Add-EntraBetaAdministrativeUnitMember

Add-EntraBetaAdministrativeUnitMember

    -MemberId <String>
    -AdministrativeUnitId <String>
    [<CommonParameters>]

The Add-EntraBetaAdministrativeUnitMember cmdlet adds a Microsoft Entra ID administrative unit member.

Administrative units enable more granular management of permissions and access, particularly in large organizations or where administrative responsibilities are divided across departments or regions.

In delegated scenarios, adding a user, group, or device to an administrative unit requires:

• Privileged Role Administrator

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraBetaAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$user = Get-EntraBetaUser -UserId 'SawyerM@contoso.com'
Add-EntraBetaAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $user.Id

This example demonstrates adding an administrative unit member. Use Get-EntraBetaAdministrativeUnit to find the administrative unit ID and Get-EntraBetaUser to find the user ID.

• AdministrativeUnitId parameter specifies the ID of an administrative unit.
• MemberId parameter specifies the ID of the user you want to add as a member of the administrative unit.

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraBetaAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$group = Get-EntraBetaGroup -SearchString 'Sales and Marketing'
Add-EntraBetaAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $group.Id

This example demonstrates adding an administrative unit member. Use Get-EntraBetaAdministrativeUnit to find the administrative unit ID and Get-EntraBetaGroup to find the group ID.

• AdministrativeUnitId parameter specifies the ID of an administrative unit.
• MemberId parameter specifies the ID of the group you want to add as a member of the administrative unit.

Connect-Entra -Scopes 'AdministrativeUnit.ReadWrite.All'
$administrativeUnit = Get-EntraBetaAdministrativeUnit -Filter "DisplayName eq '<administrativeunit-display-name>'"
$device = Get-EntraBetaDevice -SearchString 'ContosoDesktop01'
Add-EntraBetaAdministrativeUnitMember -AdministrativeUnitId $administrativeUnit.Id -MemberId $device.Id

This example demonstrates adding an administrative unit member. Use Get-EntraBetaAdministrativeUnit to find the administrative unit ID and Get-EntraBetaDevice to find the device ID.

• AdministrativeUnitId parameter specifies the ID of an administrative unit.
• MemberId parameter specifies the ID of the device you want to add as a member of the administrative unit.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.