How to get a Microsoft Entra ID authorization policy using Microsoft Graph PowerShell

The Get-MgPolicyAuthorizationPolicy cmdlet fetches the current authorization policy settings in Microsoft Entra ID (previously Azure AD). This policy defines baseline permissions and organizational rules for user and administrative operations in your tenant.

Get authorization policy using Microsoft Graph PowerShell

Prerequisites

• Before using the cmdlet, ensure that the Microsoft Graph PowerShell module is installed. If not, install it using this PowerShell command:
  Copy Install-Module Microsoft.Graph -Scope CurrentUser
• Also, use the following PowerShell command to connect to Microsoft Graph with the required permissions (e.g., Policy.Read.All):
  Copy Connect-MgGraph -Scopes "Policy.Read.All"

Using the Get-MgPolicyAuthorizationPolicy cmdlet

Run the Graph PowerShell command below to view the current authorization policy. This retrieves the only instance of the authorization policy for your organization:

Examples

Example 1: View all authorization policy settings

This Graph PowerShell command displays all settings in the authorization policy:

Example 2: Show policies with only displayName and ID

This Graph PowerShell command lists only the displayName and ID of the policy:

Example 3: Get a specific authorization policy by ID

This Graph PowerShell command gets the policy using its explicit ID:

Supported parameters

The following are some essential parameters that can be used along with the Get-MgPolicyAuthorizationPolicy command:

Limitations of using Microsoft Graph PowerShell to get authorization policy

• PowerShell commands can get complicated with different use cases and scenarios.
• IT admins can spend a lot of time debugging errors, which in turn negatively impacts productivity.
• Delegation can get tricky since technicians require elevated permissions.