Microsoft.Entra.Applications

0.20.0-preview

Microsoft.Entra.Applications-Help.xml

                                <?xml version="1.0" encoding="utf-8"?>

<helpItems schema="maml" xmlns="http://msh">

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Add-EntraApplicationOwner</command:name>

      <command:verb>Add</command:verb>

      <command:noun>EntraApplicationOwner</command:noun>

      <maml:description>

        <maml:para>Adds an owner to an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Add-EntraApplicationOwner` cmdlet adds an owner to a Microsoft Entra ID application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Add-EntraApplicationOwner</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>RefObjectId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the Microsoft Entra ID object to assign as owner/manager/member.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>RefObjectId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the Microsoft Entra ID object to assign as owner/manager/member.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----- Example 1: Add a user as an owner to an application -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

$user = Get-EntraUser -UserId 'SawyerM@contoso.com'

Add-EntraApplicationOwner -ApplicationId $application.Id -RefObjectId $user.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to add an owner to an application in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the ID of an application.</maml:para>

          <maml:para>- `-RefObjectId` parameter specifies the ID of a user.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Add-EntraApplicationOwner</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Add-EntraServicePrincipalDelegatedPermissionClassification</command:name>

      <command:verb>Add</command:verb>

      <command:noun>EntraServicePrincipalDelegatedPermissionClassification</command:noun>

      <maml:description>

        <maml:para>Add a classification for a delegated permission.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Add-EntraServicePrincipalDelegatedPermissionClassification` cmdlet creates a delegated permission classification for the given permission on service principal.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Add-EntraServicePrincipalDelegatedPermissionClassification</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a service principal object in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PermissionId</maml:name>

          <maml:description>

            <maml:para>The ID for a delegated permission.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PermissionName</maml:name>

          <maml:description>

            <maml:para>The name for a delegated permission.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Classification</maml:name>

          <maml:description>

            <maml:para>The classification for a delegated permission. This parameter can take one of the following values:</maml:para>

            <maml:para>- Low: Specifies a classification for a permission as low impact.</maml:para>

            <maml:para>- Medium: Specifies a classification for a permission as medium impact.</maml:para>

            <maml:para>- High: Specifies a classification for a permission as high impact.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">ClassificationEnum</command:parameterValue>

          <dev:type>

            <maml:name>ClassificationEnum</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of a service principal object in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PermissionId</maml:name>

        <maml:description>

          <maml:para>The ID for a delegated permission.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PermissionName</maml:name>

        <maml:description>

          <maml:para>The name for a delegated permission.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Classification</maml:name>

        <maml:description>

          <maml:para>The classification for a delegated permission. This parameter can take one of the following values:</maml:para>

          <maml:para>- Low: Specifies a classification for a permission as low impact.</maml:para>

          <maml:para>- Medium: Specifies a classification for a permission as medium impact.</maml:para>

          <maml:para>- High: Specifies a classification for a permission as high impact.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">ClassificationEnum</command:parameterValue>

        <dev:type>

          <maml:name>ClassificationEnum</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>Microsoft.Online.Administration.DelegatedPermissionClassification</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>---- Example 1: Create Delegated Permission Classification ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Policy.ReadWrite.PermissionGrant'

$ServicePrincipal = Get-EntraServicePrincipal -Filter "DisplayName eq '&lt;service-principal-display-name&gt;'"

$PermissionId = $ServicePrincipal.PublishedPermissionScopes[0].Id

$PermissionName =  $ServicePrincipal.PublishedPermissionScopes[0].Value

$params = @{

    ServicePrincipalId = $ServicePrincipal.ObjectId

    PermissionId = $PermissionId

    Classification = 'Low'

    PermissionName = $PermissionName

}

Add-EntraServicePrincipalDelegatedPermissionClassification @params

Id                      Classification PermissionId                         PermissionName

--                      -------------- ------------                         --------------

T2qU_E28O0GgkLLIYRPsTwE low            fc946a4f-bc4d-413b-a090-b2c86113ec4f LicenseManager.AccessAsUser</dev:code>

        <dev:remarks>

          <maml:para>This command creates a delegated permission classification for the given permission on the service principal. You can use the command `Get-EntraServicePrincipal` to get service principal ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal.</maml:para>

          <maml:para>- `-PermissionId` parameter specifies the ID for a delegated permission.</maml:para>

          <maml:para>- `-Classification` parameter specifies the classification for a delegated permission.</maml:para>

          <maml:para>- `-PermissionName` parameter specifies the name for a delegated permission.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Add-EntraServicePrincipalDelegatedPermissionClassification</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalDelegatedPermissionClassification</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalDelegatedPermissionClassification</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Add-EntraServicePrincipalOwner</command:name>

      <command:verb>Add</command:verb>

      <command:noun>EntraServicePrincipalOwner</command:noun>

      <maml:description>

        <maml:para>Adds an owner to a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Add-EntraServicePrincipalOwner` cmdlet adds an owner to a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Add-EntraServicePrincipalOwner</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>RefObjectId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the Microsoft Entra ID object to assign as owner/manager/member.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>RefObjectId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the Microsoft Entra ID object to assign as owner/manager/member.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--- Example 1: Add a user as an owner to a service principal ---</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$owner = Get-EntraUser -UserId 'SawyerM@contoso.com'

Add-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id -RefObjectId $owner.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to add an owner to a service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal ID.</maml:para>

          <maml:para>- `-RefObjectId` parameter specifies the user object ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Add-EntraServicePrincipalOwner</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraUser</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplication</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplication</command:noun>

      <maml:description>

        <maml:para>Gets an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplication` cmdlet gets a Microsoft Entra ID application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Filter</maml:name>

          <maml:description>

            <maml:para>Specifies an OData v4.0 filter statement. This parameter controls which objects are returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

      <command:syntaxItem>

        <maml:name>Get-EntraApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

      <command:syntaxItem>

        <maml:name>Get-EntraApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>SearchString</maml:name>

          <maml:description>

            <maml:para>Specifies a search string.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Filter</maml:name>

        <maml:description>

          <maml:para>Specifies an OData v4.0 filter statement. This parameter controls which objects are returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>SearchString</maml:name>

        <maml:description>

          <maml:para>Specifies a search string.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>-------- Example 1: Get an application by ApplicationId --------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraApplication -ApplicationId 'aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb'

DisplayName         Id                                   AppId                                SignInAudience PublisherDomain

-----------         --                                   -----                                -------------- ---------------

ToGraph_443democc3c aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve specific application by providing ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>--------------- Example 2: Get all applications ---------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraApplication -All

DisplayName         Id                                   AppId                                SignInAudience                     PublisherDomain

-----------         --                                   -----                                --------------                     ---------------

test app            aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADandPersonalMicrosoftAccount contoso.com

ToGraph_443DEM      cccccccc-4444-5555-6666-dddddddddddd dddddddd-5555-6666-7777-eeeeeeeeeeee AzureADMyOrg                       contoso.com

test adms           eeeeeeee-6666-7777-8888-ffffffffffff ffffffff-7777-8888-9999-gggggggggggg AzureADandPersonalMicrosoftAccount contoso.com

test adms app azure gggggggg-8888-9999-aaaa-hhhhhhhhhhhh hhhhhhhh-9999-aaaa-bbbb-iiiiiiiiiiii AzureADandPersonalMicrosoftAccount contoso.com

test adms2          iiiiiiii-aaaa-bbbb-cccc-jjjjjjjjjjjj jjjjjjjj-bbbb-cccc-dddd-kkkkkkkkkkkk AzureADandPersonalMicrosoftAccount contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get all applications from Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------ Example 3: Get applications with expiring secrets ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraApplication |

    Where-Object {

        $_.PasswordCredentials.keyId -ne $null -and

        $_.PasswordCredentials.EndDateTime -lt (Get-Date).AddDays(30)

    } |

    ForEach-Object {

        $_.DisplayName,

        $_.Id,

        $_.PasswordCredentials

    }

CustomKeyIdentifier DisplayName EndDateTime          Hint KeyId                                SecretText StartDateTime

------------------- ----------- -----------          ---- -----                                ---------- -------------

                    AppOne      8/19/2024 9:00:00 PM 1jQ  aaaaaaaa-0b0b-1c1c-2d2d-333333333333            8/6/2024 6:07:47 PM</dev:code>

        <dev:remarks>

          <maml:para>This example retrieves applications with expiring secrets within 30 days.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-------- Example 4: Get an application by display name --------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraApplication -Filter "DisplayName eq 'ToGraph_443DEMO'"

DisplayName     Id                                   AppId                                SignInAudience PublisherDomain

-----------     --                                   -----                                -------------- ---------------

ToGraph_443DEMO cccccccc-4444-5555-6666-dddddddddddd dddddddd-5555-6666-7777-eeeeeeeeeeee AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>In this example, we retrieve application by its display name from Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-------- Example 5: Search among retrieved applications --------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraApplication -SearchString 'My new application 2'

DisplayName          Id                                   AppId                                SignInAudience                     PublisherDomain

-----------          --                                   -----                                --------------                     ---------------

My new application 2 kkkkkkkk-cccc-dddd-eeee-llllllllllll llllllll-dddd-eeee-ffff-mmmmmmmmmmmm AzureADandPersonalMicrosoftAccount contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve applications for specific string from Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>----- Example 6: Retrieve an application by identifierUris -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraApplication -Filter "identifierUris/any(uri:uri eq 'https://wingtips.wingtiptoysonline.com')"</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve applications by its identifierUris from Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplication</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplicationExtensionProperty</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplicationExtensionProperty</command:noun>

      <maml:description>

        <maml:para>Gets application extension properties.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplicationExtensionProperty` cmdlet gets application extension properties in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationExtensionProperty</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the unique ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the unique ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>------------- Example 1: Get extension properties -------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

Get-EntraApplicationExtensionProperty -ApplicationId $application.Id

DeletedDateTime Id                                   AppDisplayName DataType IsMultiValued IsSyncedFromOnPremises Name                                                    TargetObjects

--------------- --                                   -------------- -------- ------------- ---------------------- ----                                                    -------------

                aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb                Boolean  False         False                  extension_c371a443f6734a3e8982a26357fb7d59_NewAttribute {User}</dev:code>

        <dev:remarks>

          <maml:para>This command gets the extension properties for the specified application in Microsoft Entra ID. You cane use the command `Get-EntraApplication` to get application ID.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplicationExtensionProperty</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplicationExtensionProperty</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationExtensionProperty</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplicationKeyCredential</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplicationKeyCredential</command:noun>

      <maml:description>

        <maml:para>Gets the key credentials for an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplicationKeyCredential` cmdlet retrieves the key credentials for an application. Specify `ObjectId` parameter to retrieve the key credentials for an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationKeyCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>Specifies a unique ID of an application in Microsoft Entra ID to retrieve key credentials. Use `Get-EntraApplication` for more details.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>Specifies a unique ID of an application in Microsoft Entra ID to retrieve key credentials. Use `Get-EntraApplication` for more details.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>---------------- Example 1: Get key credentials ----------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Get-EntraApplicationKeyCredential -ObjectId $application.Id

CustomKeyIdentifier DisplayName     EndDateTime           Key KeyId                                StartDateTime         Type               Usage

------------------- -----------     -----------           --- -----                                -------------         ----               -----

{116, 101, 115, 116…} MyApp Cert 6/27/2024 11:49:17 AM     bbbbbbbb-1c1c-2d2d-3e3e-444444444444 6/27/2023 11:29:17 AM AsymmetricX509Cert Verify</dev:code>

        <dev:remarks>

          <maml:para>This command gets the key credentials for the specified application.</maml:para>

          <maml:para>`-ObjectId` parameter specifies the ID of an application object in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplicationKeyCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplicationKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplicationLogo</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplicationLogo</command:noun>

      <maml:description>

        <maml:para>Retrieve the logo of an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplicationLogo` cmdlet retrieves the logo that is set for an application. Specify the `ApplicationId` parameter to get a specific application logo for an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationLogo</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>FileName</maml:name>

          <maml:description>

            <maml:para>If provided, the application logo is saved to the file using the specified file name.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>FilePath</maml:name>

          <maml:description>

            <maml:para>If provided, the application logo is copied with a random filename to the file path that is specified in this parameter.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>The ApplicationId of the application for which the logo is to be retrieved.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>View</maml:name>

          <maml:description>

            <maml:para>If set to $true, the application's logo is displayed in a new window on the screen.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

          <dev:type>

            <maml:name>System.Boolean</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>FileName</maml:name>

        <maml:description>

          <maml:para>If provided, the application logo is saved to the file using the specified file name.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>FilePath</maml:name>

        <maml:description>

          <maml:para>If provided, the application logo is copied with a random filename to the file path that is specified in this parameter.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>The ApplicationId of the application for which the logo is to be retrieved.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>View</maml:name>

        <maml:description>

          <maml:para>If set to $true, the application's logo is displayed in a new window on the screen.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>- Example 1: Get an application logo for an application by ID -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

Get-EntraApplicationLogo -ApplicationId $application.Id -FilePath 'D:\outfile1.jpg'</dev:code>

        <dev:remarks>

          <maml:para>This example shows how to retrieve the application logo for an application that is specified through the Object ID parameter.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplicationLogo</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraApplicationLogo</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplicationOwner</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplicationOwner</command:noun>

      <maml:description>

        <maml:para>Gets the owner of an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplicationOwner` cmdlet get an owner of an Microsoft Entra ID application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationOwner</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>---------- Example 1: Get the owner of an application ----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

Get-EntraApplicationOwner -ApplicationId $application.Id

Id                                   DeletedDateTime

--                                   ---------------

bbbbbbbb-1111-2222-3333-cccccccccccc

cccccccc-2222-3333-4444-dddddddddddd

dddddddd-3333-4444-5555-eeeeeeeeeeee

eeeeeeee-4444-5555-6666-ffffffffffff</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get the owners of an application in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>- Example 2: Get the details about the owner of an application -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -SearchString '&lt;application-name&gt;'

$applicationOwners = Get-EntraApplicationOwner -ObjectId $application.ObjectId

$ownerDetails = $applicationOwners | ForEach-Object {

    $ownerDetail = Get-EntraObjectByObjectId -ObjectIds $_.Id

    [PSCustomObject]@{

        displayName      = $ownerDetail.displayName

        Id               = $ownerDetail.Id

        UserPrincipalName = $ownerDetail.UserPrincipalName

        UserType         = $ownerDetail.UserType

        accountEnabled   = $ownerDetail.accountEnabled

    }

}

$ownerDetails | Format-Table -Property displayName, Id, UserPrincipalName, UserType, accountEnabled -AutoSize

displayName    Id                                   UserPrincipalName             UserType accountEnabled

-----------    --                                   -----------------             -------- --------------

Sawyer Miller  bbbbbbbb-1111-2222-3333-cccccccccccc SawyerM@contoso.com           Member   True

Adele Vance    ec5813fb-346e-4a33-a014-b55ffee3662b AdeleV@contoso.com            Member   True</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get the owners of an application in Microsoft Entra ID with more owner lookup details.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>--------- Example 3: Get all owners of an application ---------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

Get-EntraApplicationOwner -ApplicationId $application.Id -All

Id                                   DeletedDateTime

--                                   ---------------

bbbbbbbb-1111-2222-3333-cccccccccccc

cccccccc-2222-3333-4444-dddddddddddd

dddddddd-3333-4444-5555-eeeeeeeeeeee

eeeeeeee-4444-5555-6666-ffffffffffff</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get the all owners of a specified application in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------- Example 4: Get top two owners of an application -------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

Get-EntraApplicationOwner -ApplicationId $application.Id -Top 2

Id                                   DeletedDateTime

--                                   ---------------

bbbbbbbb-1111-2222-3333-cccccccccccc

cccccccc-2222-3333-4444-dddddddddddd</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get the two owners of a specified application in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplicationOwner</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Add-EntraApplicationOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplicationPasswordCredential</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplicationPasswordCredential</command:noun>

      <maml:description>

        <maml:para>Gets the password credential for an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplicationPasswordCredential` cmdlet receives the password credentials for a Microsoft Entra ID application. Specify `ApplicationId` parameter to cmdlet receives the password credentials.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationPasswordCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>The ApplicationId of the application for which to get the password credential. Use `Get-EntraApplication` for more details.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>The ApplicationId of the application for which to get the password credential. Use `Get-EntraApplication` for more details.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>- Example 1: Get password credential for specified application -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Get-EntraApplicationPasswordCredential -ApplicationId $application.Id

CustomKeyIdentifier  DisplayName EndDateTime         Hint KeyId                                SecretText StartDateTime

-------------------  ----------- -----------         ---- -----                                ---------- -------------

{100, 101, 109, 111} demo        26/07/2025 10:34:40 Ap6  bbbbbbbb-1111-2222-3333-cccccccccccc             26/07/2024 10:34:40</dev:code>

        <dev:remarks>

          <maml:para>This example shows how to retrieve the password credential for specified application.</maml:para>

          <maml:para>- `-ApplicationId` specifies the ID of an application object in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplicationPasswordCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplicationServiceEndpoint</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplicationServiceEndpoint</command:noun>

      <maml:description>

        <maml:para>Retrieve the service endpoint of an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplicationServiceEndpoint` cmdlet retrieves the service endpoint(s) of an application.</maml:para>

      <maml:para>The service endpoint entity contains service discovery information. The serviceEndpoints property of the Application entity is of type ServiceEndpoint.</maml:para>

      <maml:para>Other services can use the information stored in the ServiceEndpoint entity to find this service and its addressable endpoints.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationServiceEndpoint</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>Return all service endpoints.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the object ID of the application for which the service endpoint is retrieved.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of results that are returned. The default is 100.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>Return all service endpoints.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the object ID of the application for which the service endpoint is retrieved.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of results that are returned. The default is 100.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para>System.Nullable`1[[System.Boolean, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]] System.Nullable`1[[System.Int32, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]</maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>-- Example 1: Retrieve the application service endpoint by ID --</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "DisplayName eq 'Contoso Helpdesk App'"

Get-EntraApplicationServiceEndpoint -ServicePrincipalId $servicePrincipal.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve service endpoint of the application that is specified through the Object ID parameter.</maml:para>

          <maml:para>`-ServicePrincipalId` parameter specifies the ID of an application object in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------------- Example 2: Get all service endpoints -------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "DisplayName eq 'Contoso Helpdesk App'"

Get-EntraApplicationServiceEndpoint -ServicePrincipalId $servicePrincipal.Id -All</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve all service endpoints of a specified application.</maml:para>

          <maml:para>`-ServicePrincipalId` parameter specifies the ID of an application object in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>---------- Example 3: Get top five service endpoints ----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "DisplayName eq 'Contoso Helpdesk App'"

Get-EntraApplicationServiceEndpoint -ServicePrincipalId $servicePrincipal.Id -Top 5</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve five service endpoints of a specified application.</maml:para>

          <maml:para>`-ServicePrincipalId` parameter specifies the ID of an application object in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplicationServiceEndpoint</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraApplicationTemplate</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraApplicationTemplate</command:noun>

      <maml:description>

        <maml:para>Retrieve a list of applicationTemplate objects.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraApplicationTemplate` cmdlet allows users to get a list of all the application templates or a specific application template.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationTemplate</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Id</maml:name>

          <maml:description>

            <maml:para>The unique identifier of an application template.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

      <command:syntaxItem>

        <maml:name>Get-EntraApplicationTemplate</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Filter</maml:name>

          <maml:description>

            <maml:para>Specifies an OData v4.0 filter statement. This parameter controls which objects are returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Id</maml:name>

        <maml:description>

          <maml:para>The unique identifier of an application template.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Filter</maml:name>

        <maml:description>

          <maml:para>Specifies an OData v4.0 filter statement. This parameter controls which objects are returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>Microsoft.Online.Administration.ApplicationTemplate</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>---- Example 1. Gets a list of application template objects ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraApplicationTemplate</dev:code>

        <dev:remarks>

          <maml:para>This command gets all the application template objects</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-------- Example 2. Gets an application template object --------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$applicationTemplate = Get-EntraApplicationTemplate -Filter "DisplayName eq 'Dynamics CRM Online'"

Get-EntraApplicationTemplate -Id $applicationTemplate.Id

Id                                   Categories                                      Description

--                                   ----------                                      -----------

aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb {businessMgmt, productivity, projectManagement} Cube is perfect for businesses</dev:code>

        <dev:remarks>

          <maml:para>This command gets an application template object for the given id.</maml:para>

          <maml:para>- `-Id` Specifies the unique identifier of an application template.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraApplicationTemplate</maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraDeletedApplication</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraDeletedApplication</command:noun>

      <maml:description>

        <maml:para>Retrieves the list of previously deleted applications.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraDeletedApplication` cmdlet Retrieves the list of previously deleted applications.</maml:para>

      <maml:para>Note: Deleted security groups are permanently removed and cannot be retrieved.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraDeletedApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Filter</maml:name>

          <maml:description>

            <maml:para>Retrieve only those deleted applications that satisfy the filter.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>The maximum number of applications returned by this cmdlet. The default value is 100.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

      <command:syntaxItem>

        <maml:name>Get-EntraDeletedApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>SearchString</maml:name>

          <maml:description>

            <maml:para>Retrieve only those applications that satisfy the -SearchString value.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Filter</maml:name>

        <maml:description>

          <maml:para>Retrieve only those deleted applications that satisfy the filter.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>SearchString</maml:name>

        <maml:description>

          <maml:para>Retrieve only those applications that satisfy the -SearchString value.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>The maximum number of applications returned by this cmdlet. The default value is 100.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para>System.Nullable`1[[System.Boolean, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]] System.Nullable`1[[System.Int32, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]</maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--------- Example 1: Get list of deleted applications ---------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraDeletedApplication

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

TestApp1    aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADMyOrg   contoso.com

TestApp2    cccccccc-4444-5555-6666-dddddddddddd dddddddd-5555-6666-7777-eeeeeeeeeeee AzureADMyOrg   contoso.com

TestApp3    eeeeeeee-6666-7777-8888-ffffffffffff ffffffff-7777-8888-9999-gggggggggggg AzureADMyOrg   contoso.com

TestApp4    gggggggg-8888-9999-aaaa-hhhhhhhhhhhh hhhhhhhh-9999-aaaa-bbbb-iiiiiiiiiiii AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet retrieves the list of deleted applications.

