1.0.13

Release Notes

1.0.13 - November 12th, 2025

New commands:

• Grant-EntraBetaMcpServerPermission: Grants delegated permissions to Model Context Protocol (MCP) clients for accessing the Microsoft MCP Server for Enterprise.
• Revoke-EntraBetaMcpServerPermission: Revokes MCP Server permissions from a specified client in Microsoft Entra ID.

New Parameters:

• Get-EntraContact & Get-EntraBetaContact:
  • Added -HasErrorsOnly parameter to return only contacts with service provisioning errors.
• Get-EntraGroup & Get-EntraBetaGroup:
  • Added -HasErrorsOnly parameter to return only groups that have service provisioning errors.
  • Added -HasLicenseErrorsOnly parameter to only groups that have members with license errors.
• Get-EntraUser & Get-EntraBetaUser:
  • Added -EnabledFilter parameter which filters users based on the state of their accounts. Valid values are EnabledOnly and DisabledOnly.
  • Added -HasErrorsOnly parameter which returns only users that have one or more service provisioning or validation errors (surfaced via the serviceProvisioningErrors collection).
  • Added -LicenseReconciliationNeededOnly parameter which returns only users whose service provisioning errors include license-related issues indicating that license reconciliation is needed (for example, insufficient licenses, dependency violations, mutually exclusive plans).
  • Added -Synchronized parameter which returns only users synchronized from on-premises Active Directory (those with onPremisesSyncEnabled eq true). This is useful for distinguishing cloud-only identities from hybrid managed identities.
  • Added -UnlicensedUsersOnly parameter which returns only users who have no assigned licenses.

Bug Fixes:

• Fixed Get-EntraUser issue where handling of guest UPNs was corrected to properly escape/quote special characters so that user@external#EXT#@tenant.onmicrosoft.com no longer triggers “unterminated string literal” errors.
• Set-EntraUserManager -ManagerId parameter type corrected from Guid to String, enabling UPN (and not just objectId) for the manager reference.
• Updated documentation.

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.13 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.13 -Repository PSGallery -Force -AllowClobber

What's Changed

• Introducing new filter parameters to Get-EntraUser cmdlet (Entra only) by @givinalis in #1551
• Introducing new filter parameters to Get-EntraGroup cmdlet (Entra only) by @givinalis in #1553
• Introducing new filter parameters to Get-EntraBetaGroup cmdlet (Entra Beta only) by @givinalis in #1556
• Introducing new filter parameters to Get-EntraBetaUser cmdlet (Entra Beta only) by @givinalis in #1555
• Introducing new filter parameters to Get-EntraBetaContact cmdlet (Entra Beta only) by @givinalis in #1557
• Introducing new filter parameters to Get-EntraContact cmdlet (Entra only) by @givinalis in #1554
• Grant and Revoke MCP client permissions management command by @givinalis in #1559
• Fix Get-EntraUser when using guest UPN by @KenitoInc in #1550
• Fix Get-EntraGroup example description by @KenitoInc in #1548
• Fix ManagerId in Set-EntraUserManager by @KenitoInc in #1549

Full Changelog: 1.0.12...1.0.13

1.0.12

Release Notes

1.0.12 - September 26th, 2025

• Bug Fixes:

  • Get-EntraUnsupportedCommand was moved to the root modules of Microsoft.Entra and Microsoft.Entra.Beta and removed from sub-modules to align with its usage in Enable-EntraAzureADAlias. PR: #1543
  • Enabled Enable-EntraAzureADAlias cmdlet in beta module by moving to the correct folder. PR: #1542

• Features:

  • We have added the -AppendSelected parameter to high usage cmdlets in Applications, Users and Groups sub-modules. PR: #1518

• Cmdlet Enhancements:

  • Implemented authentication checks across all cmdlets to indicate the correct permissions in case of a failed connection to Connect-Entra.
  • Updated the -Features parameter under Set-EntraDirSyncFeature command to allow processing of multiple features at once. PR: #1527
  • Extended the Get-EntraUser command to include -PageSize parameter. PR: #1526

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.12 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.12 -Repository PSGallery -Force -AllowClobber

