AAD

AAD Enumeration with powershell

install-module AzureAD
Connect-AzureAD
Get-AzureADUser -All $true
Get-AzureADUser 
Get-AzureADUser -All $true | Where-Object { $_.UserType -eq 'Member' } | Select-Object UserPrincipalName

Get-AzureADUser cmdlet with filtering and the Select-Object cmdlet to get the top 100 non-guest accounts. Here’s how:

Get-AzureADUser -All $true | Where-Object { $_.UserType -eq 'Member' } | Select-Object -First 100

Connect-AzureAD: Connects to Azure Active Directory

Connect-AzureAD

Get-AzureADUser: Retrieves user information

Get-AzureADUser -All $true

Get-AzureADGroup: Lists all groups in Azure AD

Get-AzureADGroup

Get-AzureADGroupMember: Lists members of a specific group

Get-AzureADGroupMember -ObjectId "GROUP_ID"

Get-AzureADDirectoryRole: Retrieves directory roles

Get-AzureADDirectoryRole

Get-AzureADDirectoryRoleMember: Lists members of a directory role

Get-AzureADDirectoryRoleMember -ObjectId "ROLE_ID"

Get-AzureADPolicy: Retrieves Azure AD policies

Get-AzureADPolicy

Get-AzureADServicePrincipal: Lists service principals

Get-AzureADServicePrincipal

Get-AzureADUserLicenseDetail: Retrieves license details for a user

Get-AzureADUserLicenseDetail -ObjectId "USER_ID"

Get-AzureADUserMembership: Lists group memberships for a user

Get-AzureADUserMembership -ObjectId "USER_ID"