</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Get list of deleted applications using All parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraDeletedApplication -All

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

TestApp1    aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADMyOrg   contoso.com

TestApp2    cccccccc-4444-5555-6666-dddddddddddd dddddddd-5555-6666-7777-eeeeeeeeeeee AzureADMyOrg   contoso.com

TestApp3    eeeeeeee-6666-7777-8888-ffffffffffff ffffffff-7777-8888-9999-gggggggggggg AzureADMyOrg   contoso.com

TestApp4    gggggggg-8888-9999-aaaa-hhhhhhhhhhhh hhhhhhhh-9999-aaaa-bbbb-iiiiiiiiiiii AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet retrieves the list of deleted applications using All parameter.

</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>--------- Example 3: Get top two deleted applications ---------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraDeletedApplication -Top 2

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

TestApp1    aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADMyOrg   contoso.com

TestApp2    cccccccc-4444-5555-6666-dddddddddddd dddddddd-5555-6666-7777-eeeeeeeeeeee AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet retrieves top two deleted applications.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 4: Get deleted applications using SearchString parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraDeletedApplication -SearchString 'TestApp1'

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

TestApp1    aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet retrieves deleted applications using SearchString parameter.

</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-- Example 5: Get deleted applications filter by display name --</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraDeletedApplication -Filter "DisplayName eq 'TestApp1'"

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

TestApp1    aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet retrieves deleted applications having specified display name.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title> Example 6: Get deleted applications with deletion age in days </maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraDeletedApplication |

    Select-Object DisplayName, Id, AppId, SignInAudience, PublisherDomain, DeletedDateTime,

        @{Name='DeletionAgeInDays'; Expression={(Get-Date) - $_.DeletedDateTime | Select-Object -ExpandProperty Days}} |

    Format-Table -AutoSize

DisplayName           Id                                   AppId                                SignInAudience PublisherDomain        DeletedDateTime      DeletionAgeInDays

-----------           --                                   -----                                -------------- ---------------        ---------------      -----------------

Entra PowerShell App aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb bbbbbbbb-1111-2222-3333-cccccccccccc AzureADMyOrg   contoso.com 9/18/2024 7:41:44 AM                 1</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet retrieves deleted applications with deletion age in days.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraDeletedApplication</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipal</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipal</command:noun>

      <maml:description>

        <maml:para>Gets a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipal` cmdlet gets a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipal</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Filter</maml:name>

          <maml:description>

            <maml:para>Specifies an OData v4.0 filter statement. This parameter controls which objects are returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipal</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipal</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>SearchString</maml:name>

          <maml:description>

            <maml:para>Specifies a search string.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Filter</maml:name>

        <maml:description>

          <maml:para>Specifies an OData v4.0 filter statement. This parameter controls which objects are returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>SearchString</maml:name>

        <maml:description>

          <maml:para>Specifies a search string.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>- Example 1: Retrieve all service principal from the directory -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal

ObjectId                             AppId                                DisplayName

--------                             -----                                -----------

bbbbbbbb-1111-2222-3333-cccccccccccc 00001111-aaaa-2222-bbbb-3333cccc4444 Demo App

aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb 22223333-cccc-4444-dddd-5555eeee6666 Demo Two App

dddddddd-3333-4444-5555-eeeeeeeeeeee 33334444-dddd-5555-eeee-6666ffff7777 ProjectWorkManagement</dev:code>

        <dev:remarks>

          <maml:para>This example retrieves all service principals from the directory.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title> Example 2: Retrieve a service principal by ServicePrincipalId </maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id

DisplayName                         Id                                   AppId                                SignInAudience      ServicePrincipalType

-----------                         --                                   -----                                --------------      --------------------

Helpdesk Application                aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMultipleOrgs Application</dev:code>

        <dev:remarks>

          <maml:para>This command retrieves specific service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` Parameter specifies the ID of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title> Example 3: Retrieve all service principals from the directory </maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -All

DisplayName                         Id                                   AppId                                SignInAudience      ServicePrincipalType

-----------                         --                                   -----                                --------------      --------------------

Helpdesk Application                aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMultipleOrgs Application

Microsoft Device Management Checkin bbbbbbbb-1111-2222-3333-cccccccccccc 11112222-bbbb-3333-cccc-4444dddd5555 AzureADMultipleOrgs Application

ProvisioningPowerBi                 cccccccc-2222-3333-4444-dddddddddddd 22223333-cccc-4444-dddd-5555eeee6666                     Application</dev:code>

        <dev:remarks>

          <maml:para>This example retrieves all service principals from the directory.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 4: Retrieve top two service principal from the directory</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -Top 2

DisplayName                         Id                                   AppId                                SignInAudience      ServicePrincipalType

-----------                         --                                   -----                                --------------      --------------------

Helpdesk Application                aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMultipleOrgs Application

Microsoft Device Management Checkin bbbbbbbb-1111-2222-3333-cccccccccccc 11112222-bbbb-3333-cccc-4444dddd5555 AzureADMultipleOrgs Application</dev:code>

        <dev:remarks>

          <maml:para>This command retrieves top two service principals from the directory.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------ Example 5: Get a service principal by display name ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

DisplayName                         Id                                   AppId                                SignInAudience      ServicePrincipalType

-----------                         --                                   -----                                --------------      --------------------

Helpdesk Application                aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMultipleOrgs Application</dev:code>

        <dev:remarks>

          <maml:para>This example gets a service principal by its display name.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 6: Retrieve a list of all service principal, which has a display name that contains "Helpdesk Application"</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -SearchString 'Helpdesk Application'

DisplayName                         Id                                   AppId                                SignInAudience      ServicePrincipalType

-----------                         --                                   -----                                --------------      --------------------

Helpdesk Application                aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMultipleOrgs Application</dev:code>

        <dev:remarks>

          <maml:para>This example gets a list of service principal, which has the specified display name.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>----------- Example 7: Retrieve all Enterprise apps -----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -Filter "tags/Any(x: x eq 'WindowsAzureActiveDirectoryIntegratedApp')"

DisplayName         Id                                   AppId                                SignInAudience         ServicePrincipalType

-----------         --                                   -----                                --------------         --------------------

Enterprise App1     00001111-aaaa-2222-bbbb-3333cccc4444 33334444-dddd-5555-eeee-6666ffff7777                         Application

Enterprise App2     11112222-bbbb-3333-cccc-4444dddd5555 22223333-cccc-4444-dddd-5555eeee6666 AzureADMultipleOrgs    Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve all enterprise apps.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------------ Example 8: Retrieve all App proxy apps ------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -Filter "tags/Any(x: x eq 'WindowsAzureActiveDirectoryOnPremApp')"

DisplayName         Id                                   AppId                                SignInAudience         ServicePrincipalType

-----------         --                                   -----                                --------------         --------------------

App proxy 1     00001111-aaaa-2222-bbbb-3333cccc4444 33334444-dddd-5555-eeee-6666ffff7777                         Application

App proxy 2     11112222-bbbb-3333-cccc-4444dddd5555 22223333-cccc-4444-dddd-5555eeee6666 AzureADMultipleOrgs    Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve all app proxy apps.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------------ Example 9: Retrieve all disabled apps ------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -Filter "accountEnabled eq false"

DisplayName         Id                                   AppId                                SignInAudience         ServicePrincipalType

-----------         --                                   -----                                --------------         --------------------

Disabled App1     00001111-aaaa-2222-bbbb-3333cccc4444 33334444-dddd-5555-eeee-6666ffff7777                         Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve all disabled apps.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------ Example 10: Retrieve all Global Secure Access apps ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -Filter "tags/Any(x: x eq 'PrivateAccessNonWebApplication') or tags/Any(x: x eq 'NetworkAccessManagedApplication')"

DisplayName         Id                                   AppId                                SignInAudience         ServicePrincipalType

-----------         --                                   -----                                --------------         --------------------

Global secure access app     00001111-aaaa-2222-bbbb-3333cccc4444 33334444-dddd-5555-eeee-6666ffff7777                         Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve all Global secure access apps.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-- Example 11: List all applications without user assignment --</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

Get-EntraServicePrincipal -All | Where-Object {$_.appRoleAssignmentRequired -ne 'true'}

DisplayName         Id                                   AppId                                SignInAudience         ServicePrincipalType

-----------         --                                   -----                                --------------         --------------------

App without user assignment     00001111-aaaa-2222-bbbb-3333cccc4444 33334444-dddd-5555-eeee-6666ffff7777                         Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve all applications without user assignment.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-------- Example 12: List all SAML application details --------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "PreferredSingleSignOnMode eq 'saml'"

$servicePrincipal | Select-Object Id, DisplayName, AccountEnabled, AppId, PreferredSingleSignOnMode, AppRoleAssignmentRequired, SignInAudience, NotificationEmailAddresses, PreferredTokenSigningKeyEndDateTime, PreferredTokenSigningKeyValid, ReplyUrls,LoginUrl, LogoutUrl | Format-Table -AutoSize

Id                                   DisplayName                           AccountEnabled AppId                                PreferredSingleSignOnMode AppRoleAssignmentRequired SignInAudience NotificationEmailAddresses

--                                   -----------                           -------------- -----                                ------------------------- ------------------------- -------------- --------------

00001111-aaaa-2222-bbbb-3333cccc4444 SAML App                             True            33334444-dddd-5555-eeee-6666ffff7777 saml                              True                    AzureADMyOrg   {admin@Contoso}</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to retrieve all SAML application details.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipal</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalAppRoleAssignedTo</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalAppRoleAssignedTo</command:noun>

      <maml:description>

        <maml:para>Gets app role assignments for this app or service, granted to users, groups and other service principals.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalAppRoleAssignedTo` cmdlet gets app role assignments for this app or service, granted to users, groups and other service principals.</maml:para>

      <maml:para>For delegated scenarios, the calling user needs at least one of the following Microsoft Entra roles.</maml:para>

      <maml:para>- Directory Synchronization Accounts</maml:para>

      <maml:para>- Directory Writer</maml:para>

      <maml:para>- Hybrid Identity Administrator</maml:para>

      <maml:para>- Identity Governance Administrator</maml:para>

      <maml:para>- Privileged Role Administrator</maml:para>

      <maml:para>- User Administrator</maml:para>

      <maml:para>- Application Administrator</maml:para>

      <maml:para>- Cloud Application Administrator</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalAppRoleAssignedTo</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para>System.Nullable`1[[System.Boolean, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]] System.Nullable`1[[System.Int32, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]]</maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para>`Get-EntraServiceAppRoleAssignedTo` is an alias for `Get-EntraServicePrincipalAppRoleAssignedTo`.</maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--------- Example 1: Retrieve the app role assignments ---------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalAppRoleAssignedTo -ServicePrincipalId $servicePrincipal.Id</dev:code>

        <dev:remarks>

          <maml:para>This example shows how to get app role assignments for an app or service, granted to users, groups and other service principals.</maml:para>

          <maml:para>- The first command gets the ID of a service principal and stores it in the $ServicePrincipalId variable.</maml:para>

          <maml:para>- The second command gets the app role assignments for the service principal granted to users, groups and other service principals.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>----------- Example 2: Get all app role assignments -----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalAppRoleAssignedTo -ServicePrincipalId $servicePrincipal.Id -All

DeletedDateTime Id                                          AppRoleId                            CreatedDateTime     PrincipalDisplayName PrincipalId

--------------- --                                          ---------                            ---------------     -------------------- -----------

                1aaaaaa1-2bb2-3cc3-4dd4-5eeeeeeeeee5 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:41 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                2bbbbbb2-3cc3-4dd4-5ee5-6ffffffffff6 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:38 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                3cccccc3-4dd4-5ee5-6ff6-7aaaaaaaaaa7 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:37 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                4dddddd4-5ee5-6ff6-7aa7-8bbbbbbbbbb8 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:39 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                5eeeeee5-6ff6-7aa7-8bb8-9cccccccccc9 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:39 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222</dev:code>

        <dev:remarks>

          <maml:para>This command gets the all app role assignments for the service principal granted to users, groups and other service principals.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>----------- Example 3: Get five app role assignments -----------</maml:title>

        <dev:code>$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalAppRoleAssignedTo -ServicePrincipalId $servicePrincipal.Id -Top 5

DeletedDateTime Id                                          AppRoleId                            CreatedDateTime     PrincipalDisplayName PrincipalId

--------------- --                                          ---------                            ---------------     -------------------- -----------

                1aaaaaa1-2bb2-3cc3-4dd4-5eeeeeeeeee5 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:41 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                2bbbbbb2-3cc3-4dd4-5ee5-6ffffffffff6 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:38 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                3cccccc3-4dd4-5ee5-6ff6-7aaaaaaaaaa7 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:37 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                4dddddd4-5ee5-6ff6-7aa7-8bbbbbbbbbb8 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:39 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                5eeeeee5-6ff6-7aa7-8bb8-9cccccccccc9 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:39 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222</dev:code>

        <dev:remarks>

          <maml:para>This command gets the five app role assignments for the service principal granted to users, groups and other service principals.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalAppRoleAssignedTo</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalAppRoleAssignment</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalAppRoleAssignment</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalAppRoleAssignment</command:noun>

      <maml:description>

        <maml:para>Gets a service principal application role assignment.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalAppRoleAssignment` cmdlet gets a role assignment for a service principal application in Microsoft Entra ID.</maml:para>

      <maml:para>For delegated scenarios, the calling user needs at least one of the following Microsoft Entra roles.</maml:para>

      <maml:para>- Directory Synchronization Accounts</maml:para>

      <maml:para>- Directory Writer</maml:para>

      <maml:para>- Hybrid Identity Administrator</maml:para>

      <maml:para>- Identity Governance Administrator</maml:para>

      <maml:para>- Privileged Role Administrator</maml:para>

      <maml:para>- User Administrator</maml:para>

      <maml:para>- Application Administrator</maml:para>

      <maml:para>- Cloud Application Administrator</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalAppRoleAssignment</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>The maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>The maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para>`Get-EntraServiceAppRoleAssignment` is an alias for `Get-EntraServicePrincipalAppRoleAssignment`.</maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Retrieve the application role assignments for a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalAppRoleAssignment -ServicePrincipalId $servicePrincipal.Id

DeletedDateTime Id                                          AppRoleId                            CreatedDateTime     PrincipalDisplayName PrincipalId                          PrincipalType ResourceDisplayName

--------------- --                                          ---------                            ---------------     -------------------- -----------                          ------------- -------------------

                2bbbbbb2-3cc3-4dd4-5ee5-6ffffffffff6 00000000-0000-0000-0000-000000000000 29-02-2024 05:53:00 Ask HR               aaaaaaaa-bbbb-cccc-1111-222222222222 Group         M365 License Manager</dev:code>

        <dev:remarks>

          <maml:para>This command gets application role assignments for specified service principal.</maml:para>

          <maml:para>- The first command gets the ID of a service principal by using the Get-EntraServicePrincipal (./Get-EntraServicePrincipal.md) cmdlet. The command stores the ID in the $ServicePrincipalId variable.</maml:para>

          <maml:para>- The second command gets the application role assignments for the service principal in identified by $ServicePrincipalId.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Retrieve all application role assignments for a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalAppRoleAssignment -ServicePrincipalId $servicePrincipal.Id -All

DeletedDateTime Id                                          AppRoleId                            CreatedDateTime     PrincipalDisplayName PrincipalId

--------------- --                                          ---------                            ---------------     -------------------- -----------

                1aaaaaa1-2bb2-3cc3-4dd4-5eeeeeeeeee5 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:41 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                2bbbbbb2-3cc3-4dd4-5ee5-6ffffffffff6 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:38 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                3cccccc3-4dd4-5ee5-6ff6-7aaaaaaaaaa7 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:37 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                4dddddd4-5ee5-6ff6-7aa7-8bbbbbbbbbb8 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:39 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                5eeeeee5-6ff6-7aa7-8bb8-9cccccccccc9 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:39 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222</dev:code>

        <dev:remarks>

          <maml:para>This command gets all application role assignments for specified service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Retrieve the top five application role assignments for a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalAppRoleAssignment -ServicePrincipalId $servicePrincipal.Id -Top 3

DeletedDateTime Id                                          AppRoleId                            CreatedDateTime     PrincipalDisplayName PrincipalId

--------------- --                                          ---------                            ---------------     -------------------- -----------

                1aaaaaa1-2bb2-3cc3-4dd4-5eeeeeeeeee5 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:41 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                2bbbbbb2-3cc3-4dd4-5ee5-6ffffffffff6 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:38 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222

                3cccccc3-4dd4-5ee5-6ff6-7aaaaaaaaaa7 00000000-0000-0000-0000-000000000000 20/10/2023 17:03:37 Entra-App-Testing    aaaaaaaa-bbbb-cccc-1111-222222222222</dev:code>

        <dev:remarks>

          <maml:para>This command gets three application role assignments for specified service principal.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalAppRoleAssignment</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipalAppRoleAssignment</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalAppRoleAssignment</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalCreatedObject</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalCreatedObject</command:noun>