What's Changed

• Clean up docs by @KenitoInc in #1528
• 1168 - Update Set-EntraDirSyncFeature to process multiple features at once by @givinalis in #1527
• Automate mapping files creation by @KenitoInc in #1508
• 356 - Added Authentication check on Governance sub-module's cmdlets by @givinalis in #1530
• 888 - Added -PageSize parameter to Get-EntraUser by @givinalis in #1526
• 356 - Added authentication checks for Network Access sub-module on Entra Beta by @givinalis in #1533
• 356 - Added authentication checks for Reports cmdlets in Entra and Entra Beta by @givinalis in #1532
• 356 - Added Authentication check on Entra Beta Governance sub-module's cmdlets by @givinalis in #1531
• 356-Added authentication checks for Users submodule for Entra and Entra Beta by @givinalis in #1534
• 356 - Added Authentication checks for cmdlets under SignIns submodule for Entra by @givinalis in #1537
• 356 - Added Authentication checks for cmdlets under DirectoryManagement submodule for Entra by @givinalis in #1538
• 356 - Added Authentication checks for cmdlets under DirectoryManagement submodule for Entra Beta by @givinalis in #1539
• 356 - Added Authentication checks for cmdlets under Sign In submodule for Entra Beta by @givinalis in #1540
• Fix Get-EntraUnsupportedCommand by @KenitoInc in #1543
• Enable Enable-EntraAzureADAlias cmdlet in beta module by @KenitoInc in #1542
• AppendSelected parameter by @KenitoInc in #1518

Full Changelog: 1.0.11...1.0.12

1.0.11

Release Notes

1.0.11 - August 22nd, 2025

• Bug Fixes:

  • Updated cmdlet binding for Remove-EntraBetaPrivateAccessApplicationSegment command. PR #1524

• Cmdlet Enhancements:

  • Updated verb on Update-EntraSignedInUserPassword command to Set-EntraSignedInUserPassword. PR #1516
  • Updated the Command name to Set-EntraUserPasswordProfile as well as corresponding parameters. PR #1519
  • Remove Microsoft.Graph.Users.Functions dependency (Performance improvement). PR #1521

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.11 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.11 -Repository PSGallery -Force -AllowClobber

What's Changed

• #1154 - Updated verb on Update-EntraSignedInUserPassword command to Set-EntraSignedInUserPassword by @givinalis in #1516
• #1155 - Updated the Command name to Set-EntraUserPasswordProfile as well as corresponding parameters by @givinalis in #1519
• Fix EntraBeta issues by @KenitoInc in #1523
• Remove Microsoft.Graph.Users.Functions dependency by @KenitoInc in #1521
• 1517 - Updated cmdlet binding for Remove-EntraBetaPrivateAccessApplicationSegment command by @givinalis in #1524
• Update version to v1.0.11 by @KenitoInc in #1525

New Contributors

• @givinalis made their first contribution in #1516

Full Changelog: 1.0.10...1.0.11

1.0.10

Release Notes

1.0.10 - July 25th, 2025

• Bug Fixes:

  • Fixed - Fix Remove-EntraUserExtension. PR #1509

• New cmdlets:

  • New-EntraServicePrincipalKeyCredential PR #1487

• Documentation enhancements:

  • Updates to comply with Platy PS v2 pipeline. PRs #1498, #1501, #1506

• Other Enhancements:

  • Adding zero-trust assessments samples. PR #1341

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.10 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.10 -Repository PSGallery -Force -AllowClobber

What's Changed

• Fix cmdlet docs to support PlatyPS by @sdwheeler in #1498
• Remove ProgressAction parameter by @sdwheeler in #1501
• Move CI pipeline from BuildArtifact to PipelineArtifact by @KenitoInc in #1492
• Fix capitalization of H2 headers by @sdwheeler in #1506
• Add New-EntraServicePrincipalKeyCredential by @DButoyez in #1487
• Docs cleanup from v1.0.9 docs refresh by @KenitoInc in #1505
• Update the manager metadata from Celeste to Precious by @msewaweru in #1507
• Adding zero-trust assessments samples by @SteveMutungi254 in #1341
• Fix Remove-EntraUserExtension by @KenitoInc in #1509
• Release v1.0.10 by @KenitoInc in #1510

Full Changelog: 1.0.9...1.0.10

1.0.9

Release Notes

1.0.9 - June 30th, 2025

• Bug Fixes:

  • Fixed - Fix Visibility parameter validation in Set-EntraGroup. PR #1488
  • Fixed - Fix NewEntraApplicationKeyCredential. PR #1491
  • Fixed - Fix metadata to support new PlatyPS build pipeline. PR #1493
  • Fixed - Fix New-EntraBetaPrivateAccessApplication cmdletbinding. PR #1495

• New cmdlets:

  • Get-EntraInactiveSigninUser PR #1438

• Documentation enhancements:

  • Enhanced examples.
  • Update Add-EntraDeviceRegisteredOwner permissions.

