Table of Contents

Get-PnPEntraIDUser

SYNOPSIS

Required Permissions

  • Microsoft Graph API : One of Directory.Read.All, Directory.ReadWrite.All, User.Read.All, User.ReadWrite.All

Retrieves users from Entra ID. By default the following properties will be loaded: BusinessPhones, DisplayName, GivenName, JobTitle, Mail, MobilePhone, OfficeLocation, PreferredLanguage, Surname, UserPrincipalName, Id, AccountEnabled

SYNTAX

Return a list (Default)

Get-PnPEntraIDUser [-Filter <String>] [-OrderBy <String>] [-Select <String[]>] [-StartIndex <Int32>] [-EndIndex <Int32>] [-UseBeta] [-Connection <PnPConnection>]

Return by specific ID

Get-PnPEntraIDUser [-Identity <String>] [-Select <String[]>] [-UseBeta] [-Connection <PnPConnection>]

Return the delta

Get-PnPEntraIDUser [-Filter <String>] [-OrderBy <String>] [-Select <String[]>] [-Delta] [-DeltaToken <String>] [-StartIndex <Int32>] [-EndIndex <Int32>] [-UseBeta] [-Connection <PnPConnection>]

DESCRIPTION

Allows to retrieve a single user or a list of users from Entra ID.

EXAMPLES

EXAMPLE 1

Get-PnPEntraIDUser

Retrieves all users from Entra ID.

EXAMPLE 2

Get-PnPEntraIDUser -EndIndex 50

Retrieves the first 50 users from Entra ID. Notice that you have no control over who will be in this batch of 50 unless you combine it with the -Filter and/or -OrderBy parameters.

EXAMPLE 3

Get-PnPEntraIDUser -Identity 328c7693-5524-44ac-a946-73e02d6b0f98

Retrieves the user from Entra ID with the id 328c7693-5524-44ac-a946-73e02d6b0f98

EXAMPLE 4

Get-PnPEntraIDUser -Identity john@contoso.com

Retrieves the user from Entra ID with the user principal name john@contoso.com.

EXAMPLE 5

Get-PnPEntraIDUser -Identity john@contoso.com -Select "DisplayName","extension_3721d05137db455ad81aa442e3c2d4f9_extensionAttribute1"

Retrieves only the DisplayName and extensionAttribute1 properties of the user from Entra ID which has the user principal name john@contoso.com.

EXAMPLE 6

Get-PnPEntraIDUser -Filter "accountEnabled eq false"

Retrieves all the disabled users from Entra ID.

EXAMPLE 7

Get-PnPEntraIDUser -Filter "startswith(DisplayName, 'John')" -OrderBy "DisplayName"

Retrieves all the users from Entra ID of which their DisplayName starts with 'John' and sort the results by the DisplayName.

EXAMPLE 8

Get-PnPEntraIDUser -Delta

Retrieves all the users from Entra ID and includes a delta DeltaToken which can be used by providing -DeltaToken <token> to query for changes to users in Entra ID since this run.

EXAMPLE 9

Get-PnPEntraIDUser -Delta -DeltaToken abcdef

Retrieves all the users from Entra ID which have had changes since the provided DeltaToken was given out.

EXAMPLE 10

Get-PnPEntraIDUser -StartIndex 10 -EndIndex 20

Retrieves the 10th through the 20th user from Entra ID. Notice that you have no control over which users will be in this batch of 10 users.

PARAMETERS

-Delta

Retrieves all users and provides a SkipToken delta token to allow to query for changes since this run when querying again by adding -DeltaToken to the command.

Note that using -Select and -Filter in combination with this parameter is limited. More information on this can be found here.

Type: SwitchParameter
Parameter Sets: Return the delta

Required: True
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-DeltaToken

The change token provided during the previous run with -Delta to query for the changes to user objects made in Entra ID since that run.

Type: String
Parameter Sets: Return the delta

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Filter

Includes a filter to the retrieval of the users. Use OData instructions to construct the filter, i.e. "startswith(DisplayName, 'John')".

Type: String
Parameter Sets: Return a list, Return the delta

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Identity

Returns the user with the provided user id.

Type: String
Parameter Sets: Return by specific ID

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-OrderBy

Includes a custom sorting instruction to the retrieval of the users. Use OData syntax to construct the orderby, i.e. "DisplayName desc".

Type: String
Parameter Sets: Return a list, Return the delta

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Select

Allows providing an array with the property names of specific properties to return. If not provided, the default properties will be returned.

Type: String[]
Parameter Sets: (All)

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-StartIndex

Allows defining the first result to return. Useful for i.e. pagination.

Type: Int32
Parameter Sets: (All)

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-EndIndex

Allows defining the last result to return. Useful for i.e. pagination. If omitted, it will return all available users from Entra ID.

Type: Int32
Parameter Sets: (All)

Required: False
Position: Named
Default value: $null
Accept pipeline input: False
Accept wildcard characters: False

-UseBeta

Uses the Microsoft Graph beta endpoint instead of the v1.0 endpoint.

Type: SwitchParameter
Parameter Sets: (All)

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-Connection

Optional connection to be used by the cmdlet. Retrieve the value for this parameter by either specifying -ReturnConnection on Connect-PnPOnline or by executing Get-PnPConnection.

Type: PnPConnection
Parameter Sets: (All)

Required: False
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Microsoft 365 Patterns and Practices