{"id":13,"date":"2025-04-08T16:10:35","date_gmt":"2025-04-08T16:10:35","guid":{"rendered":"https:\/\/burlage.it\/?p=13"},"modified":"2025-04-18T14:11:27","modified_gmt":"2025-04-18T14:11:27","slug":"mggraph","status":"publish","type":"post","link":"https:\/\/burlage.it\/index.php\/2025\/04\/08\/mggraph\/","title":{"rendered":"MgGraph – User"},"content":{"rendered":"\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
# MgGraph - Connect MgGraph<\/span><\/span>\nConnect-MgGraph<\/span><\/span>\n<\/span>\n# MgGraph - Connect MgGraph without Welcome message<\/span><\/span>\nConnect-MgGraph<\/span> -NoWelcome<\/span><\/span>\n<\/span>\n# MgGraph - Find out which permission scope is needed when using a mggraph command (in this example 'Get-MgUser')<\/span><\/span>\nFind-MgGraphCommand<\/span> -command <\/span>Get-MgUser<\/span> | <\/span>Select-Object<\/span> -First <\/span>1<\/span> -ExpandProperty Permissions<\/span><\/span>\n<\/span>\n# MgGraph - Disconnect MgGraph<\/span><\/span>\nDisconnect-MgGraph<\/span><\/span>\n<\/span>\n# MgGraph - Search for a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\nGet-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span><\/span>\n<\/span>\n# MgGraph - Display all properties of a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\nGet-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Format-List<\/span><\/span>\n<\/span>\n# MgGraph - Display the UPN of a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\nGet-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -Property <\/span>'UserPrincipalName'<\/span> <\/span><\/span>\n<\/span>\n# MgGraph - Display the UPN of a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n(<\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span>).UserPrincipalName<\/span><\/span>\n<\/span>\n# MgGraph - Display the user by using the UserPrincipalName<\/span><\/span>\n$userUPN<\/span> = <\/span>'john.doe@domain.com'<\/span><\/span>\nGet-MgUser<\/span> -UserId <\/span>$userUPN<\/span> <\/span><\/span>\n<\/span>\n# MgGraph - Display the Id \/ Object ID of a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\nGet-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -Property <\/span>'DisplayName'<\/span>,<\/span>'Id'<\/span><\/span>\n<\/span>\n# MgGraph - List the Entra applications assigned to a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$userId<\/span> = (<\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span>).Id <\/span><\/span>\n$assignedApplications<\/span> = <\/span>Get-MgUserAppRoleAssignment<\/span> -UserId <\/span>$userId<\/span> | <\/span>Sort-Object<\/span> ResourceDisplayName<\/span><\/span>\n$assignedApplications<\/span> | <\/span>Format-Table<\/span> ResourceDisplayName,Id, AppRoleId, PrincipalDisplayName -AutoSize<\/span><\/span>\n<\/span>\n# MgGraph - Lookup device (Intune) of a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$emailAddress<\/span> = <\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Mail'<\/span><\/span>\nGet-MgDeviceManagementManagedDevice<\/span> -All -Filter <\/span>"EmailAddress eq '<\/span>$emailAddress<\/span>'"<\/span><\/span>\n<\/span>\n# MgGraph - Lookup device of a user and display all details<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$emailAddress<\/span> = <\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Mail'<\/span><\/span>\nGet-MgDeviceManagementManagedDevice<\/span> -All -Filter <\/span>"EmailAddress eq '<\/span>$emailAddress<\/span>'"<\/span> | <\/span>Format-List<\/span><\/span>\n<\/span>\n# MgGraph - Lookup device of a user and display the last sync<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$emailAddress<\/span> = <\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Mail'<\/span><\/span>\nGet-MgDeviceManagementManagedDevice<\/span> -All -Filter <\/span>"EmailAddress eq '<\/span>$emailAddress<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'LastSyncDateTime'<\/span><\/span>\n<\/span>\n# MgGraph - Lookup device(s) of a user and the last sync date<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$emailAddress<\/span> = <\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Mail'<\/span><\/span>\n$userDevices<\/span> = <\/span>Get-MgDeviceManagementManagedDevice<\/span> -All -Filter <\/span>"EmailAddress eq '<\/span>$emailAddress<\/span>'"<\/span><\/span>\n$loop<\/span> = <\/span>Foreach<\/span> (<\/span>$device<\/span> <\/span>in<\/span> <\/span>$userDevices<\/span>) {<\/span>Get-MgDeviceManagementManagedDevice<\/span> -ManagedDeviceId <\/span>$device<\/span>.Id<\/span> | <\/span>Select-Object<\/span> -Property <\/span>'DeviceName'<\/span>,<\/span>'LastSyncDateTime'<\/span>}<\/span><\/span>\n$loop<\/span> | <\/span>Format-Table<\/span> -AutoSize<\/span><\/span>\n<\/span>\n# MgGraph - Lookup device(s) of a user<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$emailAddress<\/span> = <\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Mail'<\/span><\/span>\n$userDevices<\/span> = <\/span>Get-MgDeviceManagementManagedDevice<\/span> -All -Filter <\/span>"EmailAddress eq '<\/span>$emailAddress<\/span>'"<\/span><\/span>\n$loop<\/span> = <\/span>Foreach<\/span> (<\/span>$device<\/span> <\/span>in<\/span> <\/span>$userDevices<\/span>) {<\/span>Get-MgDeviceManagementManagedDevice<\/span> -ManagedDeviceId <\/span>$device<\/span>.Id<\/span>}<\/span><\/span>\n$loop<\/span> | <\/span>Format-Table<\/span> -AutoSize<\/span><\/span>\n<\/span>\n# MgGraph - Lookup device(s) of a user and the last sync date<\/span><\/span>\n$displayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$emailAddress<\/span> = <\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$displayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Mail'<\/span><\/span>\n$userDevices<\/span> = <\/span>Get-MgDeviceManagementManagedDevice<\/span> -All -Filter <\/span>"EmailAddress eq '<\/span>$emailAddress<\/span>'"<\/span><\/span>\n$loop<\/span> = <\/span>Foreach<\/span> (<\/span>$device<\/span> <\/span>in<\/span> <\/span>$userDevices<\/span>) {<\/span>Get-MgDeviceManagementManagedDevice<\/span> -ManagedDeviceId <\/span>$device<\/span>.Id<\/span> | <\/span>Select-Object<\/span> -Property <\/span>'DeviceName'<\/span>,<\/span>'LastSyncDateTime'<\/span>}<\/span><\/span>\n$loop<\/span> | <\/span>Format-Table<\/span> -AutoSize<\/span><\/span>\n<\/span>\n# MgGraph - List a user's last sign-on dates<\/span><\/span>\n$userDisplayName<\/span> = <\/span>'John Doe'<\/span><\/span>\n$userId<\/span> = <\/span>Get-MgUser<\/span> -Filter <\/span>"displayName eq '<\/span>$userDisplayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Id'<\/span> <\/span><\/span>\nGet-MgUser<\/span> -UserId <\/span>$userId<\/span> -Property SignInActivity | <\/span>Select-Object<\/span> -ExpandProperty SignInActivity | <\/span>Format-List<\/span><\/span>\n<\/span>\n# MgGraph - Permanently delete a deleted Entra user<\/span><\/span>\n$emailAddress<\/span> = <\/span>'john.doe@domain.com'<\/span><\/span>\n$directoryObjectId<\/span> = (<\/span>Get-MgDirectoryDeletedItemAsUser<\/span> -Filter <\/span>"Mail eq '<\/span>$emailAddress<\/span>'"<\/span>).Id<\/span><\/span>\nRemove-MgDirectoryDeletedItem<\/span> -DirectoryObjectId <\/span>$directoryObjectId<\/span><\/span>\n<\/span>\n# MgGraph - Display all guest accounts<\/span><\/span>\nGet-MgUser<\/span> -Filter <\/span>"userType eq 'Guest'"<\/span> -All | <\/span>Format-List<\/span> Id, DisplayName, Mail, UserPrincipalName<\/span><\/span>\n<\/span>\n# MgGraph - Count the number of guest accounts<\/span><\/span>\n(<\/span>Get-MgUser<\/span> -Filter <\/span>"userType eq 'Guest'"<\/span> -All | <\/span>Format-List<\/span> Id, DisplayName, Mail, UserPrincipalName).count<\/span><\/span>\n<\/span>\n# MgGraph - Lookup a specific quest account <\/span><\/span>\n$guestEmailaddress<\/span> = <\/span>'jane.doe@guest.com'<\/span><\/span>\nGet-MgUser<\/span> -Filter <\/span>"mail eq '<\/span>$guestEmailaddress<\/span>'"<\/span> -All | <\/span>Format-List<\/span> Id, DisplayName, Mail, UserPrincipalName<\/span><\/span>\n<\/span>\n# MgGraph - Lookup a specific quest account and display all properties<\/span><\/span>\n$guestEmailaddress<\/span> = <\/span>'jane.doe@guest.com'<\/span><\/span>\nGet-MgUser<\/span> -Filter <\/span>"mail eq '<\/span>$guestEmailaddress<\/span>'"<\/span> -All | <\/span>Format-List<\/span> <\/span><\/span><\/code><\/pre><\/div>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"chat","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-13","post","type-post","status-publish","format-chat","hentry","category-powershell","post_format-post-format-chat"],"_links":{"self":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts\/13","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/comments?post=13"}],"version-history":[{"count":23,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts\/13\/revisions"}],"predecessor-version":[{"id":113,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts\/13\/revisions\/113"}],"wp:attachment":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/media?parent=13"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/categories?post=13"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/tags?post=13"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}