      <maml:description>

        <maml:para>Get objects created by a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalCreatedObject` cmdlet gets an object created by a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalCreatedObject</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Retrieve the objects that created by a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalCreatedObject -ServicePrincipalId $servicePrincipal.Id</dev:code>

        <dev:remarks>

          <maml:para>This example gets objects created by the service principal identified by $ServicePrincipalId. You can use the command `Get-EntraServicePrincipal` to get service principal ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Retrieve the all objects created by a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalCreatedObject -ServicePrincipalId $servicePrincipal.Id -All</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get the all object created by a specified service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Retrieve the top two objects created by a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalCreatedObject -ServicePrincipalId $servicePrincipal.Id -Top 2</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get the top two object created by a specified service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalCreatedObject</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalDelegatedPermissionClassification</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalDelegatedPermissionClassification</command:noun>

      <maml:description>

        <maml:para>Retrieve the delegated permission classification objects on a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalDelegatedPermissionClassification` cmdlet retrieves the delegated permission classifications from a service principal.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalDelegatedPermissionClassification</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a service principal object in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Id</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a delegated permission classification object ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalDelegatedPermissionClassification</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a service principal object in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Filter</maml:name>

          <maml:description>

            <maml:para>The OData v4.0 filter statement. Controls which objects are returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of a service principal object in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Id</maml:name>

        <maml:description>

          <maml:para>The unique identifier of a delegated permission classification object ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Filter</maml:name>

        <maml:description>

          <maml:para>The OData v4.0 filter statement. Controls which objects are returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>Microsoft.Online.Administration.DelegatedPermissionClassification</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title> Example 1: Get a list of delegated permission classifications </maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id

Id                      Classification PermissionId                         PermissionName

--                      -------------- ------------                         --------------

bbbbbbbb-7777-8888-9999-cccccccccccc low            eeeeeeee-4444-5555-6666-ffffffffffff Sites.Read.All

cccccccc-8888-9999-0000-dddddddddddd low            dddd3333-ee44-5555-66ff-777777aaaaaa profile</dev:code>

        <dev:remarks>

          <maml:para>This command retrieves all delegated permission classifications from the service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal. Use `Get-EntraServicePrincipal` to get more details.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>---- Example 2: Get a delegated permission classifications ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$permissionClassification = Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Filter "PermissionName eq 'Sites.Read.All'"

Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Id $permissionClassification.Id

Id                      Classification PermissionId                         PermissionName

--                      -------------- ------------                         --------------

bbbbbbbb-7777-8888-9999-cccccccccccc low            eeeeeeee-4444-5555-6666-ffffffffffff Sites.Read.All</dev:code>

        <dev:remarks>

          <maml:para>This command retrieves the delegated permission classification by Id from the service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal. Use `Get-EntraServicePrincipal` to get more details.</maml:para>

          <maml:para>- `-Id` parameter specifies the delegated permission classification object Id.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Get a delegated permission classification with filter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Filter "PermissionName eq 'Sites.Read.All'"

Id                      Classification PermissionId                         PermissionName

--                      -------------- ------------                         --------------

bbbbbbbb-7777-8888-9999-cccccccccccc low            eeeeeeee-4444-5555-6666-ffffffffffff Sites.Read.All</dev:code>

        <dev:remarks>

          <maml:para>This command retrieves the filtered delegated permission classifications from the service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal. Use `Get-EntraServicePrincipal` to get more details.</maml:para>

          <maml:para>- `-Id` parameter specifies the delegated permission classification object Id.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalDelegatedPermissionClassification</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalDelegatedPermissionClassification</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalDelegatedPermissionClassification</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalKeyCredential</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalKeyCredential</command:noun>

      <maml:description>

        <maml:para>Get key credentials for a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalKeyCredential` cmdlet gets the key credentials for a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalKeyCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the application for which to get the password credential.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the application for which to get the password credential.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title> Example 1: Retrieve the key credential of a service principal </maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalKeyCredential -ServicePrincipalId $servicePrincipal.Id

CustomKeyIdentifier DisplayName EndDateTime         Key KeyId                                StartDateTime       Type      Usage

------------------- ----------- -----------         --- -----                                -------------       ----      -----

                                08-02-2025 09:57:08     68b45e27-fef8-4f0d-bc7a-76bd949c16d1 08-02-2024 09:57:08 Symmetric Sign</dev:code>

        <dev:remarks>

          <maml:para>This example retrieves the key credentials for specified service principal in Microsoft Entra ID. You can use the command `Get-EntraServicePrincipal` to get a service principal object Id.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal Id.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalKeyCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipalKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalMembership</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalMembership</command:noun>

      <maml:description>

        <maml:para>Get a service principal membership.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalMembership` cmdlet gets the memberships of a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalMembership</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>-- Example 1: Retrieve the memberships of a service principal --</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalMembership -ServicePrincipalId $servicePrincipal.Id

Id                                   DeletedDateTime

--                                   ---------------

11112222-aaaa-3333-bbbb-4444cccc5555</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet retrieves a specified service principal memberships in Microsoft Entra ID. You can use the command `Get-EntraServicePrincipal` to get service principal ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-- Example 2: Retrieve all memberships of a service principal --</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalMembership -ServicePrincipalId $ServicePrincipal.Id -All

Id                                   DeletedDateTime

--                                   ---------------

11112222-aaaa-3333-bbbb-4444cccc5555

22223333-cccc-4444-dddd-5555eeee6666

33334444-dddd-5555-eeee-6666ffff7777</dev:code>

        <dev:remarks>

          <maml:para>This command gets all memberships of a specified service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Retrieve top two memberships of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalMembership -ServicePrincipalId $ServicePrincipal.Id -Top 2

Id                                   DeletedDateTime

--                                   ---------------

11112222-aaaa-3333-bbbb-4444cccc5555

22223333-cccc-4444-dddd-5555eeee6666</dev:code>

        <dev:remarks>

          <maml:para>This command gets top two memberships of a specified service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalMembership</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalOAuth2PermissionGrant</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalOAuth2PermissionGrant</command:noun>

      <maml:description>

        <maml:para>Gets an oAuth2PermissionGrant object.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalOAuth2PermissionGrant` cmdlet gets an oAuth2PermissionGrant object for a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalOAuth2PermissionGrant</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Retrieve the OAuth2 permission grants of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Directory.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOAuth2PermissionGrant -ServicePrincipalId $servicePrincipal.Id

Id                                                               ClientId                             ConsentType   PrincipalId                          ResourceId                           Scope

--                                                               --------                             -----------   -----------                          ----------                           -----

A1bC2dE3f...                      00001111-aaaa-2222-bbbb-3333cccc4444 AllPrincipals                                    aaaaaaaa-bbbb-cccc-1111-222222222222 openid profile U...</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get all oAuth2PermissionGrant object for a service principal in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Get all OAuth2 permission grants of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Directory.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOAuth2PermissionGrant -ServicePrincipalId $servicePrincipal.Id -All

Id                                                               ClientId                             ConsentType   PrincipalId                          ResourceId                           Scope

--                                                               --------                             -----------   -----------                          ----------                           -----

A1bC2dE3f...                                                      00001111-aaaa-2222-bbbb-3333cccc4444 AllPrincipals                                      A1bC2dE3f...                          openid profile U...

A1bC2dE3f...                                                      00001111-aaaa-2222-bbbb-3333cccc4444 Principal      412be9d1-1460-4061-8eed-cca203fcb215 aaaaaaaa-bbbb-cccc-1111-222222222222 openid profile U...

A1bC2dE3f...                                                      00001111-aaaa-2222-bbbb-3333cccc4444 Principal      996d39aa-fdac-4d97-aa3d-c81fb47362ac aaaaaaaa-bbbb-cccc-1111-222222222222 PrivilegedAccess...</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get all oAuth2PermissionGrant object for a service principal in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Get two OAuth2 permission grants of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Directory.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOAuth2PermissionGrant -ServicePrincipalId $servicePrincipal.Id -Top 2

Id                                                               ClientId                             ConsentType   PrincipalId                          ResourceId                           Scope

--                                                               --------                             -----------   -----------                          ----------                           -----

A1bC2dE3f...                                                      00001111-aaaa-2222-bbbb-3333cccc4444 AllPrincipals                                      aaaaaaaa-bbbb-cccc-1111-222222222222 openid profile U...

A1bC2dE3f...                                                      00001111-aaaa-2222-bbbb-3333cccc4444 Principal      412be9d1-1460-4061-8eed-cca203fcb215 aaaaaaaa-bbbb-cccc-1111-222222222222 openid profile U...</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to get top two oAuth2PermissionGrant object for a service principal in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalOAuth2PermissionGrant</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalOwnedObject</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalOwnedObject</command:noun>

      <maml:description>

        <maml:para>Gets an object owned by a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalOwnedObject` cmdlet retrieves an object owned by a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalOwnedObject</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>- Example 1: Retrieve the owned objects of a service principal -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOwnedObject -ServicePrincipalId $servicePrincipal.Id

Id                                   DeletedDateTime

--                                   ---------------

bbbbbbbb-1111-2222-3333-cccccccccccc</dev:code>

        <dev:remarks>

          <maml:para>The command retrieves the owned objects of a service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` Parameter specifies the ID of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Retrieve the all owned objects of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOwnedObject -ServicePrincipalId $servicePrincipal.Id -All

Id                                   DeletedDateTime

--                                   ---------------

bbbbbbbb-1111-2222-3333-cccccccccccc

cccccccc-2222-3333-4444-dddddddddddd</dev:code>

        <dev:remarks>

          <maml:para>This example retrieves an object owned by a service principal in Microsoft Entra ID. You can use the command `Get-EntraServicePrincipal` to get service principal Id.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Retrieve top one owned object of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOwnedObject -ServicePrincipalId $servicePrincipal.Id -Top 1

Id                                   DeletedDateTime

--                                   ---------------

bbbbbbbb-1111-2222-3333-cccccccccccc</dev:code>

        <dev:remarks>

          <maml:para>This example retrieves the top one owned object of a specified service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalOwnedObject</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalOwner</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalOwner</command:noun>

      <maml:description>

        <maml:para>Get the owner of a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalOwner` cmdlet gets the owners of a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalOwner</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>All</maml:name>

          <maml:description>

            <maml:para>List all pages.</maml:para>

          </maml:description>

          <dev:type>

            <maml:name>System.Management.Automation.SwitchParameter</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>False</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Top</maml:name>

          <maml:description>

            <maml:para>Specifies the maximum number of records to return.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

          <dev:type>

            <maml:name>System.Int32</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Property</maml:name>

          <maml:description>

            <maml:para>Specifies properties to be returned.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

          <dev:type>

            <maml:name>System.String[]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>All</maml:name>

        <maml:description>

          <maml:para>List all pages.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Management.Automation.SwitchParameter</command:parameterValue>

        <dev:type>

          <maml:name>System.Management.Automation.SwitchParameter</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>False</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Top</maml:name>

        <maml:description>

          <maml:para>Specifies the maximum number of records to return.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Int32</command:parameterValue>

        <dev:type>

          <maml:name>System.Int32</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Property</maml:name>

        <maml:description>

          <maml:para>Specifies properties to be returned.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String[]</command:parameterValue>

        <dev:type>

          <maml:name>System.String[]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----- Example 1: Retrieve the owner of a service principal -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id | Select-Object Id, userPrincipalName, DisplayName, '@odata.type'

Id                                   userPrincipalName                       displayName    @odata.type

--                                   -----------------                       -----------    -----------

aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb AlexW@Contoso.com     Alex Wilber    #microsoft.graph.user

bbbbbbbb-1111-2222-3333-cccccccccccc ChristieC@Contoso.com Christie Cline #microsoft.graph.user</dev:code>

        <dev:remarks>

          <maml:para>This example gets the owners of a specified service principal. You can use the command `Get-EntraServicePrincipal` to get service principal object ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-- Example 2: Retrieve all the owners of a service principal --</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id | Select-Object Id, userPrincipalName, DisplayName, '@odata.type' -All

Id                                   userPrincipalName                       displayName    @odata.type

--                                   -----------------                       -----------    -----------

aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb AlexW@Contoso.com     Alex Wilber    #microsoft.graph.user

bbbbbbbb-1111-2222-3333-cccccccccccc ChristieC@Contoso.com Christie Cline #microsoft.graph.user</dev:code>

        <dev:remarks>

          <maml:para>This command gets all the owners of a service principal. You can use the command `Get-EntraServicePrincipal` to get service principal object ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-- Example 3: Retrieve top two owners of a service principal --</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id | Select-Object Id, userPrincipalName, DisplayName, '@odata.type' -Top 2

Id                                   userPrincipalName                       displayName    @odata.type

--                                   -----------------                       -----------    -----------

aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb AlexW@Contoso.com     Alex Wilber    #microsoft.graph.user

bbbbbbbb-1111-2222-3333-cccccccccccc ChristieC@Contoso.com Christie Cline #microsoft.graph.user</dev:code>

        <dev:remarks>

          <maml:para>This command gets top two owners of a service principal. You can use the command `Get-EntraServicePrincipal` to get service principal object ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalOwner</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Add-EntraServicePrincipalOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Get-EntraServicePrincipalPasswordCredential</command:name>

      <command:verb>Get</command:verb>

      <command:noun>EntraServicePrincipalPasswordCredential</command:noun>

      <maml:description>

        <maml:para>Get credentials for a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Get-EntraServicePrincipalPasswordCredential` cmdlet gets the password credentials for a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Get-EntraServicePrincipalPasswordCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the service principal for which to get password credentials.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the service principal for which to get password credentials.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Retrieve the password credential of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Get-EntraServicePrincipalPasswordCredential -ServicePrincipalId $servicePrincipal.Id

CustomKeyIdentifier DisplayName EndDateTime         Hint KeyId                                SecretText StartDateTime

------------------- ----------- -----------         ---- -----                                ---------- -------------

                                17-04-2025 07:32:41 gjW  bdf6a3df-cc9b-4612-b948-e32804ee88f7            17-04-2024 07:32:41

                                21-03-2025 08:12:08 4fl  7f4414ec-8f72-49a8-b949-70d635899656            21-03-2024 08:12:08

                                12-12-2024 08:39:07 mjl  0fff6b21-0a20-4f7c-93ba-26ed9b648344            12-12-2023 08:39:10</dev:code>

        <dev:remarks>

          <maml:para>This example retrieves the password credentials for specified service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the object ID of a service principal. You can use the command `Get-EntraServicePrincipal` to get a service principal Id.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Get-EntraServicePrincipalPasswordCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipalPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraApplication</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraApplication</command:noun>

      <maml:description>

        <maml:para>Creates (registers) a new application object.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Creates (registers) a new application object. Specify the `DisplayName` parameter to create a new application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AddIns</maml:name>

          <maml:description>

            <maml:para>Defines custom behavior that a consuming service can use to call an app in specific contexts.</maml:para>

            <maml:para>For example, applications that can render file streams may set the addIns property for its "FileHandler" functionality.</maml:para>

            <maml:para>This will let services like Office 365 call the application in the context of a document the user is working on.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AddIn]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AddIn]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Api</maml:name>

          <maml:description>

            <maml:para>Specifies settings for an application that implements a web API.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">ApiApplication</command:parameterValue>

          <dev:type>

            <maml:name>ApiApplication</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AppRoles</maml:name>

          <maml:description>

            <maml:para>The collection of application roles that an application might declare. These roles can be assigned to users, groups, or service principals.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>DisplayName</maml:name>

          <maml:description>

            <maml:para>Specifies the display name of the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>GroupMembershipClaims</maml:name>

          <maml:description>

            <maml:para>Configures the groups claim issued in a user or OAuth 2.0 access token that the application expects.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>IdentifierUris</maml:name>

          <maml:description>

            <maml:para>User-defined URI(s) that uniquely identify a Web application within its Microsoft Entra ID tenant, or within a verified custom domain (see "Domains" tab in the Azure classic portal) if the application is multi-tenant.</maml:para>

            <maml:para>The first element is populated from the Web application's "APP ID URI" field if updated via the Azure classic portal (or respective Microsoft Entra ID PowerShell cmdlet parameter).</maml:para>

            <maml:para>Extra URIs can be added via the application manifest; see Understanding the Microsoft Entra ID Application Manifest for details.</maml:para>

            <maml:para>This collection is also used to populate the Web application's servicePrincipalNames collection.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>InformationalUrl</maml:name>

          <maml:description>

            <maml:para>Basic profile information of the application such as app's marketing, support, terms of service and privacy statement URLs.</maml:para>

            <maml:para>The terms of service and privacy statement are surfaced to users through the user consent experience.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">InformationalUrl</command:parameterValue>

          <dev:type>

            <maml:name>InformationalUrl</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>IsDeviceOnlyAuthSupported</maml:name>

          <maml:description>

            <maml:para>Specifies if the application supports authentication using a device token.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

          <dev:type>

            <maml:name>System.Boolean</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>IsFallbackPublicClient</maml:name>

          <maml:description>

            <maml:para>Specifies the fallback application type as public client, such as an installed application running on a mobile device.</maml:para>

            <maml:para>The default value is false that means the fallback application type is confidential client such as web app.</maml:para>

            <maml:para>There are certain scenarios where Microsoft Entra ID can't determine the client application type (for example, ROPC flow where it's configured without specifying a redirect URI).</maml:para>

            <maml:para>In those cases Microsoft Entra ID interprets the application type based on the value of this property.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

          <dev:type>

            <maml:name>System.Boolean</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>KeyCredentials</maml:name>

          <maml:description>

            <maml:para>The collection of key credentials associated with the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>OptionalClaims</maml:name>

          <maml:description>

            <maml:para>Application developers can configure optional claims in their Microsoft Entra ID apps to specify which claims they want in tokens sent to their application by the Microsoft security token service.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">OptionalClaims</command:parameterValue>

          <dev:type>

            <maml:name>OptionalClaims</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ParentalControlSettings</maml:name>

          <maml:description>

            <maml:para>Specifies parental control settings for an application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">ParentalControlSettings</command:parameterValue>

          <dev:type>

            <maml:name>ParentalControlSettings</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PasswordCredentials</maml:name>

          <maml:description>

            <maml:para>The collection of password credentials associated with the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PublicClient</maml:name>

          <maml:description>

            <maml:para>Specifies whether this application is a public client (such as an installed application running on a mobile device). Default is false.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">PublicClientApplication</command:parameterValue>

          <dev:type>

            <maml:name>PublicClientApplication</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>RequiredResourceAccess</maml:name>

          <maml:description>

            <maml:para>Specifies resources that this application requires access to and the set of OAuth permission scopes and application roles that it needs under each of those resources.</maml:para>

            <maml:para>This pre-configuration of required resource access drives the consent experience.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>SignInAudience</maml:name>

          <maml:description>

            <maml:para>Specifies what Microsoft accounts are supported for the current application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Tags</maml:name>

          <maml:description>

            <maml:para>Custom strings that can be used to categorize and identify the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>TokenEncryptionKeyId</maml:name>

          <maml:description>

            <maml:para>Specifies the keyId of a public key from the keyCredentials collection.</maml:para>

            <maml:para>When configured, Microsoft Entra ID encrypts all the tokens it emits by using the key this property points to.</maml:para>

            <maml:para>The application code that receives the encrypted token must use the matching private key to decrypt the token before it can be used for the signed-in user.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Web</maml:name>

          <maml:description>

            <maml:para>Specifies settings for a web application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">WebApplication</command:parameterValue>

          <dev:type>

            <maml:name>WebApplication</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AddIns</maml:name>

