你当前正在访问 Microsoft Azure Global Edition 技术文档网站。 如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

Get-AzureADDirectoryRole

模块:

AzureAD

获取目录角色。

语法

Get-AzureADDirectoryRole
   [-Filter <String>]
   [-InformationAction <ActionPreference>]
   [-InformationVariable <String>]
   [<CommonParameters>]

Get-AzureADDirectoryRole
   -ObjectId <String>
   [-InformationAction <ActionPreference>]
   [-InformationVariable <String>]
   [<CommonParameters>]

说明

Get-AzureADDirectoryRole cmdlet 从 Azure Active Directory (AD) 获取目录角色。

示例

示例 1：按 ID 获取目录角色

PS C:\>Get-AzureADDirectoryRole -ObjectId "019ea7a2-1613-47c9-81cb-20ba35b1ae48"

ObjectId                             DisplayName                        Description
--------                             -----------                        -----------
019ea7a2-1613-47c9-81cb-20ba35b1ae48 Global Administrator              Can manage all aspects of Azure AD and Microsoft services that use Azure AD identities.

示例 2：获取所有目录角色

PS C:\>Get-AzureADDirectoryRole

ObjectId                             DisplayName                        Description
--------                             -----------                        -----------
019ea7a2-1613-47c9-81cb-20ba35b1ae48 Global Administrator               Can manage all aspects of Azure AD and Microsoft services that use Azure AD identities.
2b3a80bc-51a4-476d-8e09-cd8b6cdde5ea Directory Writers                  Can read and write basic directory information. For granting access to applications, not intended for users.
526b7173-5a6e-49dc-88ec-b677a9093709 User Administrator                 Can manage all aspects of users and groups, including resetting passwords for limited admins.
542f5aef-b23f-4e34-a838-6f2b9205b3d6 Directory Synchronization Accounts Only used by Azure AD Connect service.
68239fa3-6b01-4396-aeb4-6af38a1b6abf Directory Readers                  Can read basic directory information. Commonly used to grant directory read access to applications and guests.
8c6a5c45-e93e-4f2b-81be-b57ad4c43ddd Privileged Role Administrator      Can manage role assignments in Azure AD, and all aspects of Privileged Identity Management.
8f8a1cf4-d535-4ccd-8552-7267c7ee0a88 Helpdesk Administrator             Can reset passwords for non-administrators and Helpdesk Administrators.
d96eb2b3-0970-4827-8f26-6008efd86511 Security Administrator             Can read security information and reports, and manage configuration in Azure AD and Office 365.

参数

-Filter

oData v3.0 筛选器语句。 控制返回的对象。

类型:	String
Position:	Named
默认值:	None
必需:	False
接受管道输入:	True
接受通配符:	False

-InformationAction

指定此 cmdlet 如何响应信息事件。

此参数的可接受值为：

• 继续
• 忽略
• 查询
• SilentlyContinue
• 停止
• 挂起

类型:	ActionPreference
别名:	infa
Position:	Named
默认值:	None
必需:	False
接受管道输入:	False
接受通配符:	False

-InformationVariable

指定信息变量。

类型:	String
别名:	iv
Position:	Named
默认值:	None
必需:	False
接受管道输入:	False
接受通配符:	False

-ObjectId

指定 Azure AD 中目录角色的 ID。

类型:	String
Position:	Named
默认值:	None
必需:	True
接受管道输入:	True
接受通配符:	False

备注

请参阅 Get-AzureADDirectoryRole 到 Microsoft Graph PowerShell 的迁移指南。

相关链接

• Enable-AzureADDirectoryRole