Edit

New-AzureADMSAdministrativeUnit

  • Reference
Module:
AzureADPreview

Creates an administrative unit.

Syntax

New-AzureADMSAdministrativeUnit
   [-InformationAction <ActionPreference>]
   [-InformationVariable <String>]
   [-Description <String>]
   -DisplayName <String>
   [-IsMemberManagementRestricted <Boolean>]
   [-MembershipRule <String>]
   [-MembershipRuleProcessingState <String>]
   [-MembershipType <String>]
   [<CommonParameters>]

Description

The New-AzureADMSAdministrativeUnit cmdlet creates an administrative unit in Azure Active Directory (AD).

Examples

Example 1

PS C:\> $adminUnit = New-AzureADMSAdministrativeUnit -DisplayName "Example Admin Unit" -Description "An example of an administrative unit" -MembershipType "Dynamic" -MembershipRuleProcessingState "On" -MembershipRule '(user.country -eq "United States")'

Creates a new administrative unit called Example Admin Unit with a dynamic membership rule to include all users in the United States.

Parameters

-Description

Specifies a description for the new administrative unit.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-DisplayName

Specifies the display name of the new administrative unit.

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-InformationAction

Specifies how this cmdlet responds to an information event. The acceptable values for this parameter are:

  • Continue
  • Ignore
  • Inquire
  • SilentlyContinue
  • Stop
  • Suspend
Type:ActionPreference
Aliases:infa
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-InformationVariable

Specifies an information variable.

Type:String
Aliases:iv
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-IsMemberManagementRestricted

Indicates whether the management rights on resources in the administrative units should be restricted to ONLY the administrators scoped on the AU object. If no value is specified, it will default to false.

Type:Boolean
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MembershipRule

Specifies the membership rule for a dynamic administrative unit.

For more information about the rules that you can use for dynamic administrative units and dynamic groups, see Using attributes to create advanced rules.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MembershipRuleProcessingState

Specifies the rule processing state. The acceptable values for this parameter are:

  • "On". Process the group rule.
  • "Paused". Stop processing the group rule.

Changing the value of the processing state does not change the members list of the administrative unit.

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-MembershipType

Specifies whether the membership of this administrative unit is controlled dynamically or by manual assignment. The acceptable values for this parameter are:

  • Assigned
  • Dynamic
Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False