Read the latest announcements on the deprecation of Azure AD PowerShell and MS Online modules.

In 2021, we described our plans to invest in Microsoft Graph PowerShell SDK as the PowerShell provider for Microsoft Entra and transition away from Azure AD and MSOnline PowerShell modules. In 2023, we announced that the deprecation of Azure AD and MSOnline PowerShell modules would occur on March 30, 2024. We’ve since made substantial progress closing remaining parity gaps in Microsoft Graph PowerShell SDK, and as of March 30, 2024, these PowerShell modules are now deprecated:

\n
• Azure AD PowerShell (AzureAD) 
\n
• Azure AD PowerShell Preview (AzureADPreview) 
\n
• MS Online (MSOnline) 
\n

You should migrate your scripts to Microsoft Graph PowerShell SDK as soon as possible. Information about the retirement of these modules can be found below.

What happens to MSOnline and Azure AD Modules after March 30, 2024?

As of March 30, 2024, Azure AD, Azure AD Preview, and MS Online PowerShell modules are deprecated. Support will only be offered for critical security fixes. They will continue to function through March 30, 2025. Note: Only MSOnline versions 1.1.166.0 (2017) and later are assured to function through March 30, 2025. Use of versions earlier than 1.1.166.0 may experience disruptions after June 30, 2024.

Required Actions

\n
1. Identify scripts in your environment that are using Azure AD or MS Online PowerShell modules. 
\n
2. Take immediate action to migrate scripts that are using MS Online versions below 1.1.166.0. If you’re not ready to migrate to Microsoft Graph PowerShell, you can update to the latest version of MSOnline PowerShell (1.1.183.81) to avoid impact after June 30, 2024. To inspect the version of MS Online module, you can use this PowerShell command: > Get-InstalledModule MSOnline 
\n
3. Plan to migrate all MS Online (latest version) and Azure AD PowerShell scripts to Microsoft Graph by March 30, 2025.
\n
4. Migrate these scripts to use Microsoft Graph PowerShell SDK.
    
\n

We’re making substantial new and future investments in the PowerShell experience for managing Entra. Please continue to monitor this space as we announce exciting improvements in the coming months.

About Microsoft Graph PowerShell SDK

The Microsoft Graph PowerShell SDK provides cmdlets for the entire API surface of Microsoft Graph, including Microsoft Entra ID. It features cross-platform and PowerShell 7 support, offers modern authentication, and is regularly updated. 
 

Resources 

\n
• Microsoft Graph PowerShell SDK overview 
\n
• Migrate from Azure AD PowerShell to Microsoft Graph PowerShell 
\n
• Azure AD PowerShell to Microsoft Graph PowerShell migration FAQ  –  
\n
• Find Azure AD and MSOnline cmdlets in Microsoft Graph PowerShell  
\n
• Microsoft Graph Compatibility Adapter  
\n

Kristopher Bash 
Product Manager, Microsoft Graph 
LinkedIn

Learn more about Microsoft Entra: 

\n
• See recent Microsoft Entra blogs 
\n
• Dive into Microsoft Entra technical documentation 
\n
• Learn more at Azure Active Directory (Azure AD) rename to Microsoft Entra ID 
\n
• Join the conversation on the Microsoft Entra discussion space 
\n
• Learn more about Microsoft Security  
\n

In 2021, we described our plans to invest in Microsoft Graph PowerShell SDK as the PowerShell provider for Microsoft Entra and transition away from Azure AD and MSOnline PowerShell modules. In 2023, we announced that the deprecation of Azure AD and MSOnline PowerShell modules would occur on March 30, 2024. We’ve since made substantial progress closing remaining parity gaps in Microsoft Graph PowerShell SDK, and as of March 30, 2024, these PowerShell modules are now deprecated:

\n
• Azure AD PowerShell (AzureAD) 
\n
• Azure AD PowerShell Preview (AzureADPreview) 
\n
• MS Online (MSOnline) 
\n

You should migrate your scripts to Microsoft Graph PowerShell SDK as soon as possible. Information about the retirement of these modules can be found below.

What happens to MSOnline and Azure AD Modules after March 30, 2024?

As of March 30, 2024, Azure AD, Azure AD Preview, and MS Online PowerShell modules are deprecated. Support will only be offered for critical security fixes. They will continue to function through March 30, 2025. Note: Only MSOnline versions 1.1.166.0 (2017) and later are assured to function through March 30, 2025. Use of versions earlier than 1.1.166.0 may experience disruptions after June 30, 2024.

Required Actions

\n
1. Identify scripts in your environment that are using Azure AD or MS Online PowerShell modules. 
\n
2. Take immediate action to migrate scripts that are using MS Online versions below 1.1.166.0. If you’re not ready to migrate to Microsoft Graph PowerShell, you can update to the latest version of MSOnline PowerShell (1.1.183.81) to avoid impact after June 30, 2024. To inspect the version of MS Online module, you can use this PowerShell command: > Get-InstalledModule MSOnline 
\n
3. Plan to migrate all MS Online (latest version) and Azure AD PowerShell scripts to Microsoft Graph by March 30, 2025.
\n
4. Migrate these scripts to use Microsoft Graph PowerShell SDK.
    
\n

We’re making substantial new and future investments in the PowerShell experience for managing Entra. Please continue to monitor this space as we announce exciting improvements in the coming months.