        <maml:description>

          <maml:para>Defines custom behavior that a consuming service can use to call an app in specific contexts.</maml:para>

          <maml:para>For example, applications that can render file streams may set the addIns property for its "FileHandler" functionality.</maml:para>

          <maml:para>This will let services like Office 365 call the application in the context of a document the user is working on.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AddIn]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AddIn]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Api</maml:name>

        <maml:description>

          <maml:para>Specifies settings for an application that implements a web API.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">ApiApplication</command:parameterValue>

        <dev:type>

          <maml:name>ApiApplication</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AppRoles</maml:name>

        <maml:description>

          <maml:para>The collection of application roles that an application might declare. These roles can be assigned to users, groups, or service principals.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>DisplayName</maml:name>

        <maml:description>

          <maml:para>Specifies the display name of the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>GroupMembershipClaims</maml:name>

        <maml:description>

          <maml:para>Configures the groups claim issued in a user or OAuth 2.0 access token that the application expects.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>IdentifierUris</maml:name>

        <maml:description>

          <maml:para>User-defined URI(s) that uniquely identify a Web application within its Microsoft Entra ID tenant, or within a verified custom domain (see "Domains" tab in the Azure classic portal) if the application is multi-tenant.</maml:para>

          <maml:para>The first element is populated from the Web application's "APP ID URI" field if updated via the Azure classic portal (or respective Microsoft Entra ID PowerShell cmdlet parameter).</maml:para>

          <maml:para>Extra URIs can be added via the application manifest; see Understanding the Microsoft Entra ID Application Manifest for details.</maml:para>

          <maml:para>This collection is also used to populate the Web application's servicePrincipalNames collection.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>InformationalUrl</maml:name>

        <maml:description>

          <maml:para>Basic profile information of the application such as app's marketing, support, terms of service and privacy statement URLs.</maml:para>

          <maml:para>The terms of service and privacy statement are surfaced to users through the user consent experience.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">InformationalUrl</command:parameterValue>

        <dev:type>

          <maml:name>InformationalUrl</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>IsDeviceOnlyAuthSupported</maml:name>

        <maml:description>

          <maml:para>Specifies if the application supports authentication using a device token.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>IsFallbackPublicClient</maml:name>

        <maml:description>

          <maml:para>Specifies the fallback application type as public client, such as an installed application running on a mobile device.</maml:para>

          <maml:para>The default value is false that means the fallback application type is confidential client such as web app.</maml:para>

          <maml:para>There are certain scenarios where Microsoft Entra ID can't determine the client application type (for example, ROPC flow where it's configured without specifying a redirect URI).</maml:para>

          <maml:para>In those cases Microsoft Entra ID interprets the application type based on the value of this property.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>KeyCredentials</maml:name>

        <maml:description>

          <maml:para>The collection of key credentials associated with the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>OptionalClaims</maml:name>

        <maml:description>

          <maml:para>Application developers can configure optional claims in their Microsoft Entra ID apps to specify which claims they want in tokens sent to their application by the Microsoft security token service.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">OptionalClaims</command:parameterValue>

        <dev:type>

          <maml:name>OptionalClaims</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ParentalControlSettings</maml:name>

        <maml:description>

          <maml:para>Specifies parental control settings for an application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">ParentalControlSettings</command:parameterValue>

        <dev:type>

          <maml:name>ParentalControlSettings</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PasswordCredentials</maml:name>

        <maml:description>

          <maml:para>The collection of password credentials associated with the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PublicClient</maml:name>

        <maml:description>

          <maml:para>Specifies whether this application is a public client (such as an installed application running on a mobile device). Default is false.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">PublicClientApplication</command:parameterValue>

        <dev:type>

          <maml:name>PublicClientApplication</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>RequiredResourceAccess</maml:name>

        <maml:description>

          <maml:para>Specifies resources that this application requires access to and the set of OAuth permission scopes and application roles that it needs under each of those resources.</maml:para>

          <maml:para>This pre-configuration of required resource access drives the consent experience.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>SignInAudience</maml:name>

        <maml:description>

          <maml:para>Specifies what Microsoft accounts are supported for the current application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Tags</maml:name>

        <maml:description>

          <maml:para>Custom strings that can be used to categorize and identify the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>TokenEncryptionKeyId</maml:name>

        <maml:description>

          <maml:para>Specifies the keyId of a public key from the keyCredentials collection.</maml:para>

          <maml:para>When configured, Microsoft Entra ID encrypts all the tokens it emits by using the key this property points to.</maml:para>

          <maml:para>The application code that receives the encrypted token must use the matching private key to decrypt the token before it can be used for the signed-in user.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Web</maml:name>

        <maml:description>

          <maml:para>Specifies settings for a web application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">WebApplication</command:parameterValue>

        <dev:type>

          <maml:name>WebApplication</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>Boolean</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.ApiApplication</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.InformationalUrl</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.OptionalClaims</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.ParentalControlSettings</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.PublicClientApplication</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.WebApplication</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.Add-in]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System. Nullable`1[System.Boolean]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.MsApplication</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para>- See more details - &lt;https://learn.microsoft.com/graph/api/application-post-applications&gt;</maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--------------- Example 1: Create an application ---------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

New-EntraApplication -DisplayName 'My new application'

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

My new application       dddd3333-ee44-5555-66ff-777777aaaaaa 22223333-cccc-4444-dddd-5555eeee6666 AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This command creates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Create an application using IdentifierUris parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

New-EntraApplication -DisplayName 'My new application' -IdentifierUris 'https://mynewapp.contoso.com'

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

My new application       dddd3333-ee44-5555-66ff-777777aaaaaa 22223333-cccc-4444-dddd-5555eeee6666 AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This command creates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>--- Example 3: Create an application using AddIns parameter ---</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$addin = New-Object Microsoft.Open.MSGraph.Model.AddIn

$addin.Type = 'testtype'

$addinproperties = New-Object System.collections.Generic.List[Microsoft.Open.MSGraph.Model.KeyValue]

$addinproperties.Add([Microsoft.Open.MSGraph.Model.KeyValue]@{ Key = "key"; Value = "value" })

$addin.Properties = $addinproperties

New-EntraApplication -DisplayName 'My new application' -AddIns $addin

DisplayName Id                                   AppId                                SignInAudience PublisherDomain

----------- --                                   -----                                -------------- ---------------

My new application       dddd3333-ee44-5555-66ff-777777aaaaaa 22223333-cccc-4444-dddd-5555eeee6666 AzureADMyOrg   contoso.com</dev:code>

        <dev:remarks>

          <maml:para>This command creates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraApplication</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraApplicationExtensionProperty</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraApplicationExtensionProperty</command:noun>

      <maml:description>

        <maml:para>Creates an application extension property.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `New-EntraApplicationExtensionProperty` cmdlet creates an application extension property for an object in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraApplicationExtensionProperty</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>DataType</maml:name>

          <maml:description>

            <maml:para>Specifies the data type of the value the extension property can hold. Following values are supported.</maml:para>

            <maml:para>- Binary - 256 bytes maximum</maml:para>

            <maml:para>- Boolean</maml:para>

            <maml:para>- DateTime - Must be specified in ISO 8601 format. Will be stored in UTC.</maml:para>

            <maml:para>- Integer - 32-bit value.</maml:para>

            <maml:para>- LargeInteger - 64-bit value.</maml:para>

            <maml:para>- String - 256 characters maximum</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Name</maml:name>

          <maml:description>

            <maml:para>Specifies the name of the extension property.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies a unique ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>TargetObjects</maml:name>

          <maml:description>

            <maml:para>Specifies the Microsoft Graph resources that can use the extension property. All values must be in PascalCase. The following values are supported.</maml:para>

            <maml:para>- User</maml:para>

            <maml:para>- Group</maml:para>

            <maml:para>- AdministrativeUnit</maml:para>

            <maml:para>- Application</maml:para>

            <maml:para>- Device</maml:para>

            <maml:para>- Organization</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>DataType</maml:name>

        <maml:description>

          <maml:para>Specifies the data type of the value the extension property can hold. Following values are supported.</maml:para>

          <maml:para>- Binary - 256 bytes maximum</maml:para>

          <maml:para>- Boolean</maml:para>

          <maml:para>- DateTime - Must be specified in ISO 8601 format. Will be stored in UTC.</maml:para>

          <maml:para>- Integer - 32-bit value.</maml:para>

          <maml:para>- LargeInteger - 64-bit value.</maml:para>

          <maml:para>- String - 256 characters maximum</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Name</maml:name>

        <maml:description>

          <maml:para>Specifies the name of the extension property.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies a unique ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>TargetObjects</maml:name>

        <maml:description>

          <maml:para>Specifies the Microsoft Graph resources that can use the extension property. All values must be in PascalCase. The following values are supported.</maml:para>

          <maml:para>- User</maml:para>

          <maml:para>- Group</maml:para>

          <maml:para>- AdministrativeUnit</maml:para>

          <maml:para>- Application</maml:para>

          <maml:para>- Device</maml:para>

          <maml:para>- Organization</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----------- Example 1: Create an extension property -----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

New-EntraApplicationExtensionProperty -ApplicationId $application.Id -Name 'NewAttribute'

DeletedDateTime Id                                   AppDisplayName  DataType IsSyncedFromOnPremises Name                                                    TargetObjects

--------------- --                                   --------------  -------- ---------------------- ----                                                    -------------

                11112222-bbbb-3333-cccc-4444dddd5555 My new test app String   False                  extension_11112222-bbbb-3333-cccc-4444dddd5555_NewAttribute {}</dev:code>

        <dev:remarks>

          <maml:para>This command creates an application extension property of the string type for the specified object.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

          <maml:para>- `-Name` parameter specifies the name of the extension property.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Create an extension property with data type parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

New-EntraApplicationExtensionProperty -ApplicationId $application.Id -Name 'NewAttribute1' -DataType 'Boolean'

DeletedDateTime Id                                   AppDisplayName  DataType IsSyncedFromOnPremises Name                                                    TargetObjects

--------------- --                                   --------------  -------- ---------------------- ----                                                    -------------

                11112222-bbbb-3333-cccc-4444dddd5555 My new test app Boolean  False                  extension_11112222-bbbb-3333-cccc-4444dddd5555_NewAttribute {}</dev:code>

        <dev:remarks>

          <maml:para>This command creates an application extension property of the specified data type for the specified object.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

          <maml:para>- `-Name` parameter specifies the name of the extension property.</maml:para>

          <maml:para>- `-DataType` parameter specifies the data type of the value the extension property can hold.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Create an extension property with targets parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$targets = New-Object System.Collections.Generic.List[System.String]

$targets.Add('User')

New-EntraApplicationExtensionProperty -ApplicationId $application.Id -Name 'NewAttribute2' -TargetObjects $targets

DeletedDateTime Id                                   AppDisplayName  DataType IsSyncedFromOnPremises Name                                                    TargetObjects

--------------- --                                   --------------  -------- ---------------------- ----                                                    -------------

                11112222-bbbb-3333-cccc-4444dddd5555 My new test app String   False                  extension_11112222-bbbb-3333-cccc-4444dddd5555_NewAttribute {User}</dev:code>

        <dev:remarks>

          <maml:para>The example shows how to create an application extension property with the specified target objects for the specified object.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

          <maml:para>- `-Name` parameter specifies the name of the extension property.</maml:para>

          <maml:para>- `-TargetObjects` parameter specifies the Microsoft Graph resources that use the extension property. All values must be in PascalCase.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraApplicationExtensionProperty</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationExtensionProperty</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationExtensionProperty</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraApplicationFromApplicationTemplate</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraApplicationFromApplicationTemplate</command:noun>

      <maml:description>

        <maml:para>Add an instance of an application from the Microsoft Entra application gallery into your directory.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `New-EntraApplicationFromApplicationTemplate` cmdlet adds an instance of an application from the Microsoft Entra application gallery into your directory.</maml:para>

      <maml:para>The application template with ID `8adf8e6e-67b2-4cf2-a259-e3dc5476c621` can be used to add a non-gallery app that you can configure different single-sign on (SSO) modes like SAML SSO and password-based SSO.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraApplicationFromApplicationTemplate</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Id</maml:name>

          <maml:description>

            <maml:para>The Id parameter specifies Application TemplateId.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>DisplayName</maml:name>

          <maml:description>

            <maml:para>Application template display name.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.ApplicationTemplateDisplayName</command:parameterValue>

          <dev:type>

            <maml:name>System.ApplicationTemplateDisplayName</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Id</maml:name>

        <maml:description>

          <maml:para>The Id parameter specifies Application TemplateId.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>DisplayName</maml:name>

        <maml:description>

          <maml:para>Application template display name.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.ApplicationTemplateDisplayName</command:parameterValue>

        <dev:type>

          <maml:name>System.ApplicationTemplateDisplayName</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>Microsoft.Online.Administration.ApplicationTemplateCopy</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>- Example 1: Creates an application from application template -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$applicationTemplate = Get-EntraApplicationTemplate -Filter "DisplayName eq 'SAP Fieldglass'"

New-EntraApplicationFromApplicationTemplate -Id $applicationTemplate.Id -DisplayName 'Contoso SAP App'

@odata.context                                                                         servicePrincipal

--------------                                                                         ----------------

https://graph.microsoft.com/v1.0/$metadata#microsoft.graph.applicationServicePrincipal @{oauth2PermissionScopes=System.Object[]; servicePrincipalType=Application; displ...}</dev:code>

        <dev:remarks>

          <maml:para>This command instantiates a new application based on application template referenced by the ID.</maml:para>

          <maml:para>- `-Id` specifies Application TemplateId.</maml:para>

          <maml:para>- `-DisplayName` specifies application template display name.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraApplicationFromApplicationTemplate</maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraApplicationKey</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraApplicationKey</command:noun>

      <maml:description>

        <maml:para>Adds a new key to an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Adds a new key to an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraApplicationKey</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>KeyCredential</maml:name>

          <maml:description>

            <maml:para>The application key credential to add.</maml:para>

            <maml:para>NOTES: keyId value should be null.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">KeyCredential</command:parameterValue>

          <dev:type>

            <maml:name>KeyCredential</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of the application object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PasswordCredential</maml:name>

          <maml:description>

            <maml:para>The application password credential to add.</maml:para>

            <maml:para>NOTES: keyId value should be null.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">PasswordCredential</command:parameterValue>

          <dev:type>

            <maml:name>PasswordCredential</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Proof</maml:name>

          <maml:description>

            <maml:para>A signed JWT token used as a proof of possession of the existing keys.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>KeyCredential</maml:name>

        <maml:description>

          <maml:para>The application key credential to add.</maml:para>

          <maml:para>NOTES: keyId value should be null.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">KeyCredential</command:parameterValue>

        <dev:type>

          <maml:name>KeyCredential</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of the application object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PasswordCredential</maml:name>

        <maml:description>

          <maml:para>The application password credential to add.</maml:para>

          <maml:para>NOTES: keyId value should be null.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">PasswordCredential</command:parameterValue>

        <dev:type>

          <maml:name>PasswordCredential</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Proof</maml:name>

        <maml:description>

          <maml:para>A signed JWT token used as a proof of possession of the existing keys.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.KeyCredential</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.PasswordCredential</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.KeyCredential</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>------ Example 1: Add a key credential to an application ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq '&lt;application-display-name&gt;'"

$params = @{

    ApplicationId = $application.Id

    KeyCredential = @{ key=[System.Convert]::FromBase64String('{base64cert}') }

    PasswordCredential = @{ DisplayName = 'mypassword' }

    Proof = '{token}'

}

New-EntraApplicationKey @params</dev:code>

        <dev:remarks>

          <maml:para>This command adds a key credential to an specified application.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the unique identifier of an application.</maml:para>

          <maml:para>- `-KeyCredential` parameter specifies the application key credential to add.</maml:para>

          <maml:para>- `-PasswordCredential` parameter specifies the application password credential to add.</maml:para>

          <maml:para>- `-Proof` parameter specifies the signed JWT token used as a proof of possession of the existing keys.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraApplicationKey</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationKey</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraApplicationKeyCredential</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraApplicationKeyCredential</command:noun>

      <maml:description>

        <maml:para>Creates a key credential for an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `New-EntraApplicationKeyCredential` cmdlet creates a key credential for an application.</maml:para>

      <maml:para>An application can use this command along with `Remove-EntraApplicationKeyCredential` to automate the rolling of its expiring keys.</maml:para>

      <maml:para>As part of the request validation, proof of possession of an existing key is verified before the action can be performed.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraApplicationKeyCredential</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>CustomKeyIdentifier</maml:name>

          <maml:description>

            <maml:para>Specifies a custom key ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>EndDate</maml:name>

          <maml:description>

            <maml:para>Specifies the time when the key becomes invalid as a DateTime object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies a unique ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>StartDate</maml:name>

          <maml:description>

            <maml:para>Specifies the time when the key becomes valid as a DateTime object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Type</maml:name>

          <maml:description>

            <maml:para>Specifies the type of the key.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">KeyType</command:parameterValue>

          <dev:type>

            <maml:name>KeyType</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Usage</maml:name>

          <maml:description>

            <maml:para>Specifies the key usage.</maml:para>

            <maml:para>- `AsymmetricX509Cert`: The usage must be `Verify`.</maml:para>

            <maml:para>- `X509CertAndPassword`: The usage must be `Sign`.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">KeyUsage</command:parameterValue>

          <dev:type>

            <maml:name>KeyUsage</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Value</maml:name>

          <maml:description>

            <maml:para>Specifies the value for the key.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>CustomKeyIdentifier</maml:name>

        <maml:description>

          <maml:para>Specifies a custom key ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>EndDate</maml:name>

        <maml:description>

          <maml:para>Specifies the time when the key becomes invalid as a DateTime object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies a unique ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>StartDate</maml:name>

        <maml:description>

          <maml:para>Specifies the time when the key becomes valid as a DateTime object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Type</maml:name>

        <maml:description>

          <maml:para>Specifies the type of the key.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">KeyType</command:parameterValue>

        <dev:type>

          <maml:name>KeyType</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Usage</maml:name>

        <maml:description>

          <maml:para>Specifies the key usage.</maml:para>

          <maml:para>- `AsymmetricX509Cert`: The usage must be `Verify`.</maml:para>

          <maml:para>- `X509CertAndPassword`: The usage must be `Sign`.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">KeyUsage</command:parameterValue>

        <dev:type>

          <maml:name>KeyUsage</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Value</maml:name>

        <maml:description>

          <maml:para>Specifies the value for the key.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>------ Example 1: Create a new application key credential ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$params = @{

    ApplicationId = $application.Id

    CustomKeyIdentifier = 'EntraPowerShellKey'

    StartDate = '2024-03-21T14:14:14Z'

    Type = 'Symmetric'

    Usage = 'Sign'

    Value = '&lt;my-value&gt;'

}

New-EntraApplicationKeyCredential @params

CustomKeyIdentifier : {84, 101, 115, 116}

EndDate             : 2024-03-21T14:14:14Z

KeyId               : aaaaaaaa-0b0b-1c1c-2d2d-333333333333

StartDate           : 2025-03-21T14:14:14Z

Type                : Symmetric

Usage               : Sign

Value               : {49, 50, 51}</dev:code>

        <dev:remarks>

          <maml:para>This example shows how to create an application key credential.</maml:para>

          <maml:para>- `-ApplicationId` Specifies a unique ID of an application</maml:para>

          <maml:para>- `-CustomKeyIdentifier` Specifies a custom key ID.</maml:para>

          <maml:para>- `-StartDate` Specifies the time when the key becomes valid as a DateTime object.</maml:para>

