New command: Remove member from administrative unit

[MartinM85]

Usage

m365 entra administrativeunit member remove

Description

Remove a specific member (user, group, or device) from an administrative unit

Options

Option	Description
-i, --id [id]	The id of the member to be removed. Specify either id, userId, userName, groupId, groupName, deviceId or deviceName.
--userId [userId]	The id of the user to be removed. Specify either id, userId, userName, groupId, groupName, deviceId or deviceName.
--userName [userName]	The user principal name (UPN) of the user to be removed. Specify either id, userId, userName, groupId, groupName, deviceId or deviceName.
--groupId [groupId]	The id of the group to be removed. Specify either id, userId, userName, groupId, groupName, deviceId or deviceName.
--groupName [groupName]	The name of the group to be removed. Specify either id, userId, userName, groupId, groupName, deviceId or deviceName.
--deviceId [deviceId]	The id of the device to be removed. Specify either id, userId, userName, groupId, groupName, deviceId or deviceName.
--deviceName [deviceName]	The name of the device to be removed. Specify either id, userId, userName, groupId, groupName, deviceId or deviceName.
--administrativeUnitId [administrativeUnitId]	The id of the administrative unit. Specify either administrativeUnitId or administrativeUnitName.
--administrativeUnitName [administrativeUnitName]	The name of the administrative unit. Specify either administrativeUnitId or administrativeUnitName.
-f, --force	Don't prompt for confirmation.

Examples

Remove a member specified by id from an administrative unit specified by id

m365 entra administrativeunit member remove --id 64131a70-beb9-4ccb-b590-4401e58446ec --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7

Remove a user specified by id from an administrative unit specified by id

m365 entra administrativeunit member remove --userId 64131a70-beb9-4ccb-b590-4401e58446ec --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7

Remove a group specified by id from an administrative unit specified by id

m365 entra administrativeunit member remove --groupId b2307a39-e878-458b-bc90-03bc578531d6 --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7

Remove a device specified by id from an administrative unit specified by id

m365 entra administrativeunit member remove --deviceId 810c84a8-4a9e-49e6-bf7d-12d183f40d01 --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7

Remove a user specified by UPN from an administrative unit specified by name

m365 entra administrativeunit member remove --userName john.doe@contoso.com --administrativeUnitName 'Marketing Division'

Remove a group specified by name from an administrative unit specified by id

m365 entra administrativeunit member remove --groupName 'Marketing Group' --administrativeUnitId 03c4c9dc-6f0c-4c4f-a4e6-0c9ed80f54c7

Remove a device specified by name from an administrative unit specified by name

m365 entra administrativeunit member remove --deviceName 'JohnDoe-PC' --administrativeUnitName 'Marketing Division'

Default properties

No response

Additional Info

https://learn.microsoft.com/en-us/graph/api/administrativeunit-delete-members?view=graph-rest-1.0&tabs=http

I will work on this issue.

[milanholemans]

Hi @MartinM85 thank you for the spec!

Few considerations:

• For the id option, let's be a bit more specific: The id of the member to be removed.
• Let's align this with the other commands and include userId, groupId, and deviceId.
• Because of #5663, we're planning to rename all aad commands to entra. So let's update this spec to use entra as well. This means that it's probably best to wait until this issue is closed to avoid unneeded merge conflicts. We will try to prioritize this PR so we don't block other aad commands.

[MartinM85]

@milanholemans Do you suggest to have id option together with userId, groupId, and deviceId options or only userId, groupId, and deviceId options and remove id option?

It seems to me fine to have only "generic" id option for this command.

[milanholemans]

Hi @MartinM85, the id option is definitely useful, I'm just suggesting to add these other options as well. Since we have these options at the aad administrativeunit member add, the remove command should work similarly (with addition to id and force).

[MartinM85]

@milanholemans Spec updated.

[milanholemans]

Great, could you also replace all aad occurrences with entra?

[MartinM85]

@milanholemans Replaced

[milanholemans]

Great! Looks good now! As mentioned before, I think you better wait until #5663 is finished to avoid unneeded merge conflicts.

[MartinM85]

OK, there is already opened PR for #5663. I will postpone the delivery.

[milanholemans]

OK, there is already opened PR for #5663. I will postpone the delivery.

Yes indeed, we marked it as highest priority to unblock other issues.