Add Enterprise Application to Users-Powershell

Hi Dev Magar,

Assign a user to a specific app role within an application:

$username = "" $app_name = "" $app_role_name = "" # Get the user to assign, and the service principal for the app to assign to $user = Get-AzureADUser -ObjectId "$username" $sp = Get-AzureADServicePrincipal -Filter "displayName eq '$app_name'" $appRole = $sp.AppRoles | Where-Object { $_.DisplayName -eq $app_role_name } #Assign the user to the app role New-AzureADUserAppRoleAssignment -ObjectId $user.ObjectId -PrincipalId $user.ObjectId -ResourceId $sp.ObjectId -Id $appRole.Id

Assign a user to an application without roles

# Get the service principal of the app to assign the user to $servicePrincipal = Get-AzureADServicePrincipal -SearchString "" # Get the user to be assigned $user = Get-AzureADUser -searchstring "" # Create the user app role assignment New-AzureADUserAppRoleAssignment -ObjectId $user.ObjectId -PrincipalId $user.ObjectId -ResourceId $servicePrincipal.ObjectId -Id ([Guid]::Empty)

if you have any doughts please refer url

https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureaduserapproleassignment?view=azureadps-2.0

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Srikanthreddy Bandi8y ago
Hi Dev Magar,

Assign a user to a specific app role within an application:

$username = "" $app_name = "" $app_role_name = "" # Get the user to assign, and the service principal for the app to assign to $user = Get-AzureADUser -ObjectId "$username" $sp = Get-AzureADServicePrincipal -Filter "displayName eq '$app_name'" $appRole = $sp.AppRoles | Where-Object { $_.DisplayName -eq $app_role_name } #Assign the user to the app role New-AzureADUserAppRoleAssignment -ObjectId $user.ObjectId -PrincipalId $user.ObjectId -ResourceId $sp.ObjectId -Id $appRole.Id

Assign a user to an application without roles

# Get the service principal of the app to assign the user to $servicePrincipal = Get-AzureADServicePrincipal -SearchString "" # Get the user to be assigned $user = Get-AzureADUser -searchstring "" # Create the user app role assignment New-AzureADUserAppRoleAssignment -ObjectId $user.ObjectId -PrincipalId $user.ObjectId -ResourceId $servicePrincipal.ObjectId -Id ([Guid]::Empty)

if you have any doughts please refer url

https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureaduserapproleassignment?view=azureadps-2.0