About Microsoft Graph PowerShell SDK

The Microsoft Graph PowerShell SDK provides cmdlets for the entire API surface of Microsoft Graph, including Microsoft Entra ID. It features cross-platform and PowerShell 7 support, offers modern authentication, and is regularly updated. 
 

Resources 

\n
• Microsoft Graph PowerShell SDK overview 
\n
• Migrate from Azure AD PowerShell to Microsoft Graph PowerShell 
\n
• Azure AD PowerShell to Microsoft Graph PowerShell migration FAQ  –  
\n
• Find Azure AD and MSOnline cmdlets in Microsoft Graph PowerShell  
\n
• Microsoft Graph Compatibility Adapter  
\n

Kristopher Bash 
Product Manager, Microsoft Graph 
LinkedIn

Learn more about Microsoft Entra: 

\n
• See recent Microsoft Entra blogs 
\n
• Dive into Microsoft Entra technical documentation 
\n
• Learn more at Azure Active Directory (Azure AD) rename to Microsoft Entra ID 
\n
• Join the conversation on the Microsoft Entra discussion space 
\n
• Learn more about Microsoft Security  
\n

Read the latest announcements on the deprecation of Azure AD PowerShell and MS Online modules.

Azure AD module is still used in the AZ-500: Microsoft Azure Security Technologies course material 

https://microsoftlearning.github.io/AZ500-AzureSecurityTechnologies/Instructions/Labs/LAB_01_RBAC.html

https://github.com/MicrosoftLearning/AZ500-AzureSecurityTechnologies/blob/master/Instructions/Labs/LAB_01_RBAC.md

SteveMutungi  With MSOnline you can manage per-user MFA (enable/disable) based on the User Administrator Role. With MS Graph (and only available in beta), you need (as a minimum) the Authentication Policy Administrator Role which is not suitable for first-level supporters: https://learn.microsoft.com/en-us/graph/api/authentication-update?view=graph-rest-beta&tabs=http#permissions-acting-on-others

The high-profile and well funded security initiative that's pushing MFA enforcement hard (bravo) is now likely to impact higher level admins if first-level can't do the job.

Non-beta, non-privileged access via MS Graph to manage per-user MFA is a basic requirement to manage MFA-enforced Entra ID effectively.

Is this work in progress? Can you share a timeline?

Hi all,

The MSOL module is obsolete, that's great, but after disabling the command with 'Update-MgPolicyAuthorizationPolicy', it turns out that in 'EntraID Connect' (latest version) you can no longer make changes. Apparently it's still a prerequisite.

Do we have a schedule for 'EntraID Connect' update?

For the spefic properties you are looking try like this ,  add the list properties you need

Get-MgUser -UserId 1xxxxxxxxxxxxxxxxxxd -Property 'UserPrincipalName','DisplayName','companyName' | Select UserPrincipalName,DisplayName,companyName

Also please chekc the equivalent command here 

Find Azure AD and MSOnline cmdlets in Microsoft Graph PowerShell | Microsoft Learn

Microsoft Graph PowerShell documentation | Microsoft Learn

Hi there,

Following this post I’ve decided to disable usage of MSOL module in my tenant (using Set-AzureADMSAuthorizationPolicy -BlockMsolPowerShell) but found out it disabled Entra Connect (access denied on Get-MSOLUserRole).

It seems that MS Online Powershell module is still a requirement for Entra Connect…

Any solution for this issue?

A way to exclude the Entra Connect account from the policy?

Thanks

Hi everyone, I'm trying to migrate Role Member from MSOL to GRAPH. For some missed properties I found a solution by call different endpoint but I can't find these props (prevoiusly these were in this CMDLET => Get-MsolRoleMember -RoleObjectId $RoleObjectId):

- OverallProvisioningStatus

- RoleMemberType

- ValidationStatus

- LastDirSyncTime

Do you have any suggestions to get these props? SteveMutungi are there some updates about missing props?

Thanks!

Hi there, I found even this other property that we can get from MSOL and not from GRAPH:  LicenseReconciliationNeeded

SteveMutungi do you have any update?

On the Find Azure AD PowerShell and MSOnline cmdlets in Microsoft Graph PowerShell page, there are still many old cmdlets that do not yet have a corresponding Graph cmdlet mapping.

Further, there are many that do, but their new Graph cmdlet does not yet have all of the functionality of the old cmdlet so cannot yet fully replace it (for example, Set-MsolDirSyncEnabled -> Update-MgBetaOrganization, but Update-MgBetaOrganization does not have the functionality to actually replace Set-MsolDirSyncEnabled [and is this documented anywhere? of course not.])

So while the old modules are still needed, you have gone ahead with deprecating them regardless? And what *is* currently available is largely only available via the beta Graph cmdlets?

I am struggling to make sense of all of this.

About: StrongAuthenticationRequirements - Per-User MFA related data from this is not available in Graph whereas it continues to work.

We're working on adding per-user MFA capability to Microsoft Graph. We don't have a confirmed ETA yet.

Do you have any update regarding StrongAuthenticationRequirements, please? Do you know in which cmdlet it will be implemented? Will be possible also activation of per-user MFA? 

san-admindroid, cpunella: I am following up on the missing properties and will be posting updates on the blog.