Edit

Share via

Set-EntraAttributeSet

  • Reference
Module:
Microsoft.Graph.Entra

Updates an existing attribute set.

Syntax

Set-EntraAttributeSet
   -AttributeSetId <String>
   [-Description <String>]
   [-MaxAttributesPerSet <Int32>]
   [<CommonParameters>]

Description

The Set-EntraAttributeSet cmdlet updates a Microsoft Entra ID attribute set object specified by its ID. Specify AttributeSetId parameter to Update a Microsoft Entra ID attribute set object.

In delegated scenarios with work or school accounts, the signed-in user must be assigned a supported Microsoft Entra role or a custom role with a supported role permission.

Note: Only the Attribute Definition Administrator role is supported for this operation. Ensure the signed-in user is assigned this role.

You can only update the description and maxAttributesPerSet properties.

Examples

Example 1: Update an attribute set

Connect-Entra -Scopes 'CustomSecAttributeDefinition.ReadWrite.All'
$params = @{
    AttributeSetId = 'Engineering'
    Description = 'Attributes for cloud engineering team'
}
Set-EntraAttributeSet @params

This example update an attribute set.

  • -AttributeSetId parameter specifies the name of the attribute set. You can Get-EntraAttributeSet to get more details.
  • -Description parameter specifies the description for the attribute set.

Example 2: Update an attribute set using MaxAttributesPerSet

Connect-Entra -Scopes 'CustomSecAttributeDefinition.ReadWrite.All'
$params = @{
    AttributeSetId = 'Engineering' 
    MaxAttributesPerSet = 10    
}
Set-EntraAttributeSet @params

This example update an attribute set using MaxAttributesPerSet.

  • -AttributeSetId parameter specifies the name of the attribute set. You can Get-EntraAttributeSet to get more details.
  • -MaxAttributesPerSet parameter specifies the maximum number of custom security attributes.

Parameters

-AttributeSetId

Name of the attribute set. Unique identifier for the attribute set within a tenant. This identifier can be up to 32 characters long and may include Unicode characters. It cannot contain spaces or special characters, and it cannot be changed later. The identifier is case insensitive.

Type:System.String
Aliases:Id
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-Description

Description of the attribute set, up to 128 characters long, including Unicode characters. This description can be changed later.

Type:System.String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MaxAttributesPerSet

Maximum number of custom security attributes that can be defined in this attribute set. The default value is null. If not specified, the administrator can add up to 500 active attributes per tenant. This setting can be changed later.

Type:System.Int32
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

System.String

Outputs

System.Object