Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community
SOLVED

extension attributes

Steel Contributor

I'm confused on the different extension attributes

 

When using get-azureaduserextension, you get a list of extension attributes in the following format:

extension_000c7c1090b04b55a0729dde2c757000_extensionAttribute1 

extension_000c7c1090b04b55a0729dde2c757000_extensionAttribute2

...

 

These are also present using the MS graph https://graph.microsoft.com/beta/Users/<upn>/ 

"extension_000c7c1090b04b55a0729dde2c757000_extensionAttribute1": "value",
"extension_000c7c1090b04b55a0729dde2c757000_extensionAttribute2": "value",

 

However you can also query https://graph.microsoft.com/beta/Users/<upn>/onPremisesExtensionAttributes

which returns:

"extensionAttribute1": "value",
"extensionAttribute2": "value",

 

Are "extension_0...0_extensionAttribute*" identical to "extensionAttribute*"? Where and when are these synced? 

 

We have one extensionAttribute which is not present as extension_0...0_extensionAttribute.

 

How can we make sure all extensionAttributes are also available as extension_0...0_extensionAttribute?

Can Powershell also returns extensionAttributes (instead of extension_0...0_extensionAttributes) ? 

 

Thanks!

 

Bart

1 Reply
best response confirmed by bart vermeersch (Steel Contributor)
Solution

No they aren't. The first set is custom "extensions" you've configured via AAD Connect/matching app on AAD side. Like when you want to create an user_likes_which_color attribute. The second one is the "standard" set of extension attributes you get in the (Exchange) AD schema, customattributeXX (and the extended ones).

1 best response

Accepted Solutions
best response confirmed by bart vermeersch (Steel Contributor)
Solution

No they aren't. The first set is custom "extensions" you've configured via AAD Connect/matching app on AAD side. Like when you want to create an user_likes_which_color attribute. The second one is the "standard" set of extension attributes you get in the (Exchange) AD schema, customattributeXX (and the extended ones).

View solution in original post