          <maml:para>- `-Type` Specifies the type of the key.</maml:para>

          <maml:para>- `-Usage` Specifies the key usage. for `AsymmetricX509Cert` the usage must be `Verify`and for `X509CertAndPassword` the usage must be `Sign`.</maml:para>

          <maml:para>- `-Value` Specifies the value for the key.</maml:para>

          <maml:para></maml:para>

          <maml:para>You can use the `Get-EntraApplication` cmdlet to retrieve the application Object ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Use a certificate to add an application key credential</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$cer = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2 #create a new certificate object

$cer.Import('C:\Users\ContosoUser\appcert.cer') 

$bin = $cer.GetRawCertData()

$base64Value = [System.Convert]::ToBase64String($bin)

$bin = $cer.GetCertHash()

$base64Thumbprint = [System.Convert]::ToBase64String($bin)

$keyid = [System.Guid]::NewGuid().ToString() 

$params = @{

    ApplicationId = $application.Id

    CustomKeyIdentifier = $base64Thumbprint

    Type = 'AsymmetricX509Cert'

    Usage = 'Verify'

    Value = $base64Value

    StartDate = $cer.GetEffectiveDateString()

    EndDate = $cer.GetExpirationDateString()

}

New-EntraApplicationKeyCredential @params</dev:code>

        <dev:remarks>

          <maml:para>This example shows how to create an application key credential.</maml:para>

          <maml:para>- `-ApplicationId` Specifies a unique ID of an application</maml:para>

          <maml:para>- `-CustomKeyIdentifier` Specifies a custom key ID.</maml:para>

          <maml:para>- `-StartDate` Specifies the time when the key becomes valid as a DateTime object.</maml:para>

          <maml:para>- `-EndDate` Specifies the time when the key becomes invalid as a DateTime object.</maml:para>

          <maml:para>- `-Type` Specifies the type of the key.</maml:para>

          <maml:para>- `-Usage` Specifies the key usage. for `AsymmetricX509Cert` the usage must be `Verify`and for `X509CertAndPassword` the usage must be `Sign`.</maml:para>

          <maml:para>- `-Value` Specifies the value for the key.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraApplicationKeyCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraApplicationPassword</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraApplicationPassword</command:noun>

      <maml:description>

        <maml:para>Adds a strong password to an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Adds a strong password to an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraApplicationPassword</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of the application object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PasswordCredential</maml:name>

          <maml:description>

            <maml:para>Represents a password credential associated with an application or a service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">PasswordCredential</command:parameterValue>

          <dev:type>

            <maml:name>PasswordCredential</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of the application object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PasswordCredential</maml:name>

        <maml:description>

          <maml:para>Represents a password credential associated with an application or a service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">PasswordCredential</command:parameterValue>

        <dev:type>

          <maml:name>PasswordCredential</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.PasswordCredential</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--------- Example 1: Add a password to an application ---------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Directory.ReadWrite.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$passwordCredential= New-Object Microsoft.Open.MSGraph.Model.PasswordCredential

$passwordCredential.StartDateTime = Get-Date -Year 2024 -Month 10 -Day 23

$passwordCredential.EndDateTime = Get-Date -Year 2025 -Month 2 -Day 28

$passwordCredential.CustomKeyIdentifier = [System.Text.Encoding]::UTF8.GetBytes('Analytics App Password')

$passwordCredential.Hint = 'analytics'

$passwordCredential.DisplayName = 'Analytics App Password'

New-EntraApplicationPassword -ApplicationId $application.Id -PasswordCredential $passwordCredential

CustomKeyIdentifier DisplayName EndDateTime          Hint KeyId                                SecretText                               StartDateTime

------------------- ----------- -----------          ---- -----                                ----------                               -------------

{97}                            2/28/2025 7:05:39 AM nnW  bbbbbbbb-1c1c-2d2d-3e3e-444444444444 &lt;my-secret-text&gt; 12/28/2024 7:05:39 AM</dev:code>

        <dev:remarks>

          <maml:para>This example adds a password to the specified application.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of the application.</maml:para>

          <maml:para>- `-PasswordCredential` parameter specifies a password credential associated with an application or a service principal.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraApplicationPassword</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationPassword</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraApplicationPasswordCredential</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraApplicationPasswordCredential</command:noun>

      <maml:description>

        <maml:para>Creates a password credential for an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `New-EntraApplicationPasswordCredential` cmdlet creates a password credential for an application in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraApplicationPasswordCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>CustomKeyIdentifier</maml:name>

          <maml:description>

            <maml:para>A unique binary identifier.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>StartDate</maml:name>

          <maml:description>

            <maml:para>The date and time at which the password becomes valid.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>EndDate</maml:name>

          <maml:description>

            <maml:para>The date and time at which the password expires.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>CustomKeyIdentifier</maml:name>

        <maml:description>

          <maml:para>A unique binary identifier.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>StartDate</maml:name>

        <maml:description>

          <maml:para>The date and time at which the password becomes valid.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>EndDate</maml:name>

        <maml:description>

          <maml:para>The date and time at which the password expires.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----------- Example 1: Create a password credential -----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "displayName eq '&lt;displayName&gt;'"

New-EntraApplicationPasswordCredential -ApplicationId $application.Id

CustomKeyIdentifier DisplayName EndDateTime          Hint KeyId                                SecretText                    StartDateTime

------------------- ----------- -----------          ---- -----                                ----------                    -------------

                                3/21/2026 9:48:40 AM n34  tttttttt-0000-2222-0000-aaaaaaaaaaaa wbBNW8kCuiPjNRg9NX98W_aaaaaaa 3/21/2024 9:48:40 AM</dev:code>

        <dev:remarks>

          <maml:para>This command creates new password credential for specified application.</maml:para>

          <maml:para>- `-ApplicationId` Specifies the ID of an application.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Create a password credential using CustomKeyIdentifier parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "displayName eq '&lt;displayName&gt;'"

New-EntraApplicationPasswordCredential -ApplicationId $application.Id -CustomKeyIdentifier '&lt;userfriendlyDisplayName&gt;'

CustomKeyIdentifier DisplayName EndDateTime          Hint KeyId                                SecretText                               StartDateTime

------------------- ----------- -----------          ---- -----                                ----------                               -------------

100 101 109 111     demo        8/2/2026 11:47:53 AM 8Mw  tttttttt-0000-2222-0000-aaaaaaaaaaaa wbBNW8kCuiPjNRg9NX98W_aaaaaaa 8/2/2024 11:47:53 AM</dev:code>

        <dev:remarks>

          <maml:para>This command creates new password credential for specified application.</maml:para>

          <maml:para>- `-ApplicationId` Specifies the ID of an application.</maml:para>

          <maml:para>- `-CustomKeyIdentifier` Speicifies unique binary identifier.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Create a password credential using StartDate parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "displayName eq '&lt;displayName&gt;'"

$startDate = (Get-Date).AddYears(0)

New-EntraApplicationPasswordCredential -ApplicationId $application.Id -CustomKeyIdentifier '&lt;userfriendlyDisplayName&gt;' -StartDate $startDate

CustomKeyIdentifier DisplayName EndDateTime          Hint KeyId                                SecretText                    StartDateTime

------------------- ----------- -----------          ---- -----                                ----------                    -------------

                                3/21/2026 9:48:40 AM n34  tttttttt-0000-2222-0000-aaaaaaaaaaaa wbBNW8kCuiPjNRg9NX98W_aaaaaaa 3/21/2024 9:48:40 AM</dev:code>

        <dev:remarks>

          <maml:para>This command creates new password credential for specified application.</maml:para>

          <maml:para>- `-ApplicationId` Specifies the ID of an application.</maml:para>

          <maml:para>- `-StartDate` Speicifies the date and time at which the password becomes valid.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 4: Create a password credential using EndDate parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "displayName eq '&lt;displayName&gt;'"

$endDate = (Get-Date).AddYears(2)

New-EntraApplicationPasswordCredential -ApplicationId $application.Id -CustomKeyIdentifier '&lt;userfriendlyDisplayName&gt;' -EndDate $endDate

CustomKeyIdentifier DisplayName EndDateTime          Hint KeyId                                SecretText                    StartDateTime

------------------- ----------- -----------          ---- -----                                ----------                    -------------

                                3/21/2026 9:48:40 AM n34  tttttttt-0000-2222-0000-aaaaaaaaaaaa wbBNW8kCuiPjNRg9NX98W_aaaaaaa 3/21/2024 9:48:40 AM</dev:code>

        <dev:remarks>

          <maml:para>This command creates new password credential for specified application.</maml:para>

          <maml:para>- `-ApplicationId` Specifies the ID of an application.</maml:para>

          <maml:para>- `-EndDate` Speicifies The date and time at which the password expires.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraApplicationPasswordCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraServicePrincipal</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraServicePrincipal</command:noun>

      <maml:description>

        <maml:para>Creates a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Create a new service Principal.</maml:para>

      <maml:para>For multitenant apps, the calling user must also be in at least one of the following Microsoft Entra roles:</maml:para>

      <maml:para>- Application Administrator</maml:para>

      <maml:para>- Cloud Application Administrator</maml:para>

      <maml:para></maml:para>

      <maml:para>For single-tenant apps where the calling user is a non-admin user but is the owner of the backing application, the user must have the Application Developer role.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraServicePrincipal</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AccountEnabled</maml:name>

          <maml:description>

            <maml:para>True if the service principal account is enabled; otherwise, false.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AlternativeNames</maml:name>

          <maml:description>

            <maml:para>The alternative names for this service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AppId</maml:name>

          <maml:description>

            <maml:para>The unique identifier for the associated application (its appId property).</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AppRoleAssignmentRequired</maml:name>

          <maml:description>

            <maml:para>Indicates whether an application role assignment is required.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

          <dev:type>

            <maml:name>System.Boolean</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>DisplayName</maml:name>

          <maml:description>

            <maml:para>Specifies the service principal display name.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Homepage</maml:name>

          <maml:description>

            <maml:para>Home page or landing page of the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>KeyCredentials</maml:name>

          <maml:description>

            <maml:para>The collection of key credentials associated with the service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>LogoutUrl</maml:name>

          <maml:description>

            <maml:para>Specifies the logout URL.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PasswordCredentials</maml:name>

          <maml:description>

            <maml:para>The collection of password credentials associated with the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ReplyUrls</maml:name>

          <maml:description>

            <maml:para>The URLs that user tokens are sent to for sign in with the associated application, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to for the associated application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ServicePrincipalNames</maml:name>

          <maml:description>

            <maml:para>Specifies an array of service principal names. Based on the identifierURIs collection, plus the application's appId property, these URIs are used to reference an application's service principal. A client uses ServicePrincipalNames to:</maml:para>

            <maml:para>- populate requiredResourceAccess, via "Permissions to other applications" in the Azure classic portal.</maml:para>

            <maml:para>- Specify a resource URI to acquire an access token, which is the URI returned in the claim.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ServicePrincipalType</maml:name>

          <maml:description>

            <maml:para>The type of the service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Tags</maml:name>

          <maml:description>

            <maml:para>Tags linked to this service principal.</maml:para>

            <maml:para>Note that if you intend for this service principal to show up in the All Applications list in the admin portal, you need to set this value to {WindowsAzureActiveDirectoryIntegratedApp}.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AccountEnabled</maml:name>

        <maml:description>

          <maml:para>True if the service principal account is enabled; otherwise, false.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AlternativeNames</maml:name>

        <maml:description>

          <maml:para>The alternative names for this service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AppId</maml:name>

        <maml:description>

          <maml:para>The unique identifier for the associated application (its appId property).</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AppRoleAssignmentRequired</maml:name>

        <maml:description>

          <maml:para>Indicates whether an application role assignment is required.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>DisplayName</maml:name>

        <maml:description>

          <maml:para>Specifies the service principal display name.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Homepage</maml:name>

        <maml:description>

          <maml:para>Home page or landing page of the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>KeyCredentials</maml:name>

        <maml:description>

          <maml:para>The collection of key credentials associated with the service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>LogoutUrl</maml:name>

        <maml:description>

          <maml:para>Specifies the logout URL.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PasswordCredentials</maml:name>

        <maml:description>

          <maml:para>The collection of password credentials associated with the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ReplyUrls</maml:name>

        <maml:description>

          <maml:para>The URLs that user tokens are sent to for sign in with the associated application, or the redirect URIs that OAuth 2.0 authorization codes and access tokens are sent to for the associated application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ServicePrincipalNames</maml:name>

        <maml:description>

          <maml:para>Specifies an array of service principal names. Based on the identifierURIs collection, plus the application's appId property, these URIs are used to reference an application's service principal. A client uses ServicePrincipalNames to:</maml:para>

          <maml:para>- populate requiredResourceAccess, via "Permissions to other applications" in the Azure classic portal.</maml:para>

          <maml:para>- Specify a resource URI to acquire an access token, which is the URI returned in the claim.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ServicePrincipalType</maml:name>

        <maml:description>

          <maml:para>The type of the service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Tags</maml:name>

        <maml:description>

          <maml:para>Tags linked to this service principal.</maml:para>

          <maml:para>Note that if you intend for this service principal to show up in the All Applications list in the admin portal, you need to set this value to {WindowsAzureActiveDirectoryIntegratedApp}.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Create a new service principal using DisplayName, AccountEnabled, Tags, and AppRoleAssignmentRequired</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

$params = @{

    AccountEnabled = $true 

    AppId = $application.AppId 

    AppRoleAssignmentRequired = $true 

    DisplayName = $application.DisplayName 

    Tags = {WindowsAzureActiveDirectoryIntegratedApp}

}

New-EntraServicePrincipal @params

DisplayName Id                                   AppId                                SignInAudience ServicePrincipalType

----------- --                                   -----                                -------------- --------------------

Helpdesk Application    bbbbbbbb-1111-2222-3333-cccccccccccc 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMyOrg   Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to create a new service Principal in Microsoft Entra ID. You can use the command `Get-EntraApplication` to get application app Id.</maml:para>

          <maml:para>The tag `-Tags {WindowsAzureActiveDirectoryIntegratedApp}` is used to have this service principal show up in the list of Integrated Applications in the Admin Portal.</maml:para>

          <maml:para>- `-AccountEnabled` parameter specifies true if the service principal account is enabled, otherwise false.</maml:para>

          <maml:para>- `-AppId` parameter specifies the unique identifier for the associated application (its appId property).</maml:para>

          <maml:para>- `-DisplayName` parameter specifies the service principal display name.</maml:para>

          <maml:para>- `-AppRoleAssignmentRequired` parameter indicates whether an application role assignment is required.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Create a new service principal using Homepage, logoutUrl, and ReplyUrls</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

$params = @{

    AppId = $application.AppId 

    Homepage = 'https://localhost/home' 

    LogoutUrl = 'htpp://localhost/logout' 

    ReplyUrls = 'https://localhost/redirect'

}

New-EntraServicePrincipal @params

DisplayName Id                                   AppId                                SignInAudience ServicePrincipalType

----------- --                                   -----                                -------------- --------------------

Helpdesk Application    bbbbbbbb-1111-2222-3333-cccccccccccc 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMyOrg   Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to create a new service Principal in Microsoft Entra ID. You can use the command `Get-EntraApplication` to get application app Id.</maml:para>

          <maml:para>- `-AppId` parameter specifies the unique identifier for the associated application (its appId property).</maml:para>

          <maml:para>- `-Homepage` parameter specifies the home page or landing page of the application.</maml:para>

          <maml:para>- `-LogoutUrl` parameter specifies the logout URL.</maml:para>

          <maml:para>- `-ReplyUrls` parameter specifies the URLs that user tokens are sent to for sign in with the associated application.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>- Example 3: Create a new service principal by KeyCredentials -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$creds = New-Object Microsoft.Open.AzureAD.Model.KeyCredential

$creds.CustomKeyIdentifier = [System.Text.Encoding]::UTF8.GetBytes('Test')

$startdate = Get-Date -Year 2023 -Month 10 -Day 23

$creds.StartDate = $startdate

$creds.Type = 'Symmetric'

$creds.Usage = 'Sign'

$creds.Value = [System.Text.Encoding]::UTF8.GetBytes('strong-cred-value')

$creds.EndDate = Get-Date -Year 2024 -Month 10 -Day 23

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

New-EntraServicePrincipal -AppId $application.AppId -KeyCredentials $creds

DisplayName Id                                   AppId                                SignInAudience ServicePrincipalType

----------- --                                   -----                                -------------- --------------------

Helpdesk Application    bbbbbbbb-1111-2222-3333-cccccccccccc 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADMyOrg   Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to create a new service Principal in Microsoft Entra ID. You can use the command `Get-EntraApplication` to get application app Id.</maml:para>

          <maml:para>- `-AppId` parameter specifies the unique identifier for the associated application (its appId property).</maml:para>

          <maml:para>- `-KeyCredentials` parameter specifies the collection of key credentials associated with the service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 4: Create a new service principal by AlternativeNames, ServicePrincipalType, and ServicePrincipalName</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Helpdesk Application'"

New-EntraServicePrincipal -AppId $application.AppId -AlternativeNames 'sktest2' -ServicePrincipalType 'Application' -ServicePrincipalNames $application.AppId

DisplayName Id                                   AppId                                SignInAudience                     ServicePrincipalType

----------- --                                   -----                                --------------                     --------------------

Helpdesk Application   bbbbbbbb-1111-2222-3333-cccccccccccc 00001111-aaaa-2222-bbbb-3333cccc4444 AzureADandPersonalMicrosoftAccount Application</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to create a new service Principal in Microsoft Entra ID. You can use the command `Get-EntraApplication` to get application app Id.</maml:para>

          <maml:para>- `-AppId` parameter specifies the unique identifier for the associated application (its appId property).</maml:para>

          <maml:para>- `-AlternativeNames` parameter specifies the alternative names for this service principal.</maml:para>

          <maml:para>- `-ServicePrincipalType` parameter specifies the type of the service principal.</maml:para>

          <maml:para>- `-ServicePrincipalNames` parameter specifies an array of service principal names.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraServicePrincipal</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraServicePrincipalAppRoleAssignment</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraServicePrincipalAppRoleAssignment</command:noun>

      <maml:description>

        <maml:para>Assigns a service principal to an application role.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `New-EntraServicePrincipalAppRoleAssignment` cmdlet assigns a service principal to an application role in Microsoft Entra ID.</maml:para>

      <maml:para>For delegated scenarios, the calling user needs at least one of the following Microsoft Entra roles.</maml:para>

      <maml:para>- Directory Synchronization Accounts</maml:para>

      <maml:para>- Directory Writer</maml:para>

      <maml:para>- Hybrid Identity Administrator</maml:para>

      <maml:para>- Identity Governance Administrator</maml:para>

      <maml:para>- Privileged Role Administrator</maml:para>

      <maml:para>- User Administrator</maml:para>

      <maml:para>- Application Administrator</maml:para>

      <maml:para>- Cloud Application Administrator</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraServicePrincipalAppRoleAssignment</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Id</maml:name>

          <maml:description>

            <maml:para>Specifies the ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies a principal ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ResourceId</maml:name>

          <maml:description>

            <maml:para>Specifies a resource ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Id</maml:name>

        <maml:description>

          <maml:para>Specifies the ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies a principal ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ResourceId</maml:name>

        <maml:description>

          <maml:para>Specifies a resource ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para>`New-EntraServiceAppRoleAssignment` is an alias for `New-EntraServicePrincipalAppRoleAssignment`.</maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----- Example 1: Assign an app role to a service principal -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'AppRoleAssignment.ReadWrite.All'

$clientServicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'" 

$resourceServicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Microsoft Graph'"

$appRole = $resourceServicePrincipal.AppRoles | Where-Object { $_.Value -eq "User.ReadBasic.All" }