• Other Enhancements:

  • Add ResetRedemption param. PR #1485
  • Add NewUserPrincipalName param to Restore-EntraDeletedDirectoryObject. PR #1497

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.9 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.9 -Repository PSGallery -Force -AllowClobber

What's Changed

• Example improvements and additions by @SteveMutungi254 in #1459
• Add ResetRedemption param by @KenitoInc in #1485
• Fix Visibility parameter validation in Set-EntraGroup by @SamErde in #1488
• Kemunga/fix new entra application key credential by @KenitoInc in #1491
• Fix metadata to support new PlatyPS build pipeline by @sdwheeler in #1493
• Update Add-EntraDeviceRegisteredOwner permissions by @KenitoInc in #1496
• Enganga/get msidinactivesigninuser by @emmanuel-karanja in #1438
• Fix New-EntraBetaPrivateAccessApplication cmdletbinding by @DButoyez in #1495
• Add NewUserPrincipalName param to Restore-EntraDeletedDirectoryObject by @KenitoInc in #1497
• Update version to v1.0.9 by @KenitoInc in #1499

Full Changelog: 1.0.8...1.0.9

1.0.8

Release Notes

1.0.8 - May 30th, 2025

• Bug Fixes:

  • Fixed - Sub-modules must have the same version as the root module. PR #1464
  • Fixed - Return service principals in Get-EntraGroupOwner response. PR #1470
  • Fixed - Fix OdataId uris . PR #1480

• New cmdlets:

  • Test-EntraScript

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.8 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.8 -Repository PSGallery -Force -AllowClobber

What's Changed

• Lock sub-module to the version of the root module by @KenitoInc in #1464
• Fix deleted docs by @KenitoInc in #1473
• Update CBA docs author by @KenitoInc in #1472
• Corrected the Related links heading to sentence case by @msewaweru in #1475
• Fix tests by @KenitoInc in #1476
• Return service principals in Get-EntraGroupOwner by @KenitoInc in #1470
• Resolve broken link by @msewaweru in #1479
• Prechecks for user resources by @SteveMutungi254 in #1469
• Fix OdataId uris by @KenitoInc in #1480
• Bug fix 1324: Application resources - Cmdlet help documentation improvements to drive consistency by @SteveMutungi254 in #1465
• Fix Test-EntraScript by @KenitoInc in #1471
• Adding command prechecks for application resources by @SteveMutungi254 in #1466
• Bug fix 1324: User resources - Cmdlet help documentation improvements to drive consistency by @SteveMutungi254 in #1461
• Suppress credscan error by @KenitoInc in #1482
• Release v1.0.8 by @KenitoInc in #1481

Full Changelog: 1.0.7...1.0.8

1.0.7

Release Notes

1.0.7 - May 5th, 2025

• Bug Fixes:
  • Fixed -Replace dash with hyphen in Group functions - Thank you, @SamErde. PR #1450
  • Fixed - New-EntraApplication - Multiple RequiredResourceAccess entries failure. PR #1458
  • Fixed - Get-EntraUserExtension - Parity with Get-AzureADUserExtension. PR #1451

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.7 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.7 -Repository PSGallery -Force -AllowClobber

What's Changed

• Fix: Replace en dash with hyphen in Group functions by @SamErde in #1450
• Enganga/bulk url update by @emmanuel-karanja in #1439
• [Bug fix 1435] Get-EntraUserExtension by @SteveMutungi254 in #1451
• Fix - New-EntraApplication - Multiple RequiredResourceAccess entries failure by @SteveMutungi254 in #1458
• Update version to v1.0.7 by @KenitoInc in #1462

Full Changelog: 1.0.6...1.0.7

1.0.6

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.6 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.6 -Repository PSGallery -Force -AllowClobber

