Remove-EntraBetaScopedRoleMembership

Module:

Microsoft.Entra.Beta.DirectoryManagement Module v1.3

Removes a scoped role membership.

Remove-EntraBetaScopedRoleMembership

 -AdministrativeUnitId <String>
 -ScopedRoleMembershipId <String>
 [<CommonParameters>]

The Remove-EntraBetaScopedRoleMembership cmdlet removes a scoped role membership from Microsoft Entra ID. Specify AdministrativeUnitId and ScopedRoleMembershipId parameter to remove a scoped role membership.

Connect-Entra -Scopes 'RoleManagement.Read.Directory'
$role = Get-EntraBetaDirectoryRole -Filter "DisplayName eq 'Helpdesk Administrator'"
$administrativeUnit = Get-EntraBetaAdministrativeUnit -Filter "DisplayName eq 'Pacific Administrative Unit'"
$roleMembership = Get-EntraBetaScopedRoleMembership -AdministrativeUnitId $administrativeUnit.Id | Where-Object {$_.RoleId -eq $role.Id}
Remove-EntraBetaScopedRoleMembership -AdministrativeUnitId $administrativeUnit.Id -ScopedRoleMembershipId $roleMembership.Id

This cmdlet removes a specific scoped role membership from Microsoft Entra ID. You can use the command Get-EntraBetaAdministrativeUnit to get administrative unit Id.

• -AdministrativeUnitId parameter specifies the ID of an administrative unit.
• -ScopedRoleMembershipId parameter specifies the ID of the scoped role membership to remove. To obtain the details of a scoped role membership, you can use the Get-EntraBetaScopedRoleMembership command.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.