Blog Post

Microsoft Entra Blog
5 MIN READ

Microsoft Entra change announcements – September 2022 train

ShobhitSahay's avatar
ShobhitSahay
Icon for Microsoft rankMicrosoft
Sep 30, 2022
Hello everyone,    In March 2022, we announced our simplified change management process, which allows customers to predictably plan their deployments, and in June, we introduced Microsoft Entra a...
Updated Jan 24, 2023
Version 2.0
Product Announcements
ShobhitSahay's avatar
Icon for Microsoft rankMicrosoft
Joined October 17, 2018
View Profile
Microsoft Entra Blog
Stay informed on how to secure access for employees, customers, and non-human identities, from anywhere, to multicloud and on-premises resources, with comprehensive identity and network access solutions powered by AI.
ChrisAtMaf's avatar
ChrisAtMaf
Iron Contributor
Feb 02, 2023

So in terms of the Azure AD Graph/PowerShell modules, you say: 'Based on Azure deprecation guidelines, we reserve the right to retire Azure AD Graph at any time after June 30, 2023, without advance notice.' and 'As we continue to support your migration efforts, we'll be extending the planned deprecation date of the three PowerShell Modules (Azure AD, Azure AD Preview, and MS Online) to June 30, 2023... Depending on the status of Azure AD API, some cmdlets might stop working after June 30, 2023.'

And you recommend migrating to Microsoft Graph. But wait - what if someone wants to manage (say) MFA, or Administrative Units, as is currently possible in the MS Online, or Azure AD modules? Let's look at the PowerShell cmdlets that support this for Microsoft Graph:

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.reports/get-mgreportauthenticationmethoduserregistrationdetail?view=graph-powershell-beta&viewFallbackFrom=graph-powershell-1.0

https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.identity.directorymanagement/get-mgadministrativeunit?view=graph-powershell-beta&viewFallbackFrom=graph-powershell-1.0

Oh no - you have to use the 'beta' module to use them. But what do Microsoft say about the beta module?

'APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.'

https://learn.microsoft.com/en-us/graph/sdks/use-beta?tabs=CS

So in many instances we are being advised to move away from the MsOnline modules and Azure AD modules because they are being deprecated. But there is nothing to move to - because you haven't moved all the necessaryy features out of beta in Graph yet, so they're not supported in production. Come on Microsoft. You're not ready for this change yet, and you shouldn't be deprecating anything until you've actually replicated all the functionality of these modules in Graph in a way that you're happy to support in production.