Note
Access to this page requires authorization. You can try signing in or .
Access to this page requires authorization. You can try .
Get-EntraGroupAppRoleAssignment
Gets a group application role assignment.
Syntax
Default (Default)
Get-EntraGroupAppRoleAssignment
-GroupId <String>
[-All]
[-Top <Int32>]
[-Property <String[]>]
[<CommonParameters>]
Description
The Get-EntraGroupAppRoleAssignment cmdlet gets a group application role assignment in Microsoft Entra ID. Specify the GroupId parameter to get a group application role assignment.
Examples
Example 1: Retrieve application role assignments of a group
Connect-Entra -Scopes 'Directory.Read.All'
$group = Get-EntraGroup -SearchString 'Contoso marketing'
Get-EntraGroupAppRoleAssignment -GroupId $group.Id
ObjectId ResourceDisplayName PrincipalDisplayName
-------- ------------------- --------------------
MSVrBV4APk--eAGnHqMKBLflsQG3rU1EmDFKvgra41I Microsoft Device Management Checkin Ask HR
MSVrBV4APk--eAGnHqMKBExhQK4StEFHidLvUymzo4I ProvisioningPowerBi Ask HR
MSVrBV4APk--eAGnHqMKBDtEqPRvu8xLqWHDSXUhoTE M365 License Manager Ask HR
This example retrieves the application role assignments of a group.
-GroupIdparameter specifies the ID of a group in Microsoft Entra ID.
Example 2: Retrieve all application role assignments of a group
Connect-Entra -Scopes 'Directory.Read.All'
$group = Get-EntraGroup -SearchString 'Contoso marketing'
Get-EntraGroupAppRoleAssignment -GroupId $group.Id -All
ObjectId ResourceDisplayName PrincipalDisplayName
-------- ------------------- --------------------
MSVrBV4APk--eAGnHqMKBLflsQG3rU1EmDFKvgra41I Microsoft Device Management Checkin Ask HR
MSVrBV4APk--eAGnHqMKBExhQK4StEFHidLvUymzo4I ProvisioningPowerBi Ask HR
MSVrBV4APk--eAGnHqMKBDtEqPRvu8xLqWHDSXUhoTE M365 License Manager Ask HR
This example retrieves all application role assignments of the specified group.
-GroupIdparameter specifies the ID of a group in Microsoft Entra ID.
Example 3: Retrieve top two application role assignments of a group
Connect-Entra -Scopes 'Directory.Read.All'
$group = Get-EntraGroup -SearchString 'Contoso marketing'
Get-EntraGroupAppRoleAssignment -GroupId $group.Id -Top 2
ObjectId ResourceDisplayName PrincipalDisplayName
-------- ------------------- --------------------
MSVrBV4APk--eAGnHqMKBLflsQG3rU1EmDFKvgra41I Microsoft Device Management Checkin Ask HR
MSVrBV4APk--eAGnHqMKBExhQK4StEFHidLvUymzo4I ProvisioningPowerBi Ask HR
This example retrieves top two application role assignments of the specified group. You can use -Limit as an alias for -Top.
-GroupIdparameter specifies the ID of a group in Microsoft Entra ID.
Parameters
-All
List all pages.
Parameter properties
| Type: | System.Management.Automation.SwitchParameter |
| Default value: | False |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
-GroupId
Specifies the ID of a group in Microsoft Entra ID.
Parameter properties
| Type: | System.String |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | ObjectId |
Parameter sets
-Property
Specifies properties to be returned
Parameter properties
| Type: | System.String[] |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | Select |
Parameter sets
-Top
Specifies the maximum number of records to return.
Parameter properties
| Type: | System.Int32 |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
| Aliases: | Limit |
Parameter sets
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.
Related Links
Feedback
Was this page helpful?