New-EntraServicePrincipalAppRoleAssignment -ObjectId $clientServicePrincipal.Id -PrincipalId $clientServicePrincipal.Id -Id $appRole.Id -ResourceId $resourceServicePrincipal.Id</dev:code>

        <dev:remarks>

          <maml:para></maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>-- Example 2: Assign an app role to another service principal --</maml:title>

        <dev:code>Connect-Entra -Scopes 'AppRoleAssignment.ReadWrite.All'

$clientServicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$servicePrincipalObject = Get-EntraServicePrincipal -Filter "displayName eq 'Box'"

New-EntraServicePrincipalAppRoleAssignment -ObjectId $clientServicePrincipal.Id -PrincipalId $clientServicePrincipal.Id -ResourceId $servicePrincipalObject.Id -Id $servicePrincipalObject.Approles[1].Id

Id                                          AppRoleId                            CreationTimestamp   PrincipalDisplayName PrincipalId                          PrincipalType    ResourceDisplayName ResourceId

--                                          ---------                            -----------------   -------------------- -----------                          -------------    ------------------- ----------

1aaaaaa1-2bb2-3cc3-4dd4-5eeeeeeeeee5 00000000-0000-0000-0000-000000000000 12-03-2024 11:05:29 Box                  aaaaaaaa-bbbb-cccc-1111-222222222222 ServicePrincipal Box                 aaaa0000-bb11-2222-33cc-444444dddddd</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to assign an app role to another service principal in Microsoft Entra ID. You can use the command `Get-EntraServicePrincipal` to get a service principal Id.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the ObjectId of a client service principal to which you're assigning the app role.</maml:para>

          <maml:para>- `-ResourceId`parameter specifies the ObjectId of the resource service principal.</maml:para>

          <maml:para>- `-Id` parameter specifies the Id of the app role (defined on the resource service principal) to assign to the client service principal. If no app roles are defined on the resource app, you can use `00000000-0000-0000-0000-000000000000`.</maml:para>

          <maml:para>- `-PrincipalId` parameter specifies the ObjectId of the client service principal to which you're assigning the app role.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>----------- Example 3: Assign an app role to a user -----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'AppRoleAssignment.ReadWrite.All'

$servicePrincipalObject = Get-EntraServicePrincipal -Filter "displayName eq 'Box'"

$user = Get-EntraUser -UserId 'PattiF@Contoso.com'

New-EntraServicePrincipalAppRoleAssignment `

    -ObjectId $servicePrincipalObject.Id `

    -ResourceId $servicePrincipalObject.Id `

    -Id $servicePrincipalObject.Approles[1].Id `

    -PrincipalId $user.Id

Id                                          AppRoleId                            CreationTimestamp   PrincipalDisplayName PrincipalId                          PrincipalType    ResourceDisplayName ResourceId

--                                          ---------                            -----------------   -------------------- -----------                          -------------    ------------------- ----------

2bbbbbb2-3cc3-4dd4-5ee5-6ffffffffff6 00000000-0000-0000-0000-000000000000 12-03-2024 11:05:29 Box                  aaaaaaaa-bbbb-cccc-1111-222222222222 ServicePrincipal Box                 bbbb1111-cc22-3333-44dd-555555eeeeee</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to assign an app role to a user in Microsoft Entra ID.

You can use the command `Get-EntraServicePrincipal` to get a service principal Id.

You can use the command `Get-EntraUser` to get a user Id.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the ObjectId of the app's service principal.</maml:para>

          <maml:para>- `-ResourceId`parameter specifies the ObjectId of the app's service principal.</maml:para>

          <maml:para>- `-Id` parameter specifies the Id of app role (defined on the app's service principal) to assign to the user. If no app roles are defined to the resource app, you can use `00000000-0000-0000-0000-000000000000` to indicate that the app is assigned to the user.</maml:para>

          <maml:para>- `-PrincipalId` parameter specifies the ObjectId of a user to which you're assigning the app role.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>----------- Example 4: Assign an app role to a group -----------</maml:title>

        <dev:code>Connect-Entra -Scopes 'AppRoleAssignment.ReadWrite.All'

$servicePrincipalObject = Get-EntraServicePrincipal -Filter "displayName eq 'Box'"

$group = Get-EntraGroup -Filter "displayName eq 'Contoso marketing'"

New-EntraServicePrincipalAppRoleAssignment `

    -ObjectId $servicePrincipalObject.Id `

    -ResourceId $servicePrincipalObject.Id `

    -Id $servicePrincipalObject.Approles[1].Id `

    -PrincipalId $group.Id

Id                                          AppRoleId                            CreationTimestamp   PrincipalDisplayName PrincipalId                          PrincipalType    ResourceDisplayName ResourceId

--                                          ---------                            -----------------   -------------------- -----------                          -------------    ------------------- ----------

3cccccc3-4dd4-5ee5-6ff6-7aaaaaaaaaa7 00000000-0000-0000-0000-000000000000 12-03-2024 11:05:29 Box                  aaaaaaaa-bbbb-cccc-1111-222222222222 ServicePrincipal Box                 cccc2222-dd33-4444-55ee-666666ffffff</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to assign an app role to a group in Microsoft Entra ID.

You can use the command `Get-EntraServicePrincipal` to get a service principal Id.

You can use the command `Get-EntraGroup` to get a group Id.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the ObjectId of the app's service principal.</maml:para>

          <maml:para>- `-ResourceId`parameter specifies the ObjectId of the app's service principal.</maml:para>

          <maml:para>- `-Id` parameter specifies the Id of app role (defined on the app's service principal) to assign to the group. If no app roles are defined to the resource app, you can use `00000000-0000-0000-0000-000000000000` to indicate that the app is assigned to the group.</maml:para>

          <maml:para>- `-PrincipalId` parameter specifies the ObjectId of a group to which you're assigning the app role.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraServicePrincipalAppRoleAssignment</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalAppRoleAssignment</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalAppRoleAssignment</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraServicePrincipalKeyCredential</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraServicePrincipalKeyCredential</command:noun>

      <maml:description>

        <maml:para>Creates a password credential for a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The New-EntraServicePrincipalKeyCredential cmdlet creates a key credential for a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraServicePrincipalKeyCredential</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>CustomKeyIdentifier</maml:name>

          <maml:description>

            <maml:para>Specifies a custom key ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>EndDate</maml:name>

          <maml:description>

            <maml:para>Specifies the time when the key becomes invalid as a DateTime object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>Specifies an object ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>StartDate</maml:name>

          <maml:description>

            <maml:para>Specifies the time when the key becomes valid as a DateTime object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Type</maml:name>

          <maml:description>

            <maml:para>Specifies the type of the key.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">KeyType</command:parameterValue>

          <dev:type>

            <maml:name>KeyType</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Usage</maml:name>

          <maml:description>

            <maml:para>Specifies the key usage.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">KeyUsage</command:parameterValue>

          <dev:type>

            <maml:name>KeyUsage</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Value</maml:name>

          <maml:description>

            <maml:para>Specifies the value for the key.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>CustomKeyIdentifier</maml:name>

        <maml:description>

          <maml:para>Specifies a custom key ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>EndDate</maml:name>

        <maml:description>

          <maml:para>Specifies the time when the key becomes invalid as a DateTime object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>Specifies an object ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>StartDate</maml:name>

        <maml:description>

          <maml:para>Specifies the time when the key becomes valid as a DateTime object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Type</maml:name>

        <maml:description>

          <maml:para>Specifies the type of the key.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">KeyType</command:parameterValue>

        <dev:type>

          <maml:name>KeyType</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Usage</maml:name>

        <maml:description>

          <maml:para>Specifies the key usage.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">KeyUsage</command:parameterValue>

        <dev:type>

          <maml:name>KeyUsage</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Value</maml:name>

        <maml:description>

          <maml:para>Specifies the value for the key.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>-------------- Example 1: Create a key credential --------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

New-EntraServicePrincipalKeyCredential</dev:code>

        <dev:remarks>

          <maml:para>This command creates a key credential for a service principal.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraServicePrincipalKeyCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>New-EntraServicePrincipalPasswordCredential</command:name>

      <command:verb>New</command:verb>

      <command:noun>EntraServicePrincipalPasswordCredential</command:noun>

      <maml:description>

        <maml:para>Creates a password credential for a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `New-EntraServicePrincipalPasswordCredential` cmdlet creates a password credential for a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>New-EntraServicePrincipalPasswordCredential</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>EndDate</maml:name>

          <maml:description>

            <maml:para>The date and time at which the password expires represented using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2024 is 2024-01-01T00:00:00Z.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>StartDate</maml:name>

          <maml:description>

            <maml:para>The date and time at which the password becomes valid. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2024 is 2024-01-01T00:00:00Z.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

          <dev:type>

            <maml:name>System.DateTime</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>EndDate</maml:name>

        <maml:description>

          <maml:para>The date and time at which the password expires represented using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2024 is 2024-01-01T00:00:00Z.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>StartDate</maml:name>

        <maml:description>

          <maml:para>The date and time at which the password becomes valid. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2024 is 2024-01-01T00:00:00Z.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.DateTime</command:parameterValue>

        <dev:type>

          <maml:name>System.DateTime</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>---- Example 1: Create a password credential with StartDate ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

New-EntraServicePrincipalPasswordCredential -ServicePrincipalId $servicePrincipal.Id -StartDate '2024-11-04T14:14:14Z'

secretText          : A1bC2dE3fH4iJ5kL6mN7oP8qR9sT0u

@odata.type         : #microsoft.graph.servicePrincipal

endDateTime         : 08-08-2026 10:30:00

hint                : LY.

customKeyIdentifier :

startDateTime       : 08-08-2024 14:14:14

keyId               : aaaaaaaa-0b0b-1c1c-2d2d-333333333333

@odata.context      : https://graph.microsoft.com/beta/$metadata#servicePrincipals('00001111-aaaa-2222-bbbb-3333cccc4444')/addPassword

displayName         :

StartDate           : 08-08-2024 14:14:14

EndDate             : 08-08-2026 10:30:00</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to create a password credential with StartDate for a service principal in Microsoft Entra ID.

- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

          <maml:para>- `-StarteDate` parameter specifies the date and time at which the password becomes valid.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>----- Example 2: Create a password credential with EndDate -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

New-EntraServicePrincipalPasswordCredential -ServicePrincipalId $servicePrincipal.Id -EndDate '2024-11-04T14:14:14Z'

secretText          : A1bC2dE3fH4iJ5kL6mN7oP8qR9sT0u

@odata.type         : #microsoft.graph.servicePrincipal

endDateTime         : 08-08-2026 10:30:00

hint                : LY.

customKeyIdentifier :

startDateTime       : 08-08-2024 14:14:14

keyId               : bbbbbbbb-1c1c-2d2d-3e3e-444444444444

@odata.context      : https://graph.microsoft.com/beta/$metadata#servicePrincipals('00001111-aaaa-2222-bbbb-3333cccc4444')/addPassword

displayName         :

StartDate           : 08-08-2024 14:14:14

EndDate             : 08-08-2026 10:30:00</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to create a password credential with EndDate for a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

          <maml:para>- `-EndDate` parameter specifies the date and time at which the password expires represented using ISO 8601 format and is always in UTC time.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/New-EntraServicePrincipalPasswordCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipalPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplication</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplication</command:noun>

      <maml:description>

        <maml:para>Deletes an application object.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraApplication` cmdlet deletes an application object identified by ApplicationId. Specify the `ApplicationId` parameter to delete an application object.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplication</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--------------- Example 1: Remove an application ---------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Remove-EntraApplication -ApplicationId $application.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to delete an application object.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------ Example 2: Remove an application using pipelining ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'" | Remove-EntraApplication</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to delete an application object using pipelining.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplication</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplicationExtensionProperty</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplicationExtensionProperty</command:noun>

      <maml:description>

        <maml:para>Removes an application extension property.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraApplicationExtensionProperty` cmdlet removes an application extension property for an object in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplicationExtensionProperty</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ExtensionPropertyId</maml:name>

          <maml:description>

            <maml:para>Specifies the unique ID of the extension property to remove.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the unique ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ExtensionPropertyId</maml:name>

        <maml:description>

          <maml:para>Specifies the unique ID of the extension property to remove.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the unique ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----- Example 1: Remove an application extension property -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$extension = Get-EntraApplicationExtensionProperty -ApplicationId $application.Id | Where-Object {$_.Name -eq 'extension_3ed1a24748dd4e4cb91fc0ab09576ff0_NewAttribute'}

Remove-EntraApplicationExtensionProperty -ApplicationId $application.Id -ExtensionPropertyId $extension.Id</dev:code>

        <dev:remarks>

          <maml:para>This example removes the extension property that has the specified ID from an application in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

          <maml:para>- `-ExtensionPropertyId` parameter specifies the  unique identifier of the extension property to remove.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplicationExtensionProperty</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationExtensionProperty</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplicationExtensionProperty</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplicationKey</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplicationKey</command:noun>

      <maml:description>

        <maml:para>Removes a key from an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Removes a key from an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplicationKey</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the unique ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>KeyId</maml:name>

          <maml:description>

            <maml:para>The key Id corresponding to the key object to be removed.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Proof</maml:name>

          <maml:description>

            <maml:para>The JWT token provided as a proof of possession.</maml:para>

            <maml:para>A self-signed JWT token used as a proof of possession of the existing keys. This JWT token must be signed with a private key that corresponds to one of the existing valid certificates associated with the application. The token should contain the following claims:</maml:para>

            <maml:para>- `aud`: Audience needs to be 00000002-0000-0000-c000-000000000000.</maml:para>

            <maml:para>- `iss`: Issuer needs to be the ID of the application that initiates the request.</maml:para>

            <maml:para>- `nbf`: Not before time.</maml:para>

            <maml:para>- `exp`: Expiration time should be the value of nbf + 10 minutes.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the unique ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>KeyId</maml:name>

        <maml:description>

          <maml:para>The key Id corresponding to the key object to be removed.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Proof</maml:name>

        <maml:description>

          <maml:para>The JWT token provided as a proof of possession.</maml:para>

          <maml:para>A self-signed JWT token used as a proof of possession of the existing keys. This JWT token must be signed with a private key that corresponds to one of the existing valid certificates associated with the application. The token should contain the following claims:</maml:para>

          <maml:para>- `aud`: Audience needs to be 00000002-0000-0000-c000-000000000000.</maml:para>

          <maml:para>- `iss`: Issuer needs to be the ID of the application that initiates the request.</maml:para>

          <maml:para>- `nbf`: Not before time.</maml:para>

          <maml:para>- `exp`: Expiration time should be the value of nbf + 10 minutes.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>---- Example 1: Remove a key credential from an application ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Directory.ReadWrite.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Remove-EntraApplicationKey -ApplicationId $application.Id -KeyId 'aaaaaaaa-0b0b-1c1c-2d2d-333333333333' -Proof '{token}'</dev:code>

        <dev:remarks>

          <maml:para>This command removes the specified key credential from the specified application.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the unique identifier of an application.</maml:para>

          <maml:para>- `-KeyId` parameter specifies the key Id corresponding to the key object to be removed.</maml:para>

          <maml:para>- `-Proof` parameter specifies the JWT token provided as a proof of possession.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplicationKey</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplicationKey</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplicationKeyCredential</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplicationKeyCredential</command:noun>

      <maml:description>

        <maml:para>Removes a key credential from an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraApplicationKeyCredential` cmdlet removes a key credential from an application.</maml:para>

      <maml:para>An application can use this command along with `New-EntraApplicationKeyCredential` to automate the rolling of its expiring keys.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplicationKeyCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>KeyId</maml:name>

          <maml:description>

            <maml:para>Specifies a custom key ID. The unique identifier for the password.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies a unique ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>KeyId</maml:name>

        <maml:description>

          <maml:para>Specifies a custom key ID. The unique identifier for the password.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies a unique ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>-------------- Example 1: Remove a key credential --------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Remove-EntraApplicationKeyCredential -ApplicationId $application.Id -KeyId 'aaaaaaaa-0b0b-1c1c-2d2d-333333333333'</dev:code>

        <dev:remarks>

          <maml:para>This command removes the specified key credential from the specified application.</maml:para>

          <maml:para>- `-ApplicationId` Specifies the ID of an application.</maml:para>

          <maml:para>- `-KeyId` Specifies a custom key ID. Use `Get-EntraApplicationKeyCredential` to get the keyId details.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplicationKeyCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplicationKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplicationOwner</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplicationOwner</command:noun>

      <maml:description>

        <maml:para>Removes an owner from an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraApplicationOwner` cmdlet removes an owner from an application in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplicationOwner</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>OwnerId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the owner.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>OwnerId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the owner.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>-------- Example 1: Remove an owner from an application --------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

Remove-EntraApplicationOwner @params

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$owner = Get-EntraApplicationOwner -ApplicationId $application.Id | Where-Object {$_.userPrincipalName -eq 'SawyerM@contoso.com'}

Remove-EntraApplicationOwner -ApplicationId $application.Id -OwnerId $owner.Id</dev:code>

        <dev:remarks>

          <maml:para>This example removes the specified owner from the specified application. You can use the command `Get-EntraApplication` to get application Id.</maml:para>

          <maml:para>- `-ApplicationId` parameter specifies the the unique identifier of a application.</maml:para>

          <maml:para>- `-OwnerId` parameter specifies the ID of the owner.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplicationOwner</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Add-EntraApplicationOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplicationPassword</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplicationPassword</command:noun>

      <maml:description>

        <maml:para>Remove a password from an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Remove a password from an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplicationPassword</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>KeyId</maml:name>

          <maml:description>

            <maml:para>The unique identifier for the key.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>KeyId</maml:name>

        <maml:description>

          <maml:para>The unique identifier for the key.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>------ Example 1: Removes a password from an application ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$applicationPassword = Get-EntraApplicationPasswordCredential -ApplicationId $application.Id | Where-Object {$_.DisplayName -eq 'CRM Helpdesk App'}

Remove-EntraApplicationPassword -ObjectId $application.Id -KeyId $applicationPassword.KeyId</dev:code>

        <dev:remarks>

          <maml:para>This example removes the specified password from the specified application.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the unique identifier of the application.</maml:para>

          <maml:para>- `-KeyId` parameter specifies the unique identifier of the PasswordCredential.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplicationPassword</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplicationPassword</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplicationPasswordCredential</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplicationPasswordCredential</command:noun>

      <maml:description>

        <maml:para>Removes a password credential from an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraApplicationPasswordCredential` cmdlet removes a password credential from an application in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplicationPasswordCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>KeyId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the password credential.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>KeyId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the password credential.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----- Example 1: Remove an application password credential -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "displayName eq 'Contoso Helpdesk Application'"

$applicationPassword = Get-EntraApplicationPasswordCredential -ApplicationId $application.Id | Where-Object {$_.DisplayName -eq 'ERP App Password'}

Remove-EntraApplicationPasswordCredential -ApplicationId $application.Id -KeyId $applicationPassword.KeyId</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to remove the password credential for an application.</maml:para>

          <maml:para>- `ApplicationId` Specifies the ID of the application. Use `Get-EntraApplication` to get application ObjectId value.</maml:para>

          <maml:para>- `KeyId` Specifies the ID of the password credential. Use `Get-EntraApplicationPasswordCredential` to retrieve a specific credential details.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplicationPasswordCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraApplicationVerifiedPublisher</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraApplicationVerifiedPublisher</command:noun>

      <maml:description>

        <maml:para>Removes the verified publisher from an application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Removes the verified publisher from an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraApplicationVerifiedPublisher</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>AppObjectId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a Microsoft Entra ID Application object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>AppObjectId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of a Microsoft Entra ID Application object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>- Example 1: Remove the verified publisher from an application -</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$application = Get-EntraApplication -Filter "displayName eq 'Contoso Helpdesk Application'"

Remove-EntraApplicationVerifiedPublisher -AppObjectId $application.Id</dev:code>

        <dev:remarks>

          <maml:para>This command demonstrates how to remove the verified publisher from an application.

