Entra ID

PowerShell scripts for managing Azure AD / Entra ID via the Microsoft Graph PowerShell SDK.

Prerequisites

All scripts in this section require the Microsoft Graph PowerShell modules:


Install-Module Microsoft.Graph -Scope CurrentUser

Some scripts also require:


Install-Module Az -Scope CurrentUser
Install-Module ImportExcel -Scope CurrentUser

Permission Audit — Export roles, group memberships, and RBAC assignments to Excel
Permission Audit (Multi-Tenant) — Same audit across multiple tenants
MFA Enforcement Report — Check which users have MFA methods registered
Risky Sign-Ins Report — Pull recent risky sign-in activity
Blocked Sign-In Users — List users with blocked sign-in
Disabled & Stale Accounts — Find and optionally disable inactive accounts
Guest Users Audit — Export all guest user accounts
Force Password Change — Force a user to change their password at next sign-in
Create Groups — Create security or M365 groups (single or from CSV)
Create Security Groups — Bulk-create common security groups
User Group Membership — Extract and copy group memberships between users
Dynamic Group Rules — Useful dynamic group membership rules