What's Changed

• [POC]Enganga/usgov redirect issue test by @emmanuel-karanja in #1436
• Quality enhancements - Input validations for user related navigational resources by @SteveMutungi254 in #1433
• [Quality] Group commands - Add validations and pre-checks by @SteveMutungi254 in #1434
• Annotating $TenantId with obsolescence message by @SteveMutungi254 in #1423
• Add Set-EntraCBACertificateUserId by @amoslue in #1429
• Set-EntraBetaAppRoleToApplicationUser by @KenitoInc in #1442
• Upgrade to release v1.0.6 by @emmanuel-karanja in #1446

New Contributors

• @amoslue made their first contribution in #1429

Full Changelog: 1.0.5...1.0.6

1.0.5

Release Notes

1.0.5 - March 28th, 2025

• New Commands:

  • Get-EntraAuthenticationMethodUserRegistrationDetailReport.
  • Set-EntraUserSponsor.

• Bug Fixes:

  • Fixed -Add SendCertificateChain to Connect-Entra. PR #1413
  • Fixed - Reset-EntraBetaStrongAuthenticationMethodByUpn. PR #1418
  • Fixed - Set-EntraUserExtension - Add support for support "ExtensionNameValues" parameter. PR #1412

• Documentation enhancements:

  • Enhanced examples for over 200 cmdlets with relevant parameter sets.
  • Add per-user MFA report example.
  • Add disable password policy example.

• Other Enhancements:

  • Per user MFA commands input validations. PR #1430
  • Converted Set-EntraUser to use API. PR #1410

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.5 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.5 -Repository PSGallery -Force -AllowClobber

What's Changed

• Add SendCertificateChain to Connect-Entra by @KenitoInc in #1413
• Fix dangling beta references upstream by @SteveMutungi254 in #1415
• Bugfix - Reset-EntraBetaStrongAuthenticationMethodByUpn by @SteveMutungi254 in #1418
• Add per-user MFA report example by @SteveMutungi254 in #1424
• Parameter set names improvements - Batch one by @SteveMutungi254 in #1420
• Parameter set names improvements - Batch two by @SteveMutungi254 in #1421
• Parameter set names improvements - Batch three by @SteveMutungi254 in #1422
• Bug fix: Set-EntraUserExtension - Add support for support "ExtensionNameValues" parameter. by @SteveMutungi254 in #1412
• Set-EntraUserSponsor - to assign a sponsor to a guest user by @DButoyez in #1397
• Set-EntraUser - Improvements by @SteveMutungi254 in #1410
• (HotFix)Enganga/move enable entraazureadalias to root module by @emmanuel-karanja in #1409
• Per user MFA validations by @SteveMutungi254 in #1430
• Get-EntraAuthenticationMethodUserRegistrationDetailReport by @SteveMutungi254 in #1426
• Example addition - disable password policy by @SteveMutungi254 in #1431
• Update version to v1.0.5 by @KenitoInc in #1432

Full Changelog: 1.0.4...1.0.5

1.0.4

Release Notes

1.0.4 - March 14, 2025

• New Commands:

  • Get-EntraSubscription.
  • Get-EntraBetaCrossTenantAccessActivity.

• Documentation enhancements:

  • Additional examples for common scenarios based on product group engagement.

• Other Enhancements:

  • Pipeline hardening.
  • Added AliasesToExport values in the psd1 files.

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.4 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.4 -Repository PSGallery -Force -AllowClobber

What's Changed

• Cleanup azure pipelines by @KenitoInc in #1389
• Kemunga/1es pr pipeline by @KenitoInc in #1390
• Kemunga/1es pr pipeline fixes by @KenitoInc in #1392
• [Hotfix] Adding user sponsor docs metadata by @SteveMutungi254 in #1388
• Update correct PR pipeline to branch protection rule by @KenitoInc in #1398
• Move ESRP config to shared library by @KenitoInc in #1394
• Add Aliasing for Get-EntraDirectoryObject to Get-EntraObjectByObjectId by @emmanuel-karanja in #1403
• Enganga/get entra cross tenant access activity beta by @emmanuel-karanja in #1393
• Get-EntraSubscription by @SteveMutungi254 in #1395
• Additional scenarios based on product group engagement by @SteveMutungi254 in #1396
• Update version to v1.0.4 by @KenitoInc in #1406

Full Changelog: 1.0.3...1.0.4