- `-AppObjectId` parameter specifies the unique identifier of an application.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraApplicationVerifiedPublisher</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraApplicationVerifiedPublisher</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraDeletedApplication</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraDeletedApplication</command:noun>

      <maml:description>

        <maml:para>Permanently delete a recently deleted application object from deleted items.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Permanently delete a recently deleted application object from deleted items. After an item is permanently deleted, it can't be restored.</maml:para>

      <maml:para>For delegated scenarios, the calling user needs to have at least one of the following Microsoft Entra roles.</maml:para>

      <maml:para>- To permanently delete deleted applications or service principals: Application Administrator, Cloud Application Administrator, or Hybrid Identity Administrator.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraDeletedApplication</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="0" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of deleted application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="0" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of deleted application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--------- Example 1: Remove deleted application object ---------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$deletedApplication = Get-EntraDeletedApplication -SearchString 'My PowerShell Application' 

Remove-EntraDeletedApplication -ObjectId $deletedApplication.Id</dev:code>

        <dev:remarks>

          <maml:para>This command removes recently deleted application. You can use the command  `Get-EntraDeletedApplication` to get deleted application Id.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the Id of a deleted application.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>---- Example 2: Remove deleted application using pipelining ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

Get-EntraDeletedApplication -Filter "DisplayName eq 'My PowerShell Application'" | Remove-EntraDeletedApplication</dev:code>

        <dev:remarks>

          <maml:para>This command removes recently deleted application using pipelining.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraDeletedApplication</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraDeletedApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Restore-EntraDeletedApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraDeletedDirectoryObject</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraDeletedDirectoryObject</command:noun>

      <maml:description>

        <maml:para>Permanently delete a previously deleted directory object.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraDeletedDirectoryObject` cmdlet is used to permanently delete a previously deleted directory object.</maml:para>

      <maml:para>When a directory object is permanently deleted, it can no longer be restored.</maml:para>

      <maml:para>For delegated scenarios, the calling user needs to have at least one of the following Microsoft Entra roles.</maml:para>

      <maml:para>- To permanently delete deleted applications or service principals: `Application Administrator`, `Cloud Application Administrator`, or `Hybrid Identity Administrator`.</maml:para>

      <maml:para>- To permanently delete deleted users: `User Administrator`.</maml:para>

      <maml:para>- To permanently delete deleted groups: `Groups Administrator`.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraDeletedDirectoryObject</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="Id">

          <maml:name>DirectoryObjectId</maml:name>

          <maml:description>

            <maml:para>The DirectoryObjectId of the directory object that is permanently deleted.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="Id">

        <maml:name>DirectoryObjectId</maml:name>

        <maml:description>

          <maml:para>The DirectoryObjectId of the directory object that is permanently deleted.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--- Example 1: Delete a previously deleted directory object ---</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Group.ReadWrite.All','Application.ReadWrite.All','User.ReadWrite.All'

$deletedApplication = Get-EntraDeletedApplication -SearchString 'My PowerShell Application'

Remove-EntraDeletedDirectoryObject -DirectoryObjectId $deletedApplication.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to permanently delete a previously deleted directory object by DirectoryObjectId.</maml:para>

          <maml:para>- `-DirectoryObjectId` parameter specifies the Id of the directory object that is permanently deleted.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraDeletedDirectoryObject</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraDeletedDirectoryObject</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Restore-EntraDeletedDirectoryObject</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraServicePrincipal</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraServicePrincipal</command:noun>

      <maml:description>

        <maml:para>Removes a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraServicePrincipal` cmdlet removes a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraServicePrincipal</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>------------ Example 1: Removes a service principal ------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'" | Remove-EntraServicePrincipal</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to remove a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal Id.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraServicePrincipal</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Set-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraServicePrincipalAppRoleAssignment</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraServicePrincipalAppRoleAssignment</command:noun>

      <maml:description>

        <maml:para>Removes a service principal application role assignment.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraServicePrincipalAppRoleAssignment` cmdlet removes a service principal application role assignment in Microsoft Entra ID.</maml:para>

      <maml:para>App roles which are assigned to service principals are also known as application permissions. Deleting an app role assignment for a service principal is equivalent to revoking the app-only permission grant.</maml:para>

      <maml:para>For delegated scenarios, the calling user needs at least one of the following Microsoft Entra roles.</maml:para>

      <maml:para>- Directory Synchronization Accounts</maml:para>

      <maml:para>- Directory Writer</maml:para>

      <maml:para>- Hybrid Identity Administrator</maml:para>

      <maml:para>- Identity Governance Administrator</maml:para>

      <maml:para>- Privileged Role Administrator</maml:para>

      <maml:para>- User Administrator</maml:para>

      <maml:para>- Application Administrator</maml:para>

      <maml:para>- Cloud Application Administrator</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraServicePrincipalAppRoleAssignment</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>AppRoleAssignmentId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the application role assignment.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>AppRoleAssignmentId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the application role assignment.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para>`Remove-EntraServiceAppRoleAssignment` is an alias for `Remove-EntraServicePrincipalAppRoleAssignment`.</maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Removes a service principal application role assignment</maml:title>

        <dev:code>Connect-Entra -Scopes 'AppRoleAssignment.ReadWrite.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$group = Get-EntraGroup -Filter "displayName eq 'Contoso marketing'"

$assignment = Get-EntraServicePrincipalAppRoleAssignment -ServicePrincipalId $servicePrincipal.Id | Where-Object {$_.PrincipalId -eq $group.Id} 

Remove-EntraServicePrincipalAppRoleAssignment -ServicePrincipalId $servicePrincipal.Id  -AppRoleAssignmentId $assignment.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to remove a service principal application role assignment for a group in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` - specifies the unique identifier (Object ID) of the service principal or user from which you want to remove an app role assignment.</maml:para>

          <maml:para>- `-AppRoleAssignmentId` - specifies the unique identifier (ID) of the app role assignment that you want to remove.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraServicePrincipalAppRoleAssignment</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalAppRoleAssignment</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipalAppRoleAssignment</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraServicePrincipalDelegatedPermissionClassification</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraServicePrincipalDelegatedPermissionClassification</command:noun>

      <maml:description>

        <maml:para>Remove delegated permission classification.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraServicePrincipalDelegatedPermissionClassification` cmdlet deletes the given delegated permission classification by Id from service principal.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraServicePrincipalDelegatedPermissionClassification</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a service principal object in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>Id</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a delegated permission classification object Id.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of a service principal object in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>Id</maml:name>

        <maml:description>

          <maml:para>The unique identifier of a delegated permission classification object Id.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--- Example 1: Remove a delegated permission classification ---</maml:title>

        <dev:code>Connect-Entra -Scopes 'Policy.ReadWrite.PermissionGrant'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$permissionClassification = Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id | Where-Object {$_.PermissionName -eq 'Sites.Read.All'}

Remove-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Id $permissionClassification.Id</dev:code>

        <dev:remarks>

          <maml:para>This command deletes the delegated permission classification by Id from the service principal.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the unique identifier of a service principal.</maml:para>

          <maml:para>- `-Id` parameter specifies the unique identifier of a delegated permission classification object Id.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraServicePrincipalDelegatedPermissionClassification</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalDelegatedPermissionClassification</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Add-EntraServicePrincipalDelegatedPermissionClassification</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraServicePrincipalKeyCredential</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraServicePrincipalKeyCredential</command:noun>

      <maml:description>

        <maml:para>Removes a key credential from a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The Remove-EntraServicePrincipalKeyCredential cmdlet removes a key credential from a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraServicePrincipalKeyCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>KeyId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a key credential.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>KeyId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a key credential.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>-------------- Example 1: Remove a key credential --------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All', 'Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$key = Get-EntraServicePrincipalKeyCredential -ServicePrincipalId $servicePrincipal.Id

Remove-EntraServicePrincipalKeyCredential -ServicePrincipalId $servicePrincipal.Id -KeyId $key.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to remove a key credential from a service principal in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraServicePrincipalKeyCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipalKeyCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraServicePrincipalOwner</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraServicePrincipalOwner</command:noun>

      <maml:description>

        <maml:para>Removes an owner from a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraServicePrincipalOwner` cmdlet removes an owner from a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraServicePrincipalOwner</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>OwnerId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of the owner.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>OwnerId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of the owner.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----- Example 1: Removes an owner from a service principal -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$ownership = Get-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id | Select-Object Id, userPrincipalName, DisplayName, '@odata.type'

$owner = $ownership | Where-Object {$_.userPrincipalName -eq 'SawyerM@Contoso.com' }

Remove-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id -OwnerId $owner.Id</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to remove an owner from a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the service principal Id.</maml:para>

          <maml:para>- `-OwnerId` parameter specifies the service principal owner Id.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraServicePrincipalOwner</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Add-EntraServicePrincipalOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalOwner</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Remove-EntraServicePrincipalPasswordCredential</command:name>

      <command:verb>Remove</command:verb>

      <command:noun>EntraServicePrincipalPasswordCredential</command:noun>

      <maml:description>

        <maml:para>Removes a password credential from a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Remove-EntraServicePrincipalPasswordCredential` cmdlet removes a password credential from a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Remove-EntraServicePrincipalPasswordCredential</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>KeyId</maml:name>

          <maml:description>

            <maml:para>Specifies the unique identifier of password credential.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>KeyId</maml:name>

        <maml:description>

          <maml:para>Specifies the unique identifier of password credential.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Remove a password credential from a service principal in Microsoft Entra ID</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$key = Get-EntraServicePrincipalPasswordCredential -ServicePrincipalId $servicePrincipal.Id

$key = $key | Where-Object {$_.DisplayName -eq 'Helpdesk secret'}

Remove-EntraServicePrincipalPasswordCredential -ServicePrincipalId $servicePrincipal.Id -KeyId $key.KeyId</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to remove a password credential from a service principal in Microsoft Entra ID.

- `-ServicePrincipalId` parameter specifies the ServicePrincipalId of a specified Service Principal Password Credential.

- `-KeyId` parameter specifies the unique identifier of a Password Credential.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Remove-EntraServicePrincipalPasswordCredential</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipalPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipalPasswordCredential</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Restore-EntraDeletedApplication</command:name>

      <command:verb>Restore</command:verb>

      <command:noun>EntraDeletedApplication</command:noun>

      <maml:description>

        <maml:para>Restores a previously deleted application.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>This cmdlet restores a previously deleted application.</maml:para>

      <maml:para>Restoring an application doesn't restore the associated service principal automatically. You must explicitly restore the deleted service principal.</maml:para>

      <maml:para>For delegated scenarios, the calling user needs to have at least one of the following Microsoft Entra roles.</maml:para>

      <maml:para>- Application Administrator</maml:para>

      <maml:para>- Cloud Application Administrator</maml:para>

      <maml:para>- Hybrid Identity Administrator</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Restore-EntraDeletedApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>IdentifierUris</maml:name>

          <maml:description>

            <maml:para>The IdentifierUris of the application that is to be restored.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>The ObjectId of the deleted application that is to be restored.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>IdentifierUris</maml:name>

        <maml:description>

          <maml:para>The IdentifierUris of the application that is to be restored.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>The ObjectId of the deleted application that is to be restored.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>----- Example 1: Restores a previously deleted application -----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$deletedApplication = Get-EntraDeletedApplication -SearchString 'My PowerShell Application'

Restore-EntraDeletedApplication -ObjectId $deletedApplication.Id

Id                                   DeletedDateTime

--                                   ---------------

ffffffff-5555-6666-7777-aaaaaaaaaaaa</dev:code>

        <dev:remarks>

          <maml:para>This example shows how an application is deleted, then the deleted application is retrieved using the `Get-EntraDeletedApplication` cmdlet, and subsequently the application is restored by specifying the application's Object ID in the `Restore-EntraDeletedApplication` cmdlet.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the ObjectId of the deleted application that is to be restored.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Restore-EntraDeletedApplication</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraDeletedApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraDeletedApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Select-EntraGroupIdsServicePrincipalIsMemberOf</command:name>

      <command:verb>Select</command:verb>

      <command:noun>EntraGroupIdsServicePrincipalIsMemberOf</command:noun>

      <maml:description>

        <maml:para>Selects the groups in which a service principal is a member.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Select-EntraGroupIdsServicePrincipalIsMemberOf` cmdlet selects the groups in which a service principal is a member in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Select-EntraGroupIdsServicePrincipalIsMemberOf</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>GroupIdsForMembershipCheck</maml:name>

          <maml:description>

            <maml:para>Specifies an array of group object IDs.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">GroupIdsForMembershipCheck</command:parameterValue>

          <dev:type>

            <maml:name>GroupIdsForMembershipCheck</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>ObjectId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>GroupIdsForMembershipCheck</maml:name>

        <maml:description>

          <maml:para>Specifies an array of group object IDs.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">GroupIdsForMembershipCheck</command:parameterValue>

        <dev:type>

          <maml:name>GroupIdsForMembershipCheck</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>ObjectId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Get the group membership of a group for a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.Read.All'

$group = New-Object Microsoft.Open.AzureAD.Model.GroupIdsForMembershipCheck

$group.GroupIds = (Get-EntraGroup -Top 10).Id

$servicePrincipal = Get-EntraServicePrincipal -Filter "DisplayName eq 'Helpdesk Application'"

Select-EntraGroupIdsServicePrincipalIsMemberOf -ObjectId $servicePrincipal.Id -GroupIdsForMembershipCheck $group

aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb</dev:code>

        <dev:remarks>

          <maml:para>This command gets the group membership of a group for a specified service principal. Use the command `Get-EntraGroup` to get group Id and `Get-EntraServicePrincipal` to get service principal Id.</maml:para>

          <maml:para>- `-ObjectId` parameter specifies the service principal Id.</maml:para>

          <maml:para>- `-GroupIdsForMembershipCheck` parameter specifies the array of group object IDs.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Select-EntraGroupIdsServicePrincipalIsMemberOf</maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Set-EntraApplication</command:name>

      <command:verb>Set</command:verb>

      <command:noun>EntraApplication</command:noun>

      <maml:description>

        <maml:para>Updates the properties of an application object.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Updates the properties of an application object.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Set-EntraApplication</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Api</maml:name>

          <maml:description>

            <maml:para>Specifies settings for an application that implements a web API.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">ApiApplication</command:parameterValue>

          <dev:type>

            <maml:name>ApiApplication</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AppRoles</maml:name>

          <maml:description>

            <maml:para>The collection of application roles that an application might declare.</maml:para>

            <maml:para>These roles can be assigned to users, groups, or service principals.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>DisplayName</maml:name>

          <maml:description>

            <maml:para>Specifies the display name.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>GroupMembershipClaims</maml:name>

          <maml:description>

            <maml:para>Configures the groups claim issued in a user or OAuth 2.0 access token that the application expects.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>IdentifierUris</maml:name>

          <maml:description>

            <maml:para>Specifies identifier Uniform Resource Identifiers (URIs).</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>InformationalUrl</maml:name>

          <maml:description>

            <maml:para>Basic profile information of the application such as app's marketing, support, terms of service and privacy statement URLs.</maml:para>

            <maml:para>The terms of service and privacy statement are surfaced to users through the user consent experience.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">InformationalUrl</command:parameterValue>

          <dev:type>

            <maml:name>InformationalUrl</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>IsDeviceOnlyAuthSupported</maml:name>

          <maml:description>

            <maml:para>Specifies if the application supports authentication using a device token.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

          <dev:type>

            <maml:name>System.Boolean</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>IsFallbackPublicClient</maml:name>

          <maml:description>

            <maml:para>Specifies the fallback application type as public client, such as an installed application running on a mobile device.</maml:para>

            <maml:para>The default value is `false` that means the fallback application type is confidential client such as web app.</maml:para>

            <maml:para>There are certain scenarios where Microsoft Entra ID can't determine the client application type (for example, ROPC flow where it's configured without specifying a redirect URI).</maml:para>

            <maml:para>In those cases Microsoft Entra ID interprets the application type based on the value of this property.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

          <dev:type>

            <maml:name>System.Boolean</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>KeyCredentials</maml:name>

          <maml:description>

            <maml:para>Specifies key credentials.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>OptionalClaims</maml:name>

          <maml:description>

            <maml:para>Application developers can configure optional claims in their Microsoft Entra ID apps to specify which claims they want in tokens sent to their application by the Microsoft security token service.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">OptionalClaims</command:parameterValue>

          <dev:type>

            <maml:name>OptionalClaims</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ParentalControlSettings</maml:name>

          <maml:description>

            <maml:para>Specifies parental control settings for an application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">ParentalControlSettings</command:parameterValue>

          <dev:type>

            <maml:name>ParentalControlSettings</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PasswordCredentials</maml:name>

          <maml:description>

            <maml:para>Specifies password credentials.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PublicClient</maml:name>

          <maml:description>

            <maml:para>Specifies whether this application is a public client (such as an installed application running on a mobile device). Default is `false`.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">PublicClientApplication</command:parameterValue>

          <dev:type>

            <maml:name>PublicClientApplication</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>RequiredResourceAccess</maml:name>

          <maml:description>

            <maml:para>Specifies resources that this application requires access to and the set of OAuth permission scopes and application roles that it needs under each of those resources.</maml:para>

            <maml:para>This pre-configuration of required resource access drives the consent experience.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>SignInAudience</maml:name>

          <maml:description>

            <maml:para>Specifies what Microsoft accounts are supported for the current application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Tags</maml:name>

          <maml:description>

            <maml:para>Custom strings that can be used to categorize and identify the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>TokenEncryptionKeyId</maml:name>

          <maml:description>

            <maml:para>Specifies the keyId of a public key from the keyCredentials collection.</maml:para>

            <maml:para>When configured, Microsoft Entra ID encrypts all the tokens it emits by using the key this property points to.</maml:para>

            <maml:para>The application code that receives the encrypted token must use the matching private key to decrypt the token before it can be used for the signed-in user.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Web</maml:name>

          <maml:description>

            <maml:para>Specifies settings for a web application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">WebApplication</command:parameterValue>

          <dev:type>

            <maml:name>WebApplication</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Api</maml:name>

        <maml:description>

          <maml:para>Specifies settings for an application that implements a web API.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">ApiApplication</command:parameterValue>

        <dev:type>

          <maml:name>ApiApplication</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AppRoles</maml:name>

        <maml:description>

          <maml:para>The collection of application roles that an application might declare.</maml:para>

          <maml:para>These roles can be assigned to users, groups, or service principals.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>DisplayName</maml:name>

        <maml:description>

          <maml:para>Specifies the display name.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>GroupMembershipClaims</maml:name>

        <maml:description>

          <maml:para>Configures the groups claim issued in a user or OAuth 2.0 access token that the application expects.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>IdentifierUris</maml:name>

        <maml:description>

          <maml:para>Specifies identifier Uniform Resource Identifiers (URIs).</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>InformationalUrl</maml:name>

        <maml:description>

          <maml:para>Basic profile information of the application such as app's marketing, support, terms of service and privacy statement URLs.</maml:para>

          <maml:para>The terms of service and privacy statement are surfaced to users through the user consent experience.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">InformationalUrl</command:parameterValue>

        <dev:type>

          <maml:name>InformationalUrl</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>IsDeviceOnlyAuthSupported</maml:name>

