How to get Entra ID conditional access named locations using Microsoft Graph PowerShell

The Get-MgIdentityConditionalAccessNamedLocation cmdlet retrieves named locations defined for conditional access in Microsoft Entra ID (previously Azure AD). Named locations help you specify trusted IP ranges or countries for use in security policies.

Get conditional access named locations using Microsoft Graph PowerShell

Prerequisites

• Before using the cmdlet, ensure that the Microsoft Graph PowerShell module is installed. If not, install it using this PowerShell script:
  Copy Install-Module Microsoft.Graph -Scope CurrentUser
• Also, use the following PowerShell command to connect to Microsoft Graph with the required permissions (e.g., Policy.Read.All):
  Copy Connect-MgGraph -Scopes "Policy.Read.All"

Using the Get-MgIdentityConditionalAccessNamedLocation cmdlet

Run the Graph PowerShell command below to list all named locations used in conditional access. This retrieves all named locations defined in your tenant:

Examples

Example 1: Get details of a specific named location by ID

This Graph PowerShell command displays detailed information for a specific location:

Example 2: Show only country and displayName properties

This Graph PowerShell command command filters to show only the country and displayName properties for all named locations:

Supported parameters

The following are some essential parameters that can be used along with the Get-MgIdentityConditionalAccessNamedLocation command:

Limitations of using Microsoft Graph PowerShell to get conditional access named locations

• PowerShell commands can get complicated with different use cases and scenarios.
• IT admins can spend a lot of time debugging errors, which in turn negatively impacts productivity.
• Delegation can get tricky since technicians require elevated permissions.