Other Azure AD command's

Name	Description
Get-AzureADDevice	Can help you to retrieve the details of the lists of devices from your Azure AD.
New-AzureADDevice	Helps you to create a brand new device in your Azure Active Directory.
Set-AzureADDevice	Updates the details of your Azure AD device.
Remove-AzureADDevice	Remove an Azure AD device.
Get-AzureADPolicy	Retrieve the details of your Azure AD Policy.
New-AzureADPolicy	Create a brand new Azure AD Policy using this PowerShell command.
Set-AzureADPolicy	Update your Azure AD Policy.
Remove-AzureADPolicy	Delete any unwanted Azure AD policy using this PowerShell command.
Get-AzureADDirectoryRole	Retrieve the details of a directory role from your Azure Active Directory using this command.
Update-AzADUser	Update the entities in the Azure Active Directory users.
Get-AzureADObjectByObjectId	This command will retrieve the details of a directory role from your Azure Active Directory.
Disconnect-AzureAD	Helps you to disconnect your current session from your Azure Active Directory tenant.
Connect-AzureAD	Helps you to use Azure AD cmdlet requests by connecting with an authenticated account.
Get-AzureADUserMembership	Use this command to get the specified user membership in the Azure AD.
Get-AzureADUser	Helps you to get user details from your Azure Active Directory.
Get-AzADUser	Can get you the list of AD users.
Remove-AzADGroup	Use this command to remove the entity from the Azure AD groups.
Get-AzADApplication	Helps get the objects’ details based on the specified Object IDs.
New-AzADApplication	Use the New-AzADApplication PowerShell cmdlet to add the new entity to your applications.
Get-AzADGroup	Use this command to get the lists of Azure Active Directory Groups.
Get-AzSecuritySetting	It will get you the security settings in the Azure Security Center.
Get-AzTenant	Get the list of entities from the applications.
New-AzTag	It helps you quickly create a predefined Azure tag.
Get-AzTag	Can help you to retrieve the lists of predefined Azure tags from your subscription.
Add-AzRouteConfig	Use this command to add a route to a specified Azure route table.
Get-AzRouteTable	This can help you to retrieve the route tables under a Resource Group.
Get-AzStorageContainer	Helps you to retrieve the lists of Azure storage containers.
Remove-AzStorageContainer	Helps you to remove the storage container that you have specified with this command.
New-AzStorageContext	Get the lists of storage queues associated with the specified storage account.
Get-AzADServicePrincipal	Use this command to get the entities from the service principals.
New-AzADSpCredential	It helps you to add a credential to an existing service principal.
Update-AzConfig	Update the configs of your Azure PowerShell using this command.
Uninstall-AzureRm	Helps you to uninstall or remove all the AzureRm modules from your machine
Set-AzDefault	Helps you to create an Azure Storage context quickly.
Save-AzContext	Can help you to save the Az context of your current Azure session into a specified location or path.
Get-AzEnvironment	Retrieve the endpoints and the metadata for the instance of the Azure services.
Get-AzProviderFeature	Use this command to add edit or set the default to your current Azure Context.
Get-AzPolicyAssignment	Retrieve the policy assignments.
Clear-AzDefault	Helps to clear the current context default values set by the user.
Clear-AzConfig	Helps you to retrieve the feature details like Feature name, Registration State, Provider name, etc. in a second.
New-AzManagementGroup	Clear all the configuration values set by the user using this command.
Set-AzResourceGroup	Create a management group in seconds using this command.
Remove-AzResource	Removes the specified Azure resource.
New-AzRoleAssignment	Helps you to assign an RBAC role to a specific principal for a specified scope.
Remove-AzResourceLock	Removes a lock from an Azure resource.
New-AzResource	Modify your Azure resource group in seconds.
Export-AzResourceGroup	Save your resource group as a template with a JSON file format.
Get-AzRoleDefinition	Retrieve the list of Azure RBAC roles that are available that you can assign.
Get-AzRoleAssignment	Quickly create an Azure resource like a website or an Azure SQL database/server in a resource group.
Get-AzResourceProvider	Quickly get the Azure resource provider.
Get-AzResourceLock	Retrieve the Azure resource locks.
Get-AzResource	Get a list of all the Azure resources.
Get-AzConfig	Retrieve the lists of all the configs of your Azure PowerShell.
Get-AzContext	Retrieve the metadata details.
Add-AzureAccount	Add the Azure account to the Windows PowerShell.
Set-AzContext	It helps you set the subscription, tenant, and environments for different PowerShell commands for your current PowerShell session.
connect-AzAccount	It helps you help you connect to Azure with one particular authenticated account.
Disconnect-AzAccount	Disconnect an Azure account that you are connected to currently.
Clear-AzContext	Delete/clear all the Azure credentials, subscription and account details, etc.
Get-AzLocation	Retrieve the location details and their supported resource providers.
Get-AzDeployment	Retrieve the deployment details under the current subscription.
Start-ADSyncSyncCycle	Helps to force Sync Azure AD Connect or to run a sync cycle manually.
Get-AzureADMSGroup	Get the details of the Azure AD groups via the MS Graph.
Set-AzureADMSGroup	Modify different properties of the Azure AD group.
Get-AzureADServicePrincipal	Retrieve the list of service principals from your Azure Active Directory.
Get-AzureADMSDeletedDirectoryObject	Get the soft deleted AD object from the Azure Active Directory.
Get-AzSubscription	Retrieve the List of Azure Subscriptions.
Get-azurermsubscription	Get the subscription details that the current account can access.
Connect-AzureRMAccount	Helps to connect to the authenticated account for using the Azure RM cmdlets.
Select-AzureSubscription	Can get you the lists of all the role assignments under your subscription or a specific scope.
New-AzureADMSInvitation	Can help you to invite an external user to your Azure Active directory.
Connect-msolservice	Can help you to initiate a connection to your Azure Active Directory.
Get-AzMetric	Can help you to retrieve the metric values of an Azure resource.
Get-AzSqlDatabase	Help you to set and clear your current and default Azure subscriptions.
Get-AzSqlServer	Help you retrieve the Azure SQL database lists from your Azure SQL Database Server.
Get-AzStorageTable	Can help you to create a storage table quickly.
Set-AzStorageAccount	Use this Azure PowerShell command to modify or update your Azure Storage account.
Get-AzActivityLog	Can help you to get the lists of available storage tables associated with the specified Storage account.
Get-AzADGroupMember	Help you retrieve the Activity Log event lists from your Azure Subscription.
New-AzADGroup	Can help you to create a new Azure AD group.
New-AzADUser	Can help you to create a new Azure AD user.
Add-AzADGroupMember	Helps you to add members to an Azure AD group.
Get-AzADAppCredential	Help you to list the members from an Azure AD group.
Start-AzVM	It helps to start your Azure VM.
Get-AzWebApp	It helps you to retrieve information about your Azure Web App.
Set-AzWebApp	It can help you modify your Azure Web App.
Get-AzApplicationInsights	It helps you to return the Application Insights components.
Get-AzAppServicePlan	It helps to retrieve an Azure App Service plan in the resource group that you have specified.
Get-Aduser	It helps you quickly find the AD users in your domain.
Get-AzVirtualNetwork	It helps you helps to retrieve the lists of virtual networks under a resource group.
Get-AzVirtualNetworkSubnetConfig	It helps you to retrieve the details of a subnet inside a Virtual network.
New-AzAppServicePlan	It helps you retrieve the details of a subnet inside a virtual network.
Get-AzKeyVaultSecret	It can help you quickly create an App service plan for a specific region.
Get-AzDisk	It helps you to retrieve the properties of a Managed disk.

Name	Description
Azure Powershell change subscription	Learn how the Select-AZSubscription command can be used to change the Azure subscription.
How to get tenant id in Azure using PowerShell	Check out how to get tenant id in Azure using PowerShell.
Azure PowerShell List Resource Groups	Learn how to list Resource Groups using the PowerShell command Get-AzResourceGroup.