Get-MgBetaUser
GET /users/{user-id} (beta)
Module: Microsoft.Graph.Beta.Users
Permissions
Delegated (work or school)
- User.ReadBasic.All (least privilege)
- AgentIdUser.ReadWrite.IdentityParentedBy
- DeviceManagementServiceConfig.ReadWrite.All
- DeviceManagementApps.Read.All
- User.ReadWrite.All
- User.ReadWrite
- User.Read.All
- User.Read
- Directory.ReadWrite.All
- AgentIdUser.ReadWrite.All
- Directory.Read.All
- DeviceManagementServiceConfig.Read.All
- DeviceManagementManagedDevices.ReadWrite.All
- DeviceManagementManagedDevices.Read.All
- DeviceManagementConfiguration.ReadWrite.All
- DeviceManagementConfiguration.Read.All
- DeviceManagementApps.ReadWrite.All
Delegated (personal)
- User.Read (least privilege)
- User.ReadWrite
Application
- User.ReadBasic.All (least privilege)
- DeviceManagementManagedDevices.Read.All
- AgentIdUser.ReadWrite.IdentityParentedBy
- DeviceManagementApps.Read.All
- DeviceManagementApps.ReadWrite.All
- DeviceManagementConfiguration.Read.All
- DeviceManagementConfiguration.ReadWrite.All
- DeviceManagementServiceConfig.Read.All
- User.ReadWrite.CrossCloud
- DeviceManagementServiceConfig.ReadWrite.All
- Directory.Read.All
- Directory.ReadWrite.All
- User.Read.All
- User.ReadWrite.All
- DeviceManagementManagedDevices.ReadWrite.All
- AgentIdUser.ReadWrite.All
Source: Microsoft Graph PowerShell SDK metadata
Confirm property-specific permissions, Entra roles, licensing and ownership requirements in the official documentation. SDK metadata outside the verified sample is not independently certified.
GET /users (beta)
Module: Microsoft.Graph.Beta.Users
Permissions
Delegated (work or school)
- User.ReadBasic.All (least privilege)
- User.Read.All
- User.ReadWrite.All
- Directory.Read.All
- Directory.ReadWrite.All
Delegated (personal)
Not supported.
Application
- User.Read.All (least privilege)
- User.ReadWrite.All
- Directory.Read.All
- Directory.ReadWrite.All
Source: Microsoft Learn endpoint permissions · Official endpoint documentation
Confirm property-specific permissions, Entra roles, licensing and ownership requirements in the official documentation. SDK metadata outside the verified sample is not independently certified.