        <maml:description>

          <maml:para>Specifies if the application supports authentication using a device token.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>IsFallbackPublicClient</maml:name>

        <maml:description>

          <maml:para>Specifies the fallback application type as public client, such as an installed application running on a mobile device.</maml:para>

          <maml:para>The default value is `false` that means the fallback application type is confidential client such as web app.</maml:para>

          <maml:para>There are certain scenarios where Microsoft Entra ID can't determine the client application type (for example, ROPC flow where it's configured without specifying a redirect URI).</maml:para>

          <maml:para>In those cases Microsoft Entra ID interprets the application type based on the value of this property.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>KeyCredentials</maml:name>

        <maml:description>

          <maml:para>Specifies key credentials.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>Specifies the ID of an application in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>OptionalClaims</maml:name>

        <maml:description>

          <maml:para>Application developers can configure optional claims in their Microsoft Entra ID apps to specify which claims they want in tokens sent to their application by the Microsoft security token service.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">OptionalClaims</command:parameterValue>

        <dev:type>

          <maml:name>OptionalClaims</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ParentalControlSettings</maml:name>

        <maml:description>

          <maml:para>Specifies parental control settings for an application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">ParentalControlSettings</command:parameterValue>

        <dev:type>

          <maml:name>ParentalControlSettings</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PasswordCredentials</maml:name>

        <maml:description>

          <maml:para>Specifies password credentials.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PublicClient</maml:name>

        <maml:description>

          <maml:para>Specifies whether this application is a public client (such as an installed application running on a mobile device). Default is `false`.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">PublicClientApplication</command:parameterValue>

        <dev:type>

          <maml:name>PublicClientApplication</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>RequiredResourceAccess</maml:name>

        <maml:description>

          <maml:para>Specifies resources that this application requires access to and the set of OAuth permission scopes and application roles that it needs under each of those resources.</maml:para>

          <maml:para>This pre-configuration of required resource access drives the consent experience.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>SignInAudience</maml:name>

        <maml:description>

          <maml:para>Specifies what Microsoft accounts are supported for the current application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Tags</maml:name>

        <maml:description>

          <maml:para>Custom strings that can be used to categorize and identify the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>TokenEncryptionKeyId</maml:name>

        <maml:description>

          <maml:para>Specifies the keyId of a public key from the keyCredentials collection.</maml:para>

          <maml:para>When configured, Microsoft Entra ID encrypts all the tokens it emits by using the key this property points to.</maml:para>

          <maml:para>The application code that receives the encrypted token must use the matching private key to decrypt the token before it can be used for the signed-in user.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Web</maml:name>

        <maml:description>

          <maml:para>Specifies settings for a web application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">WebApplication</command:parameterValue>

        <dev:type>

          <maml:name>WebApplication</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>Boolean</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.ApiApplication</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.InformationalUrl</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.OptionalClaims</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.ParentalControlSettings</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.PublicClientApplication</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>Microsoft.Open.MSGraph.Model.WebApplication</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AddIn]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.AppRole]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.KeyCredential]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.PasswordCredential]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.MSGraph.Model.RequiredResourceAccess]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

      <command:inputType>

        <dev:type>

          <maml:name>System.Nullable`1[System.Boolean]</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--------------- Example 1: Update an application ---------------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$params = @{

    ApplicationId = $application.Id

    DisplayName = 'Contoso Entra PowerShell App Production'

    IdentifierUris = 'https://contoso.com'

    GroupMembershipClaims = 'SecurityGroup'

    IsDeviceOnlyAuthSupported = $False

    Tags = 'mytag'

}

Set-EntraApplication @params</dev:code>

        <dev:remarks>

          <maml:para>This command updates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 2: Update an application using IdentifierUris parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Set-EntraApplication -ApplicationId $application.Id -IdentifierUris 'https://mynewapp.contoso.com'</dev:code>

        <dev:remarks>

          <maml:para>This command updates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Update an application using GroupMembershipClaims parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Set-EntraApplication -ApplicationId $application.Id -GroupMembershipClaims 'SecurityGroup'</dev:code>

        <dev:remarks>

          <maml:para>This command updates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 4: Update an application using IsDeviceOnlyAuthSupported parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Set-EntraApplication -ApplicationId $application.Id -IsDeviceOnlyAuthSupported $False</dev:code>

        <dev:remarks>

          <maml:para>This command updates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>---- Example 5: Update an application using Tags parameter ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Set-EntraApplication -ApplicationId $application.Id -Tags 'mytag'</dev:code>

        <dev:remarks>

          <maml:para>This command updates an application in Microsoft Entra ID.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Set-EntraApplication</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplication</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Set-EntraApplicationLogo</command:name>

      <command:verb>Set</command:verb>

      <command:noun>EntraApplicationLogo</command:noun>

      <maml:description>

        <maml:para>Sets the logo for an Application</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Set-EntraApplicationLogo` cmdlet is used to set the logo for an application.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Set-EntraApplicationLogo</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="ObjectId">

          <maml:name>ApplicationId</maml:name>

          <maml:description>

            <maml:para>The ApplicationId of the Application for which the logo is set.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="false" position="named" aliases="none">

        <maml:name>FilePath</maml:name>

        <maml:description>

          <maml:para>The file path of the file that is to be uploaded as the application logo.</maml:para>

          <maml:para></maml:para>

          <maml:para>-EntraApplicationLogo</maml:para>

          <maml:para>Type: System.String</maml:para>

          <maml:para>Parameter Sets: File</maml:para>

          <maml:para>Aliases:</maml:para>

          <maml:para></maml:para>

          <maml:para>Required: True</maml:para>

          <maml:para>Position: Named</maml:para>

          <maml:para>Default value: None</maml:para>

          <maml:para>Accept pipeline input: True (ByPropertyName, ByValue)</maml:para>

          <maml:para>Accept wildcard characters: False</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false"></command:parameterValue>

        <dev:type>

          <maml:name></maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="ObjectId">

        <maml:name>ApplicationId</maml:name>

        <maml:description>

          <maml:para>The ApplicationId of the Application for which the logo is set.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>System.String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para>System.IO.Stream System.Byte[]</maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues>

      <command:returnValue>

        <dev:type>

          <maml:name>System.Object</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:returnValue>

    </command:returnValues>

    <maml:alertSet>

      <maml:alert>

        <maml:para>File uploads must be smaller than 500KB.</maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>Example 1: Sets the application logo for the application specified by the ApplicationId parameter</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

Set-EntraApplicationLogo -ApplicationId $application.Id -FilePath 'D:\applogo.jpg'</dev:code>

        <dev:remarks>

          <maml:para>This cmdlet sets the application logo for the application specified by the `-ApplicationId` parameter to the image specified with the `-FilePath` parameter.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Set-EntraApplicationLogo</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraApplicationLogo</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Set-EntraApplicationVerifiedPublisher</command:name>

      <command:verb>Set</command:verb>

      <command:noun>EntraApplicationVerifiedPublisher</command:noun>

      <maml:description>

        <maml:para>Sets the verified publisher of an application to a verified Microsoft Partner Network (MPN) identifier.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>Sets the verified publisher of an application to a verified Microsoft Partner Network (MPN) identifier.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Set-EntraApplicationVerifiedPublisher</maml:name>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>AppObjectId</maml:name>

          <maml:description>

            <maml:para>The unique identifier of a Microsoft Entra ID Application object.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

          <maml:name>SetVerifiedPublisherRequest</maml:name>

          <maml:description>

            <maml:para>A request body object containing the verifiedPublisherId property it's the MPNID value.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">SetVerifiedPublisherRequest</command:parameterValue>

          <dev:type>

            <maml:name>SetVerifiedPublisherRequest</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>AppObjectId</maml:name>

        <maml:description>

          <maml:para>The unique identifier of a Microsoft Entra ID Application object.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="none">

        <maml:name>SetVerifiedPublisherRequest</maml:name>

        <maml:description>

          <maml:para>A request body object containing the verifiedPublisherId property it's the MPNID value.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">SetVerifiedPublisherRequest</command:parameterValue>

        <dev:type>

          <maml:name>SetVerifiedPublisherRequest</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes>

      <command:inputType>

        <dev:type>

          <maml:name>String</maml:name>

        </dev:type>

        <maml:description>

          <maml:para></maml:para>

        </maml:description>

      </command:inputType>

    </command:inputTypes>

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>--- Example 1: Set the verified publisher of an application ---</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All'

$application = Get-EntraApplication -Filter "DisplayName eq 'Contoso Helpdesk Application'"

$mpnId =  '0433167'

$req =  @{verifiedPublisherId = $mpnId}

Set-EntraApplicationVerifiedPublisher -AppObjectId $application.Id -SetVerifiedPublisherRequest $req</dev:code>

        <dev:remarks>

          <maml:para>This command sets the verified publisher of an application.</maml:para>

          <maml:para>The Microsoft Partner Network ID (MPNID) of the verified publisher can be obtained from the publisher's Partner Center account.</maml:para>

          <maml:para>- `-AppObjectId` parameter specifies the unique identifier of a Microsoft Entra ID Application.</maml:para>

          <maml:para>- `-SetVerifiedPublisherRequest` parameter specifies the request body object containing the verifiedPublisherId property with it's the MPNID value.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Set-EntraApplicationVerifiedPublisher</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraApplicationVerifiedPublisher</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

  <command:command xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:command="http://schemas.microsoft.com/maml/dev/command/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10" xmlns:MSHelp="http://msdn.microsoft.com/mshelp">

    <command:details>

      <command:name>Set-EntraServicePrincipal</command:name>

      <command:verb>Set</command:verb>

      <command:noun>EntraServicePrincipal</command:noun>

      <maml:description>

        <maml:para>Updates a service principal.</maml:para>

      </maml:description>

    </command:details>

    <maml:description>

      <maml:para>The `Set-EntraServicePrincipal` cmdlet updates a service principal in Microsoft Entra ID.</maml:para>

    </maml:description>

    <command:syntax>

      <command:syntaxItem>

        <maml:name>Set-EntraServicePrincipal</maml:name>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AccountEnabled</maml:name>

          <maml:description>

            <maml:para>Indicates whether the account is enabled.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AlternativeNames</maml:name>

          <maml:description>

            <maml:para>The alternative names for this service principal.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AppId</maml:name>

          <maml:description>

            <maml:para>Specifies the application ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>AppRoleAssignmentRequired</maml:name>

          <maml:description>

            <maml:para>Indicates whether an application role assignment is required.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

          <dev:type>

            <maml:name>System.Boolean</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>DisplayName</maml:name>

          <maml:description>

            <maml:para>Specifies the display name.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Homepage</maml:name>

          <maml:description>

            <maml:para>Specifies the home page or landing page of the application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>KeyCredentials</maml:name>

          <maml:description>

            <maml:para>Specifies key credentials.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>LogoutUrl</maml:name>

          <maml:description>

            <maml:para>Specifies the sign out URL.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

          <maml:name>ServicePrincipalId</maml:name>

          <maml:description>

            <maml:para>Species the ID of a service principal in Microsoft Entra ID.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PasswordCredentials</maml:name>

          <maml:description>

            <maml:para>Specifies password credentials.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>PreferredSingleSignOnMode</maml:name>

          <maml:description>

            <maml:para>Specifies the single sign-on mode configured for this application. Microsoft Entra ID uses the preferred single sign-on mode to launch the application from Microsoft 365 or the My Apps portal. The supported values are password, saml, notSupported, and oidc.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ReplyUrls</maml:name>

          <maml:description>

            <maml:para>The URLs that user tokens are sent to for sign in with the associated application, or the redirect Uniform Resource Identifiers that OAuth 2.0 authorization codes and access tokens are sent to for the associated application.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ServicePrincipalNames</maml:name>

          <maml:description>

            <maml:para>Specifies service principal names.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>ServicePrincipalType</maml:name>

          <maml:description>

            <maml:para>The service principal type.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

          <dev:type>

            <maml:name>System.String</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

        <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

          <maml:name>Tags</maml:name>

          <maml:description>

            <maml:para>Specifies an array of tags.</maml:para>

            <maml:para>If you intend for this service principal to show up in the All Applications list in the admin portal, you need to set this value to {WindowsAzureActiveDirectoryIntegratedApp}.</maml:para>

          </maml:description>

          <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

          <dev:type>

            <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

            <maml:uri />

          </dev:type>

          <dev:defaultValue>None</dev:defaultValue>

        </command:parameter>

      </command:syntaxItem>

    </command:syntax>

    <command:parameters>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AccountEnabled</maml:name>

        <maml:description>

          <maml:para>Indicates whether the account is enabled.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AlternativeNames</maml:name>

        <maml:description>

          <maml:para>The alternative names for this service principal.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AppId</maml:name>

        <maml:description>

          <maml:para>Specifies the application ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>AppRoleAssignmentRequired</maml:name>

        <maml:description>

          <maml:para>Indicates whether an application role assignment is required.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Boolean</command:parameterValue>

        <dev:type>

          <maml:name>System.Boolean</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>DisplayName</maml:name>

        <maml:description>

          <maml:para>Specifies the display name.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Homepage</maml:name>

        <maml:description>

          <maml:para>Specifies the home page or landing page of the application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>KeyCredentials</maml:name>

        <maml:description>

          <maml:para>Specifies key credentials.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.KeyCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>LogoutUrl</maml:name>

        <maml:description>

          <maml:para>Specifies the sign out URL.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="true" variableLength="true" globbing="false" pipelineInput="True (ByPropertyName, ByValue)" position="named" aliases="ObjectId">

        <maml:name>ServicePrincipalId</maml:name>

        <maml:description>

          <maml:para>Species the ID of a service principal in Microsoft Entra ID.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PasswordCredentials</maml:name>

        <maml:description>

          <maml:para>Specifies password credentials.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[Microsoft.Open.AzureAD.Model.PasswordCredential]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>PreferredSingleSignOnMode</maml:name>

        <maml:description>

          <maml:para>Specifies the single sign-on mode configured for this application. Microsoft Entra ID uses the preferred single sign-on mode to launch the application from Microsoft 365 or the My Apps portal. The supported values are password, saml, notSupported, and oidc.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ReplyUrls</maml:name>

        <maml:description>

          <maml:para>The URLs that user tokens are sent to for sign in with the associated application, or the redirect Uniform Resource Identifiers that OAuth 2.0 authorization codes and access tokens are sent to for the associated application.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ServicePrincipalNames</maml:name>

        <maml:description>

          <maml:para>Specifies service principal names.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>ServicePrincipalType</maml:name>

        <maml:description>

          <maml:para>The service principal type.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.String</command:parameterValue>

        <dev:type>

          <maml:name>System.String</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

      <command:parameter required="false" variableLength="true" globbing="false" pipelineInput="False" position="named" aliases="none">

        <maml:name>Tags</maml:name>

        <maml:description>

          <maml:para>Specifies an array of tags.</maml:para>

          <maml:para>If you intend for this service principal to show up in the All Applications list in the admin portal, you need to set this value to {WindowsAzureActiveDirectoryIntegratedApp}.</maml:para>

        </maml:description>

        <command:parameterValue required="true" variableLength="false">System.Collections.Generic.List`1[System.String]</command:parameterValue>

        <dev:type>

          <maml:name>System.Collections.Generic.List`1[System.String]</maml:name>

          <maml:uri />

        </dev:type>

        <dev:defaultValue>None</dev:defaultValue>

      </command:parameter>

    </command:parameters>

    <command:inputTypes />

    <command:returnValues />

    <maml:alertSet>

      <maml:alert>

        <maml:para></maml:para>

      </maml:alert>

    </maml:alertSet>

    <command:examples>

      <command:example>

        <maml:title>---- Example 1: Disable the account of a service principal ----</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Set-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id -AccountEnabled $false</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to update `AccountEnabled` of a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

          <maml:para>- `-AccountEnabled` parameter specifies indicates whether the account is enabled.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>------ Example 2: Update Homepage of a service principal ------</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$homePage = 'https://*.e-days.com/SSO/SAML2/SP/AssertionConsumer.aspx?metadata=e-days|ISV9.2|primary|z'

Set-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id -Homepage $homePage</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to update `AppId` and Homepage of a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

          <maml:para>- `-AppId` parameter specifies the application ID.</maml:para>

          <maml:para>- `-Homepage` parameter specifies the home page or landing page of the application.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 3: Update AlternativeNames and DisplayName of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Set-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id -AlternativeNames 'Helpdesk Application Global' -DisplayName 'NewName'</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to update AlternativeNames and DisplayName of a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 4: Update LogoutUrl and ReplyUrls of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$logoutUrl = 'https://securescore.office.com/SignOut'

$replyUrls = 'https://admin.contoso.com'

Set-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id -LogoutUrl $logoutUrl -ReplyUrls $replyUrls</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to update LogoutUrl and ReplyUrls of a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

          <maml:para>- `-LogoutUrl` parameter specifies the sign out URL.</maml:para>

          <maml:para>- `-ReplyUrls` parameter specifies the URLs that user tokens are sent to for sign in with the associated application.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 5: Update ServicePrincipalType and AppRoleAssignmentRequired of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Set-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id -ServicePrincipalType 'Application' -AppRoleAssignmentRequired $True</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to update `ServicePrincipalType` and `AppRoleAssignmentRequired` of a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

          <maml:para>- `-ServicePrincipalType` parameter specifies the service principal type.</maml:para>

          <maml:para>- `-AppRoleAssignmentRequired` parameter specifies indicates whether an application role assignment is required.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>--- Example 6: Update KeyCredentials of a service principal ---</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

$creds = New-Object Microsoft.Open.AzureAD.Model.KeyCredential

$creds.CustomKeyIdentifier = [System.Text.Encoding]::UTF8.GetBytes('Test')

$startdate = Get-Date -Year 2024 -Month 10 -Day 10

$creds.StartDate = $startdate

$creds.Type = 'Symmetric'

$creds.Usage = 'Sign'

$creds.Value = [System.Text.Encoding]::UTF8.GetBytes('A')

$creds.EndDate = Get-Date -Year 2025 -Month 12 -Day 20 

Set-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id -KeyCredentials $creds</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to update KeyCredentials of a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>Use the `New-EntraServicePrincipalPasswordCredential` and `Remove-EntraServicePrincipalPasswordCredential` cmdlets to update the password or secret for a servicePrincipal.</maml:para>

        </dev:remarks>

      </command:example>

      <command:example>

        <maml:title>Example 7: Update PreferredSingleSignOnMode of a service principal</maml:title>

        <dev:code>Connect-Entra -Scopes 'Application.ReadWrite.All','Application.ReadWrite.OwnedBy'

$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"

Set-EntraServicePrincipal -ServicePrincipalId $servicePrincipal.Id -PreferredSingleSignOnMode 'saml'</dev:code>

        <dev:remarks>

          <maml:para>This example demonstrates how to update `PreferredSingleSignOnMode` of a service principal in Microsoft Entra ID.</maml:para>

          <maml:para>- `-ServicePrincipalId` parameter specifies the ID of a service principal.</maml:para>

          <maml:para>- `-PreferredSingleSignOnMode` parameter specifies the single sign-on mode configured for this application.</maml:para>

        </dev:remarks>

      </command:example>

    </command:examples>

    <command:relatedLinks>

      <maml:navigationLink>

        <maml:linkText>Online Version:</maml:linkText>

        <maml:uri>https://learn.microsoft.com/powershell/module/Microsoft.Entra/Set-EntraServicePrincipal</maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Get-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>New-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

      <maml:navigationLink>

        <maml:linkText>Remove-EntraServicePrincipal</maml:linkText>

        <maml:uri></maml:uri>

      </maml:navigationLink>

    </command:relatedLinks>

  </command:command>

</helpItems>