Skip to content

Releases: microsoftgraph/entra-powershell

1.3.0

18 May 11:55
@givinalis givinalis
1.3.0
ac2d990
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.3.0 Latest
Latest

Release Notes

1.3.0 - May 18th, 2026

Features

This release promotes the Agent ID command set to General Availability (GA) in the Microsoft.Entra (v1.0) module, while also updating the existing Beta
cmdlets. The following GA cmdlets are now available:

Agent Identity Blueprint Management

  • New‑EntraAgentIdentityBlueprint – Creates a new Agent Identity Blueprint with sponsors and owners.
  • Get‑EntraAgentIdentityBlueprint – Retrieves an existing Agent Identity Blueprint.
  • Remove‑EntraAgentIdentityBlueprint – Deletes an Agent Identity Blueprint.
  • New‑EntraAgentIdentityBlueprintPrincipal – Creates a service principal for an Agent Identity Blueprint.
  • Get‑EntraAgentIdentityBlueprintPrincipal – Retrieves the service principal for a blueprint.
  • Add‑EntraClientSecretToAgentIdentityBlueprint – Adds a client secret to a blueprint.
  • Add‑EntraInheritablePermissionsToAgentIdentityBlueprint – Configures Microsoft Graph permissions and consent flows.
  • Add‑EntraPermissionsToInheritToAgentIdentityBlueprintPrincipal – Adds permissions to inherit to the blueprint principal.
  • Add‑EntraPermissionToCreateAgentUsersToAgentIdentityBlueprintPrincipal – Grants permission to create agent users.
  • Add‑EntraRequiredResourceAccessToAgentIdentityBlueprint – Adds required resource access to a blueprint.
  • Add‑EntraScopeToAgentIdentityBlueprint – Adds OAuth2 permission scopes to a blueprint.

Agent Identity Management

  • New‑EntraAgentIDForAgentIdentityBlueprint – Creates agent identities under a blueprint.
  • Get‑EntraAgentIdentity – Retrieves an agent identity.
  • Remove‑EntraAgentIdentity – Deletes an agent identity.
  • Invoke‑EntraAgentIdInteractive – Launches an interactive wizard for Agent ID setup.

Agent User Management

  • New‑EntraAgentUserForAgentId – Creates agent users with auto‑generated UPN and mailNickname.
  • Get‑EntraAgentUser – Retrieves an agent user.
  • Remove‑EntraAgentUser – Deletes an agent user.

Other Changes

  • Removed deprecated AzureAD module dependency from the build pipeline.
  • Added contributor testing and local build documentation.

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.3.0 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.3.0 -Repository PSGallery -Force -AllowClobber

What's Changed

New Contributors

Full Changelog: 1.2.0...1.3.0

Contributors

kylemar and givinalis
Assets 22

1.2.0

14 Jan 22:37
@givinalis givinalis
1.2.0
296113d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.2.0

Release Notes

1.2.0 - January 14th, 2026

Features

This release migrates the AgentId command set from MSIdentityTools into the entra‑powershell repository, delivering a production‑ready implementation for managing Agent Identity Blueprints and Agent Identities in Microsoft Entra ID. The new cmdlets added are:

  • New‑EntraBetaAgentIdentityBlueprint – Creates a new Agent Identity Blueprint with sponsors and owners.
  • Add‑EntraBetaClientSecretToAgentIdentityBlueprint – Adds a 90‑day client secret to a blueprint with retry logic.
  • Add‑EntraBetaInheritablePermissionsToAgentIdentityBlueprint – Configures Microsoft Graph permissions and consent flows.
  • Add‑EntraBetaScopeToAgentIdentityBlueprint – Adds OAuth2 permission scopes to a blueprint.
  • Add‑EntraBetaRedirectURIToAgentIdentityBlueprint – Adds web redirect URIs for authentication callbacks.
  • New‑EntraBetaAgentIDForAgentIdentityBlueprint – Creates agent identities under a blueprint using stored credentials.
  • New‑EntraBetaAgentIDUserForAgentId – Creates agent users with auto‑generated UPN and mailNickname.
  • Get‑EntraBetaAgentIdentityToken – Acquires tokens for multiple authentication modes (app‑only, OBO, user).
  • Invoke‑EntraBetaAgentIdInteractive – Launches an interactive wizard for Agent ID setup.
  • Connect‑AgentIdentityBlueprint – Authenticates using stored blueprint credentials.
  • Get‑SponsorsAndOwners – Prompts and validates sponsors and owners for blueprints.

