Get-EntraAdministrativeUnitMember

Module:

Microsoft.Entra

Gets a member of an administrative unit.

Syntax

Get-EntraAdministrativeUnitMember
   -AdministrativeUnitId <String>
   [-All]
   [-Top <Int32>]
   [-Property <String[]>]
   [<CommonParameters>]

Description

The Get-EntraAdministrativeUnitMember cmdlet gets a member of a Microsoft Entra ID administrative unit. Specify AdministrativeUnitId parameters to retrieve an administrative unit member.

In delegated scenarios with work or school accounts, the signed-in user must either be a member user or be assigned a supported Microsoft Entra role, or a custom role with the necessary permissions. The following least privileged roles are supported for this operation:

• Directory Readers: Read basic properties on administrative units
• Global Reader: Read all properties of administrative units, including members
• Privileged Role Administrator: Create and manage administrative units (including members)

Examples

Example 1: Get an administrative unit member by AdministrativeUnitId

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
Get-EntraAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id |
Select-Object Id, DisplayName, '@odata.type', createdDateTime

id                                   DisplayName         @odata.type              CreatedDateTime
--                                   -----------         -----------              ---------------
bbbbbbbb-1111-2222-3333-cccccccccccc Alex Wilber        #microsoft.graph.user    10/7/2024 12:31:51 AM
cccccccc-2222-3333-4444-dddddddddddd Adele Miller      #microsoft.graph.user    10/7/2024 12:32:17 AM
dddddddd-3333-4444-5555-eeeeeeeeeeee Sales and Marketing #microsoft.graph.group  10/7/2024 12:43:47 AM
ffffffff-5555-6666-7777-aaaaaaaaaaaa Contoso Global     #microsoft.graph.group   10/27/2024 6:48:09 AM

This example returns the list of administrative unit members from specified administrative unit AdministrativeUnitId.

• -AdministrativeUnitId parameter specifies the ID of an administrative unit.

Example 2: Get all administrative unit members by AdministrativeUnitId

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
Get-EntraAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -All |
Select-Object Id, DisplayName, '@odata.type', createdDateTime

id                                   DisplayName         @odata.type              CreatedDateTime
--                                   -----------         -----------              ---------------
bbbbbbbb-1111-2222-3333-cccccccccccc Alex Wilber        #microsoft.graph.user    10/7/2024 12:31:51 AM
cccccccc-2222-3333-4444-dddddddddddd Adele Miller      #microsoft.graph.user    10/7/2024 12:32:17 AM
dddddddd-3333-4444-5555-eeeeeeeeeeee Sales and Marketing #microsoft.graph.group  10/7/2024 12:43:47 AM
ffffffff-5555-6666-7777-aaaaaaaaaaaa Contoso Global     #microsoft.graph.group   10/27/2024 6:48:09 AM

This example returns the list of all administrative unit members from specified administrative unit AdministrativeUnitId.

• -AdministrativeUnitId parameter specifies the ID of an administrative unit.

Example 3: Get top three administrative unit members by AdministrativeUnitId

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
Get-EntraAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -Top 3 |
Select-Object Id, DisplayName, '@odata.type', createdDateTime

id                                   DisplayName         @odata.type              CreatedDateTime
--                                   -----------         -----------              ---------------
bbbbbbbb-1111-2222-3333-cccccccccccc Alex Wilber        #microsoft.graph.user    10/7/2024 12:31:51 AM
cccccccc-2222-3333-4444-dddddddddddd Adele Miller      #microsoft.graph.user    10/7/2024 12:32:17 AM
dddddddd-3333-4444-5555-eeeeeeeeeeee Sales and Marketing #microsoft.graph.group  10/7/2024 12:43:47 AM

This example returns top three administrative unit members from specified administrative unit ID. You can use -Limit as an alias for -Top.

• -AdministrativeUnitId parameter specifies the ID of an administrative unit.

Parameters

-AdministrativeUnitId

Specifies the ID of an administrative unit in Microsoft Entra ID.

Type:	System.String
Aliases:	ObjectId
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	True
Accept wildcard characters:	False

-All

List all pages.

Type:	System.Management.Automation.SwitchParameter
Position:	Named
Default value:	False
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Property

Specifies properties to be returned.

Type:	System.String[]
Aliases:	Select
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Top

Specifies the maximum number of records to return.

Type:	System.Int32
Aliases:	Limit
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	True
Accept wildcard characters:	False

Related Links

• Add-EntraAdministrativeUnitMember
• Remove-EntraAdministrativeUnitMember