Remove-EntraGroupAppRoleAssignment

Delete a group application role assignment.

Syntax

Remove-EntraGroupAppRoleAssignment
      -AppRoleAssignmentId <String>
      -GroupId <String>[<CommonParameters>]

Description

The Remove-EntraGroupAppRoleAssignment cmdlet removes a group application role assignment from Microsoft Entra ID.

Examples

Example 1: Remove group app role assignment

Connect-Entra -Scopes 'Directory.ReadWrite.All'
$group = Get-EntraGroup -Filter "displayName eq 'Contoso Marketing'"
$appRoleAssignment = Get-EntraGroupAppRoleAssignment -GroupId $group.Id | Where-Object {$_.ResourceDisplayName -eq 'Box'}
Remove-EntraGroupAppRoleAssignment -GroupId $group -AppRoleAssignmentId $appRoleAssignment.Id

This example demonstrates how to remove the specified group application role assignment. GroupId - Specifies the object ID of a group. AppRoleAssignmentId - Specifies the object ID of the group application role assignment.

Parameters

-AppRoleAssignmentId

Specifies the object ID of the group application role assignment.

Type:System.String
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-GroupId

Specifies the object ID of a group in Microsoft Entra ID.

Type:System.String
Aliases:ObjectId
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False