Get-MgBetaServicePrincipalMemberObject
POST /servicePrincipals/{servicePrincipal-id}/getMemberObjects (beta)
Module: Microsoft.Graph.Beta.Applications
Permissions
Delegated (work or school)
- Application.Read.All (least privilege)
- User.ReadWrite.All
- Directory.ReadWrite.All
- User.Read
- GroupMember.ReadBasic.All
- GroupMember.Read.All
- Group.ReadWrite.All
- Group.ReadBasic.All
- Group.Read.All
- Application.ReadWrite.All
- Directory.Read.All
- Device.Read.All
- AgentIdUser.ReadWrite.IdentityParentedBy
- AgentIdUser.ReadWrite.All
- User.Read.All
Delegated (personal)
No permission metadata available for this account type.
Application
- Application.Read.All (least privilege)
- AgentIdUser.ReadWrite.IdentityParentedBy
- User.Read.All
- GroupMember.ReadBasic.All
- GroupMember.Read.All
- Group.ReadWrite.All
- Group.ReadBasic.All
- Group.Read.All
- User.ReadWrite.All
- Directory.Read.All
- Device.ReadWrite.All
- Device.Read.All
- Application.ReadWrite.All
- Directory.ReadWrite.All
- AgentIdUser.ReadWrite.All
Source: Microsoft Graph PowerShell SDK metadata
Confirm property-specific permissions, Entra roles, licensing and ownership requirements in the official documentation. SDK metadata outside the verified sample is not independently certified.