Note
Access to this page requires authorization. You can try signing in or .
Access to this page requires authorization. You can try .
Get-EntraServicePrincipalDelegatedPermissionClassification
Retrieve the delegated permission classification objects on a service principal.
Syntax
GetQuery (Default)
Get-EntraServicePrincipalDelegatedPermissionClassification
-ServicePrincipalId <String>
[-Filter <String>]
[-Property <String[]>]
[<CommonParameters>]
GetById
Get-EntraServicePrincipalDelegatedPermissionClassification
-ServicePrincipalId <String>
-Id <String>
[-Property <String[]>]
[<CommonParameters>]
Description
The Get-EntraServicePrincipalDelegatedPermissionClassification cmdlet retrieves the delegated permission classifications from a service principal.
Examples
Example 1: Get a list of delegated permission classifications
Connect-Entra -Scopes 'Application.Read.All'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id
Id Classification PermissionId PermissionName
-- -------------- ------------ --------------
bbbbbbbb-7777-8888-9999-cccccccccccc low eeeeeeee-4444-5555-6666-ffffffffffff Sites.Read.All
cccccccc-8888-9999-0000-dddddddddddd low dddd3333-ee44-5555-66ff-777777aaaaaa profile
This command retrieves all delegated permission classifications from the service principal.
-ServicePrincipalIdparameter specifies the unique identifier of a service principal. UseGet-EntraServicePrincipalto get more details.
Example 2: Get a delegated permission classifications
Connect-Entra -Scopes 'Application.Read.All'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
$permissionClassification = Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Filter "PermissionName eq 'Sites.Read.All'"
Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Id $permissionClassification.Id
Id Classification PermissionId PermissionName
-- -------------- ------------ --------------
bbbbbbbb-7777-8888-9999-cccccccccccc low eeeeeeee-4444-5555-6666-ffffffffffff Sites.Read.All
This command retrieves the delegated permission classification by Id from the service principal.
-ServicePrincipalIdparameter specifies the unique identifier of a service principal. UseGet-EntraServicePrincipalto get more details.-Idparameter specifies the delegated permission classification object Id.
Example 3: Get a delegated permission classification with filter
Connect-Entra -Scopes 'Application.Read.All'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Filter "PermissionName eq 'Sites.Read.All'"
Id Classification PermissionId PermissionName
-- -------------- ------------ --------------
bbbbbbbb-7777-8888-9999-cccccccccccc low eeeeeeee-4444-5555-6666-ffffffffffff Sites.Read.All
This command retrieves the filtered delegated permission classifications from the service principal.
-ServicePrincipalIdparameter specifies the unique identifier of a service principal. UseGet-EntraServicePrincipalto get more details.-Idparameter specifies the delegated permission classification object Id.
Parameters
-Filter
The OData v4.0 filter statement. Controls which objects are returned.
Parameter properties
| Type: | System.String |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
-Id
The unique identifier of a delegated permission classification object ID.
Parameter properties
| Type: | System.String |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
-Property
Specifies properties to be returned.
Parameter properties
| Type: | System.String[] |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | Select |
Parameter sets
-ServicePrincipalId
The unique identifier of a service principal object in Microsoft Entra ID.
Parameter properties
| Type: | System.String |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | ObjectId |
Parameter sets
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Outputs
Microsoft.Online.Administration.DelegatedPermissionClassification
Related Links
Feedback
Was this page helpful?