Get-MgBetaUserByUserPrincipalName
GET /users(userPrincipalName='{userPrincipalName}') (beta)
Module: Microsoft.Graph.Beta.Users
Permissions
Delegated (work or school)
- User.ReadBasic.All (least privilege)
- User.ReadWrite.All
- DeviceManagementManagedDevices.Read.All
- User.Read.All
- Directory.ReadWrite.All
- Directory.Read.All
- DeviceManagementServiceConfig.ReadWrite.All
- DeviceManagementServiceConfig.Read.All
- DeviceManagementManagedDevices.ReadWrite.All
- DeviceManagementApps.ReadWrite.All
- DeviceManagementConfiguration.ReadWrite.All
- DeviceManagementConfiguration.Read.All
- DeviceManagementApps.Read.All
- AgentIdUser.ReadWrite.IdentityParentedBy
- AgentIdUser.ReadWrite.All
Delegated (personal)
No permission metadata available for this account type.
Application
- User.ReadBasic.All (least privilege)
- AgentIdUser.ReadWrite.IdentityParentedBy
- User.ReadWrite.All
- User.Read.All
- Directory.ReadWrite.All
- Directory.Read.All
- DeviceManagementServiceConfig.ReadWrite.All
- DeviceManagementServiceConfig.Read.All
- User.ReadWrite.CrossCloud
- DeviceManagementManagedDevices.Read.All
- DeviceManagementConfiguration.ReadWrite.All
- DeviceManagementConfiguration.Read.All
- DeviceManagementApps.ReadWrite.All
- DeviceManagementApps.Read.All
- DeviceManagementManagedDevices.ReadWrite.All
- AgentIdUser.ReadWrite.All
Source: Microsoft Graph PowerShell SDK metadata
Confirm property-specific permissions, Entra roles, licensing and ownership requirements in the official documentation. SDK metadata outside the verified sample is not independently certified.