Microsoft.Graph.Users.Actions
Microsoft.Graph.Users.Actions
| Confirm-MgUserMemberGroup |
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified user, group, service principal, organizational contact, device, or directory object is a member. This function is transitive. You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct. Note To view the beta release of this cmdlet, view Confirm-MgBetaUserMemberGroup |
| Confirm-MgUserMemberObject |
Invoke action checkMemberObjects Note To view the beta release of this cmdlet, view Confirm-MgBetaUserMemberObject |
| Export-MgUserPersonalData |
Submit a data policy operation request from a company administrator or an application to export an organizational user's data. This data includes the user's data stored in OneDrive and their activity reports. For more information about exporting data while complying with regulations, see Data Subject Requests and the GDPR and CCPA. Note To view the beta release of this cmdlet, view Export-MgBetaUserPersonalData |
| Find-MgUserMeetingTime |
Suggest meeting times and locations based on organizer and attendee availability, and time or location constraints specified as parameters. If findMeetingTimes cannot return any meeting suggestions, the response would indicate a reason in the emptySuggestionsReason property.Based on this value, you can better adjust the parameters and call findMeetingTimes again. The algorithm used to suggest meeting times and locations undergoes fine-tuning from time to time. In scenarios like test environments where the input parameters and calendar data remain static, expect that the suggested results may differ over time. Note To view the beta release of this cmdlet, view Find-MgBetaUserMeetingTime |
| Get-MgUserById |
Return the directory objects specified in a list of IDs. Only a subset of user properties are returned by default in v1.0. Some common uses for this function are to: Note To view the beta release of this cmdlet, view Get-MgBetaUserById |
| Get-MgUserMailTip |
Get the MailTips of one or more recipients as available to the signed-in user. Note that by making a POST call to the getMailTips action, you can request specific types of MailTips tobe returned for more than one recipient at one time. The requested MailTips are returned in a mailTips collection. Note To view the beta release of this cmdlet, view Get-MgBetaUserMailTip |
| Get-MgUserMemberGroup |
Return all the group IDs for the groups that the specified user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. This API returns up to 11,000 group IDs. If more than 11,000 results are available, it returns a 400 Bad Request error with the DirectoryResultSizeLimitExceeded error code. If you get the DirectoryResultSizeLimitExceeded error code, use the List group transitive memberOf API instead. Note To view the beta release of this cmdlet, view Get-MgBetaUserMemberGroup |
| Get-MgUserMemberObject |
Return all IDs for the groups, administrative units, and directory roles that a user, group, service principal, organizational contact, device, or directory object is a member of. This function is transitive. Note: Only users and role-enabled groups can be members of directory roles. Note To view the beta release of this cmdlet, view Get-MgBetaUserMemberObject |
| Invoke-MgLicenseUser |
Reprocess all group-based license assignments for the user. To learn more about group-based licensing, see What is group-based licensing in Microsoft Entra ID. Also see Identify and resolve license assignment problems for a group in Microsoft Entra ID for more details. Note To view the beta release of this cmdlet, view Invoke-MgBetaLicenseUser |
| Invoke-MgRetryUserServiceProvisioning |
Retry the user service provisioning. Note To view the beta release of this cmdlet, view Invoke-MgBetaRetryUserServiceProvisioning |
| Invoke-MgTranslateUserExchangeId |
Translate identifiers of Outlook-related resources between formats. Note To view the beta release of this cmdlet, view Invoke-MgBetaTranslateUserExchangeId |
| Remove-MgAllUserDeviceFromManagement |
Retire all devices from management for this user Note To view the beta release of this cmdlet, view Remove-MgBetaAllUserDeviceFromManagement |
| Revoke-MgUserSignInSession |
Invalidates all the refresh tokens issued to applications for a user (as well as session cookies in a user's browser), by resetting the signInSessionsValidFromDateTime user property to the current date-time. Typically, this operation is performed (by the user or an administrator) if the user has a lost or stolen device. This operation prevents access to the organization's data through applications on the device by requiring the user to sign in again to all applications that they have previously consented to, independent of device. Note To view the beta release of this cmdlet, view Revoke-MgBetaUserSignInSession |
| Send-MgUserMail |
Send the message specified in the request body using either JSON or MIME format. When using JSON format, you can include a file attachment in the same sendMail action call. When using MIME format: This method saves the message in the Sent Items folder. Alternatively, create a draft message to send later. To learn more about the steps involved in the backend before a mail is delivered to recipients, see here. Note To view the beta release of this cmdlet, view Send-MgBetaUserMail |
| Set-MgUserLicense |
Add or remove licenses for the user to enable or disable their use of Microsoft cloud offerings that the company has licenses to. For example, an organization can have a Microsoft 365 Enterprise E3 subscription with 100 licenses, and this request assigns one of those licenses to a specific user. You can also enable and disable specific plans associated with a subscription. Direct user licensing method is an alternative to group-based licensing. Note To view the beta release of this cmdlet, view Set-MgBetaUserLicense |
| Test-MgUserProperty |
Validate that a Microsoft 365 group's display name or mail nickname complies with naming policies. Clients can use this API to determine whether a display name or mail nickname is valid before trying to create a Microsoft 365 group. To validate the properties of an existing group, use the group: validateProperties function. The following policy validations are performed for the display name and mail nickname properties:1. Validate the prefix and suffix naming policy2. Validate the custom banned words policy3. Validate that the mail nickname is unique This API only returns the first validation failure that is encountered. If the properties fail multiple validations, only the first validation failure is returned. However, you can validate both the mail nickname and the display name and receive a collection of validation errors if you are only validating the prefix and suffix naming policy. To learn more about configuring naming policies, see Configure naming policy. Note To view the beta release of this cmdlet, view Test-MgBetaUserProperty |
| Update-MgUserPassword |
Update the signed-in user's password. Any user can update their password without belonging to any administrator role. Note To view the beta release of this cmdlet, view Update-MgBetaUserPassword |