New-EntraDevice

New-EntraDevice

    -DisplayName <String>
    -DeviceOSType <String>
    -AccountEnabled <Boolean>
    -DeviceId <String>
    -DeviceOSVersion <String>
    -AlternativeSecurityIds <System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.AlternativeSecurityId]>
    [-DevicePhysicalIds <System.Collections.Generic.List`1[System.String]>]
    [-DeviceTrustType <String>]
    [-DeviceMetadata <String>]
    [-ApproximateLastLogonTimeStamp <DateTime>]
    [-IsManaged <Boolean>]
    [-DeviceObjectVersion <Int32>]
    [-IsCompliant <Boolean>]
    [-ProfileType <String>]
    [-SystemLabels <System.Collections.Generic.List`1[System.String]>]
    [<CommonParameters>]

The New-EntraDevice cmdlet creates a device in Microsoft Entra ID.

In delegated scenarios involving work or school accounts, the signed-in user must have a supported Microsoft Entra role or a custom role with the required permissions. The following least privileged roles are supported for this operation:

• Intune Administrator
• Windows 365 Administrator

Connect-Entra -Scopes 'Directory.AccessAsUser.All', 'Device.ReadWrite.All'
$guid = [guid]::NewGuid()
$newId = New-Object Microsoft.Open.AzureAD.Model.AlternativeSecurityId
$newId.Key = [System.Text.Encoding]::UTF8.GetBytes('test')
$newId.type = 2
$params = @{
    AccountEnabled         = $true
    DisplayName            = 'My new device'
    AlternativeSecurityIds = $newId
    DeviceId               = $guid
    DeviceOSType           = 'OS/2'
    DeviceOSVersion        = '9.3'
}
New-EntraDevice @params

ObjectId                             DeviceId                             DisplayName
--------                             --------                             -----------
aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb dddddddd-3333-4444-5555-eeeeeeeeeeee My new device

This command creates a new device.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.