Bug Fixes:

  • Enabled support for the -PreAuthorizedApplications parameter in the Set-EntraBetaApplication cmdlet, enabling users to configure pre-authorized applications for an Entra application.
  • The InvitedUser and InvitedUserMessageInfo parameter types have been updated. New New-EntraBetaInvitation commands now use interfaces from Microsoft.Graph.Beta.PowerShell.Models, while New-EntraInvitation commands use interfaces from Microsoft.Graph.PowerShell.Models.

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.2.0 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.2.0 -Repository PSGallery -Force -AllowClobber

What's Changed

  • New-EntraInvitation & New-EntraBetaInvitation param objects type updated from MSOL types by @givinalis in #1580
  • Add PreAuthorizedApplications parameter support to Set-EntraBetaApplication by @givinalis in #1579
  • Migrated AgentId commands from MSIdentityTools by @givinalis in #1577

Full Changelog: 1.1.0...1.2.0

Contributors

givinalis
Loading

1.1.0

04 Dec 20:30
@givinalis givinalis
1.1.0
8e236dd
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.1.0

Release Notes

1.1.0 - December 4th, 2025

Features

  • Removed version pinning of MS Graph PowerShell modules from 2.25.0 to allow users to use the latest version of the module without any version restriction.
  • Added sample scripts on how to apply batch operations in Graph API calls with the goal of performance improvement on operations involving a lot of API calls.

New Parameters:

  • Get-EntraDevice and Get-EntraBetaDevice:

    • Added -LogonTimeBefore parameter to filter devices with last sign-in before a specified date.
    • Added -Stale parameter to filter devices that haven't signed in for 2 months or more.
    • Added -NonCompliant parameter to filter devices that are not compliant with organizational policies.
    • Added -IsManaged parameter to filter devices based on whether they are managed by a Mobile Device Management (MDM) solution.
    • Added -JoinType parameter to filter devices by join type: MicrosoftEntraJoined, MicrosoftEntraHybridJoined, or MicrosoftEntraRegistered.

  • Get-EntraServicePrincipal and Get-EntraBetaServicePrincipal:

    • Added -AssignmentRequired parameter to filter by whether user assignment is required to access the application. When set to $true, returns only service principals where user assignment is required. When set to $false, returns only service principals where user assignment is not required.
    • Added -ApplicationType parameter to Filter by application type such as: AppProxyApps, EnterpriseApps, ManagedIdentity and MicrosoftApps.

Bug Fixes:

  • Fixed an issue where Microsoft.Entra.Beta.Applications module was experiencing a parsing issue in PowerShell 5.1.

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.1.0 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.1.0 -Repository PSGallery -Force -AllowClobber

What's Changed

  • Introducing new filter parameters to Get-EntraServicePrincipal and Get-EntraBetaServicePrincipal by @givinalis in #1567
  • Introducing new filter parameters to Get-EntraDevice and Get-EntraBetaDevice by @givinalis in #1565
  • Add Samples for getting authentication methods using batch operations by @KenitoInc in #1558
  • Bugfix: Removed special unicode characters causing applications beta module to break in PS 5.1 by @givinalis in #1571
  • Removing version pinning for MS Graph PowerShell module dependency by @givinalis in #1570

Full Changelog: 1.0.13...1.1.0

Contributors

givinalis and KenitoInc
Loading

1.0.13

12 Nov 17:57
@givinalis givinalis
1.0.13
7c02795
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.0.13

Release Notes

1.0.13 - November 12th, 2025

New commands:

  • Grant-EntraBetaMcpServerPermission: Grants delegated permissions to Model Context Protocol (MCP) clients for accessing the Microsoft MCP Server for Enterprise.
  • Revoke-EntraBetaMcpServerPermission: Revokes MCP Server permissions from a specified client in Microsoft Entra ID.

New Parameters:

  • Get-EntraContact & Get-EntraBetaContact:
    • Added -HasErrorsOnly parameter to return only contacts with service provisioning errors.
  • Get-EntraGroup & Get-EntraBetaGroup:
    • Added -HasErrorsOnly parameter to return only groups that have service provisioning errors.
    • Added -HasLicenseErrorsOnly parameter to only groups that have members with license errors.
  • Get-EntraUser & Get-EntraBetaUser:
    • Added -EnabledFilter parameter which filters users based on the state of their accounts. Valid values are EnabledOnly and DisabledOnly.
    • Added -HasErrorsOnly parameter which returns only users that have one or more service provisioning or validation errors (surfaced via the serviceProvisioningErrors collection).
    • Added -LicenseReconciliationNeededOnly parameter which returns only users whose service provisioning errors include license-related issues indicating that license reconciliation is needed (for example, insufficient licenses, dependency violations, mutually exclusive plans).
    • Added -Synchronized parameter which returns only users synchronized from on-premises Active Directory (those with onPremisesSyncEnabled eq true). This is useful for distinguishing cloud-only identities from hybrid managed identities.
    • Added -UnlicensedUsersOnly parameter which returns only users who have no assigned licenses.

