft Entra ID.

Type:System.String
Aliases:ObjectId
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-FeatureRolloutPolicyId

The unique identifier of the cloud authentication roll-out policy in Microsoft Entra ID.

Type:System.String
Aliases:Id
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False