How to update a group life cycle policy using Microsoft Graph PowerShell

A group life cycle policy ensures that only relevant and active groups exist in your organization. It also reduces the risk of orphaned or abandoned groups. Microsoft Graph PowerShell helps you update policies using the Update-MgGroupLifecyclePolicy cmdlet. However, this approach requires strong technical knowledge. ADManager Plus offers a script-free, user friendly interface to help you manage Microsoft Entra groups and group life cycle policies.

  • ADManager Plus
  • PowerShell
 

Updating group properties using ADManager Plus

Here's how you can update various group properties with ADManager Plus:

  1. Log in to the ADManager Plus admin console.
  2. Navigate to Microsoft 365 > Management > Group Management.
  3. Choose the group management action you want to perform. With ADManager Plus, you can perform multiple actions, including group creation and modification, in bulk.
Managing Microsoft 365 groups with ADManager Plus

Updating a group life cycle policy using Microsoft Graph PowerShell

Prerequisites

Before using the cmdlet, ensure that the Microsoft Graph PowerShell module is installed. If not, install it using this script:

Install-Module Microsoft.Graph -Scope CurrentUser

The user executing this cmdlet should have the following permission:

Group.ReadWrite.All

Using the Update-MgGroupLifecyclePolicy cmdlet

Run the following cmdlet in Microsoft Graph PowerShell to update a group life cycle policy:

Update-MgGroupLifecyclePolicy
-GroupLifecyclePolicyId <String>
[-ResponseHeadersVariable <String>]
[-AdditionalProperties <Hashtable>]
[-AlternateNotificationEmails <String>]
[-GroupLifetimeInDays <Int32>]
[-Id <String>]
[-ManagedGroupTypes <String>]
[-Headers <IDictionary>]
[-ProgressAction <ActionPreference>]
[-WhatIf]
[-Confirm]
[<CommonParameters>]

Supported parameters

The following are some essential parameters that can be used along with the Update-MgGroupLifecyclePolicy command:

Parameters Description
-GroupLifecyclePolicyId The unique identifier of groupLifecyclePolicy.
-GroupId The unique identifier of the group.
-Id The unique identifier for an entity.
-Confirm Prompts you for confirmation before running the cmdlet.
-WhatIf Shows what would happen if the cmdlet runs.

Limitations of using Microsoft Graph PowerShell to update a group life cycle policy

  • PowerShell scripts can get complicated with different use cases and scenarios.
  • IT admins can spend a lot of time debugging errors, which negatively impacts productivity.
  • Delegation requires careful access management, as technicians require elevated permissions.

How ADManager Plus helps you manage Microsoft Entra groups and more

ADManager Plus, an identity governance and administration solution with comprehensive Microsoft Entra ID management and reporting capabilities, simplifies complex admin tasks from a single, user-friendly console:

  • Manage groups, contacts, users, licenses, and other Microsoft Entra ID objects with a script-free, centralized console.
  • Reduce human errors by automating and orchestrating tasks, such as user provisioning, deprovisioning, and license assignment, across various platforms.
  • Delegate tasks to technicians without elevating their native privileges.
  • Keep a watchful eye on your IT environment with more than 200 pre-packaged reports.
  • Monitor delegated activities through smart workflows.
  • Ensure business continuity with AD, Microsoft Entra ID, and Google Workspace backup and recovery.

Perform script-free Microsoft Entra ID management and reporting with ADManager Plus

 
  • Updating a group life cycle policy using Microsoft Graph PowerShell
  • Limitations of using Microsoft Graph PowerShell to update a group life cycle policy
  • How ADManager Plus helps you manage Microsoft Entra groups and more
The one-stop solution to Active Directory Management and Reporting
Email Download Link