azurepowershellazure-active-directoryazure-ad-powershell-v2

Get-MsolUserRole Azure AD V2 cmdlet equivalent


I currently try to migrate an existing PowerShell script that uses the old MSOnline PowerShell module to the AzureAD (V2) module. I am able to replace most of the cmdlets but I don't find a replacement for the Get-MsolUserRole cmdlet to retrieve administrator roles for a specific user.

The similar AzureAD (V2) cmdlets doesn't allow me to query the roles by the objectId of the user (they require the role objectid). Any suggestions?


Solution

  • The closest equivalent is Get-AzureADUserMembership, but since this will also include other membership (e.g. group memberships), you will need to filter the results down to only directory roles:

    Get-AzureADUserMembership -ObjectId "user@example.com" -All $true `
    | Where-Object { $_.ObjectType -eq "Role" }