Bug Fixes:

  • Fixed Get-EntraUser issue where handling of guest UPNs was corrected to properly escape/quote special characters so that user@external#EXT#@tenant.onmicrosoft.com no longer triggers “unterminated string literal” errors.
  • Set-EntraUserManager -ManagerId parameter type corrected from Guid to String, enabling UPN (and not just objectId) for the manager reference.
  • Updated documentation.

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.13 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.13 -Repository PSGallery -Force -AllowClobber

What's Changed

  • Introducing new filter parameters to Get-EntraUser cmdlet (Entra only) by @givinalis in #1551
  • Introducing new filter parameters to Get-EntraGroup cmdlet (Entra only) by @givinalis in #1553
  • Introducing new filter parameters to Get-EntraBetaGroup cmdlet (Entra Beta only) by @givinalis in #1556
  • Introducing new filter parameters to Get-EntraBetaUser cmdlet (Entra Beta only) by @givinalis in #1555
  • Introducing new filter parameters to Get-EntraBetaContact cmdlet (Entra Beta only) by @givinalis in #1557
  • Introducing new filter parameters to Get-EntraContact cmdlet (Entra only) by @givinalis in #1554
  • Grant and Revoke MCP client permissions management command by @givinalis in #1559
  • Fix Get-EntraUser when using guest UPN by @KenitoInc in #1550
  • Fix Get-EntraGroup example description by @KenitoInc in #1548
  • Fix ManagerId in Set-EntraUserManager by @KenitoInc in #1549

Full Changelog: 1.0.12...1.0.13

Contributors

givinalis and KenitoInc
Loading

1.0.12

26 Sep 15:08
@givinalis givinalis
1.0.12
1ab379e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.0.12

Release Notes

1.0.12 - September 26th, 2025

  • Bug Fixes:

    • Get-EntraUnsupportedCommand was moved to the root modules of Microsoft.Entra and Microsoft.Entra.Beta and removed from sub-modules to align with its usage in Enable-EntraAzureADAlias. PR: #1543
    • Enabled Enable-EntraAzureADAlias cmdlet in beta module by moving to the correct folder. PR: #1542

  • Features:

    • We have added the -AppendSelected parameter to high usage cmdlets in Applications, Users and Groups sub-modules. PR: #1518

  • Cmdlet Enhancements:

    • Implemented authentication checks across all cmdlets to indicate the correct permissions in case of a failed connection to Connect-Entra.
    • Updated the -Features parameter under Set-EntraDirSyncFeature command to allow processing of multiple features at once. PR: #1527
    • Extended the Get-EntraUser command to include -PageSize parameter. PR: #1526

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.12 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.12 -Repository PSGallery -Force -AllowClobber

What's Changed

  • Clean up docs by @KenitoInc in #1528
  • 1168 - Update Set-EntraDirSyncFeature to process multiple features at once by @givinalis in #1527
  • Automate mapping files creation by @KenitoInc in #1508
  • 356 - Added Authentication check on Governance sub-module's cmdlets by @givinalis in #1530
  • 888 - Added -PageSize parameter to Get-EntraUser by @givinalis in #1526
  • 356 - Added authentication checks for Network Access sub-module on Entra Beta by @givinalis in #1533
  • 356 - Added authentication checks for Reports cmdlets in Entra and Entra Beta by @givinalis in #1532
  • 356 - Added Authentication check on Entra Beta Governance sub-module's cmdlets by @givinalis in #1531
  • 356-Added authentication checks for Users submodule for Entra and Entra Beta by @givinalis in #1534
  • 356 - Added Authentication checks for cmdlets under SignIns submodule for Entra by @givinalis in #1537
  • 356 - Added Authentication checks for cmdlets under DirectoryManagement submodule for Entra by @givinalis in #1538
  • 356 - Added Authentication checks for cmdlets under DirectoryManagement submodule for Entra Beta by @givinalis in #1539
  • 356 - Added Authentication checks for cmdlets under Sign In submodule for Entra Beta by @givinalis in #1540
  • Fix Get-EntraUnsupportedCommand by @KenitoInc in #1543
  • Enable Enable-EntraAzureADAlias cmdlet in beta module by @KenitoInc in #1542
  • AppendSelected parameter by @KenitoInc in #1518

Full Changelog: 1.0.11...1.0.12

Contributors

givinalis and KenitoInc
Loading

1.0.11

25 Aug 07:54
@KenitoInc KenitoInc
1.0.11
8e97894
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.0.11

Release Notes

1.0.11 - August 22nd, 2025

  • Bug Fixes:

