entra agent blueprintprincipal list
Retrieves a list of agent blueprint principals
Usage
m365 entra agent blueprintprincipal list [options]
Options
-p, --properties [properties]Comma-separated list of properties to retrieve.
-h, --help [help]Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are
options,examples,remarks,permissions,response,full. Default isoptions.--query [query]JMESPath query string. See http://jmespath.org/ for more information and examples.
-o, --output [output]Output type.
json,text,csv,md,none. Defaultjson.--verboseRuns command with verbose logging.
--debugRuns command with debug logging.
Remarks
Using the --properties option, you can specify a comma-separated list of agent blueprint principal properties to retrieve from Microsoft Graph. If you don't specify any properties, Microsoft Graph returns its default property set. The CLI's default properties (id, appDisplayName, and appId) are used only for text output.
A principal who creates a blueprint or blueprint principal is assigned as the owner. Owners can create agent identities and modify only the resources they own, even if they aren't assigned an Agent ID role.
For nonowners to call this API in delegated scenarios using work or school accounts, the admin must be assigned a supported Microsoft Entra role. This operation supports the following built-in roles, which provide only the least privilege necessary:
- Agent ID Administrator.
- Agent ID Developer - Create agent identity blueprints and blueprint principals.
Permissions
- Delegated
- Application
| Resource | Permissions |
|---|---|
| Microsoft Graph | AgentIdentityBlueprintPrincipal.Read.All |
| Resource | Permissions |
|---|---|
| Microsoft Graph | AgentIdentityBlueprintPrincipal.Read.All |
Examples
Retrieve all agent blueprint principals
m365 entra agent blueprintprincipal list
Retrieve id and name of agent blueprint principals
m365 entra agent blueprintprincipal list --properties 'id,appDisplayName'
Response
- JSON
- Text
- CSV
- Markdown
[
{
"accountEnabled": true,
"appDescription": null,
"appDisplayName": "OcnAgentBluePrint02",
"appId": "0e81af7f-b058-470a-84be-3a4f5a8014ca",
"appOwnerOrganizationId": "70cf0eca-e1e8-4d78-9d03-62ecf811dfc2",
"appRoleAssignmentRequired": false,
"createdByAppId": "14d82eec-204b-4c2f-b7e8-296a70dab67e",
"disabledByMicrosoftStatus": null,
"displayName": "OcnAgentBluePrint02",
"servicePrincipalNames": [
"0e81af7f-b058-470a-84be-3a4f5a8014ca"
],
"servicePrincipalType": "Application",
"signInAudience": "AzureADMyOrg",
"tags": [],
"id": "59246ef4-b832-48eb-a5e0-87748132e12c",
"appRoles": [],
"info": {
"logoUrl": null,
"marketingUrl": null,
"privacyStatementUrl": null,
"supportUrl": null,
"termsOfServiceUrl": null
},
"oauth2PermissionScopes": [],
"verifiedPublisher": {
"displayName": null,
"verifiedPublisherId": null,
"addedDateTime": null
}
}
]
appDisplayName: OcnAgentBluePrint02
appId : 0e81af7f-b058-470a-84be-3a4f5a8014ca
id : 59246ef4-b832-48eb-a5e0-87748132e12c
accountEnabled,appDescription,appDisplayName,appId,appOwnerOrganizationId,appRoleAssignmentRequired,createdByAppId,disabledByMicrosoftStatus,displayName,servicePrincipalType,signInAudience,id
1,,OcnAgentBluePrint02,0e81af7f-b058-470a-84be-3a4f5a8014ca,70cf0eca-e1e8-4d78-9d03-62ecf811dfc2,0,14d82eec-204b-4c2f-b7e8-296a70dab67e,,OcnAgentBluePrint02,Application,AzureADMyOrg,59246ef4-b832-48eb-a5e0-87748132e12c
# entra agent blueprintprincipal list --debug "false" --verbose "false"
Date: 6/5/2026
## OcnAgentBluePrint02 (59246ef4-b832-48eb-a5e0-87748132e12c)
Property | Value
---------|-------
accountEnabled | true
appDisplayName | OcnAgentBluePrint02
appId | 0e81af7f-b058-470a-84be-3a4f5a8014ca
appOwnerOrganizationId | 70cf0eca-e1e8-4d78-9d03-62ecf811dfc2
appRoleAssignmentRequired | false
createdByAppId | 14d82eec-204b-4c2f-b7e8-296a70dab67e
displayName | OcnAgentBluePrint02
servicePrincipalType | Application
signInAudience | AzureADMyOrg
id | 59246ef4-b832-48eb-a5e0-87748132e12c