Invoke-MgBetaInvalidateAllUserRefreshToken
POST /users/{user-id}/invalidateAllRefreshTokens (beta)
Module: Microsoft.Graph.Beta.Users.Actions
Permissions
Delegated (work or school)
- User.RevokeSessions.All (least privilege)
- User.ReadWrite
- Directory.ReadWrite.All
Delegated (personal)
- User.ReadWrite (least privilege)
Application
- User.RevokeSessions.All (least privilege)
Source: Microsoft Graph PowerShell SDK metadata
Confirm property-specific permissions, Entra roles, licensing and ownership requirements in the official documentation. SDK metadata outside the verified sample is not independently certified.