How can I get the Owner and the 'Users and Group' assigned to the Enterprise Application or Service principal

Question

Using PowerShell Microsoft Graph, how can I get/retrieve the list of Owners and the 'Users and Group' assigned to the Enterprise Application or Service principal?

When I tried using the below cmdlet, it threw an error about the object cannot be found.

$AppDisplayName = 'WunderList'
$ApplicationID = 'GUID'$ObjectID = 'GUID'
Get-MgApplicationOwner -ApplicationId $ApplicationID
Get-MgApplicationOwnerByRef -ApplicationId $ApplicationID
Get-MgApplicationOwnerAsUser -ApplicationId $ApplicationID
Get-MgApplicationOwnerAsUser -ApplicationId $ApplicationID -DirectoryObjectId $ObjectID -Property *
Get-MgApplicationOwnerAsAppRoleAssignment -ApplicationId $ApplicationID
Get-MgApplicationOwnerAsAppRoleAssignment -ApplicationId $ApplicationID -DirectoryObjectId $ObjectID

I really appreciate any help you can provide.

Answer 1

Hello @EnterpriseArchitect

Thank you for contacting Microsoft Azure QnA platform. I would like to share following commands which can be helpful to get the details you are looking for:

{$applicationId = App-Registration-ObjectID; $servicePrincipalId = Service-Principal-ObjectID}

Microsoft Graph PowerShell Commands:

• Get-MgBetaApplicationOwner -ApplicationId $applicationId
• Get-MgBetaServicePrincipalAppRoleAssignedTo -ServicePrincipalId $servicePrincipalId
• Get-MgBetaServicePrincipalOwner -ServicePrincipalId $servicePrincipalId

Microsoft Graph API Query:

• https://graph.microsoft.com/beta/applications/{App-Registration-ObjectID}/owners
• https://graph.microsoft.com/beta/ServicePrincipals/{Service-Principal-ObjectID}/appRoleAssignedTo
• https://graph.microsoft.com/beta/ServicePrincipals/{Service-Principal-ObjectID}/Owners

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.