    • Updated cmdlet binding for Remove-EntraBetaPrivateAccessApplicationSegment command. PR #1524

  • Cmdlet Enhancements:

    • Updated verb on Update-EntraSignedInUserPassword command to Set-EntraSignedInUserPassword. PR #1516
    • Updated the Command name to Set-EntraUserPasswordProfile as well as corresponding parameters. PR #1519
    • Remove Microsoft.Graph.Users.Functions dependency (Performance improvement). PR #1521

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.11 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.11 -Repository PSGallery -Force -AllowClobber

What's Changed

  • #1154 - Updated verb on Update-EntraSignedInUserPassword command to Set-EntraSignedInUserPassword by @givinalis in #1516
  • #1155 - Updated the Command name to Set-EntraUserPasswordProfile as well as corresponding parameters by @givinalis in #1519
  • Fix EntraBeta issues by @KenitoInc in #1523
  • Remove Microsoft.Graph.Users.Functions dependency by @KenitoInc in #1521
  • 1517 - Updated cmdlet binding for Remove-EntraBetaPrivateAccessApplicationSegment command by @givinalis in #1524
  • Update version to v1.0.11 by @KenitoInc in #1525

New Contributors

Full Changelog: 1.0.10...1.0.11

Contributors

givinalis and KenitoInc
Loading

1.0.10

26 Jul 18:53
@KenitoInc KenitoInc
1.0.10
3fa0e27
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.0.10

Release Notes

1.0.10 - July 25th, 2025

  • Bug Fixes:

    • Fixed - Fix Remove-EntraUserExtension. PR #1509

  • New cmdlets:

    • New-EntraServicePrincipalKeyCredential PR #1487

  • Documentation enhancements:

  • Other Enhancements:

    • Adding zero-trust assessments samples. PR #1341

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.10 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.10 -Repository PSGallery -Force -AllowClobber

What's Changed

Full Changelog: 1.0.9...1.0.10

Contributors

KenitoInc, sdwheeler, and 3 other contributors
Loading

1.0.9

02 Jul 06:11
@KenitoInc KenitoInc
1.0.9
aa8baaa
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.0.9

Release Notes

1.0.9 - June 30th, 2025

  • Bug Fixes:

    • Fixed - Fix Visibility parameter validation in Set-EntraGroup. PR #1488
    • Fixed - Fix NewEntraApplicationKeyCredential. PR #1491
    • Fixed - Fix metadata to support new PlatyPS build pipeline. PR #1493
    • Fixed - Fix New-EntraBetaPrivateAccessApplication cmdletbinding. PR #1495

  • New cmdlets:

    • Get-EntraInactiveSigninUser PR #1438

  • Documentation enhancements:

    • Enhanced examples.
    • Update Add-EntraDeviceRegisteredOwner permissions.

  • Other Enhancements:

    • Add ResetRedemption param. PR #1485
    • Add NewUserPrincipalName param to Restore-EntraDeletedDirectoryObject. PR #1497

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.9 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.9 -Repository PSGallery -Force -AllowClobber

What's Changed

Full Changelog: 1.0.8...1.0.9

Contributors

KenitoInc, sdwheeler, and 4 other contributors
Loading

1.0.8

30 May 18:51
@KenitoInc KenitoInc
1.0.8
a76240d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.0.8

Release Notes

1.0.8 - May 30th, 2025

  • Bug Fixes:

    • Fixed - Sub-modules must have the same version as the root module. PR #1464
    • Fixed - Return service principals in Get-EntraGroupOwner response. PR #1470
    • Fixed - Fix OdataId uris . PR #1480

  • New cmdlets:

    • Test-EntraScript

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.8 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.8 -Repository PSGallery -Force -AllowClobber

What's Changed

Full Changelog: 1.0.7...1.0.8

Contributors

KenitoInc, msewaweru, and SteveMutungi254
Loading

1.0.7

07 May 07:17
@KenitoInc KenitoInc
1.0.7
c1a4633
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Choose a tag to compare

View all tags
1.0.7

Release Notes

1.0.7 - May 5th, 2025

  • Bug Fixes:
    • Fixed -Replace dash with hyphen in Group functions - Thank you, @SamErde. PR #1450
    • Fixed - New-EntraApplication - Multiple RequiredResourceAccess entries failure. PR #1458
    • Fixed - Get-EntraUserExtension - Parity with Get-AzureADUserExtension. PR #1451

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.7 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.7 -Repository PSGallery -Force -AllowClobber

What's Changed

Full Changelog: 1.0.6...1.0.7

Contributors

KenitoInc, SamErde, and 2 other contributors
Loading