Edit

Share via

Get-EntraServicePrincipalOwner

Module:
Microsoft.Entra.Applications Module v1.1

Get the owner of a service principal.

Syntax

GetQuery (Default) 

Get-EntraServicePrincipalOwner

    -ServicePrincipalId <String>
    [-All]
    [-Top <Int32>]
    [-Property <String[]>]
    [<CommonParameters>]

Append 

Get-EntraServicePrincipalOwner

    -ServicePrincipalId <String>
    -Property <String[]>
    -AppendSelected
    [-Top <Int32>]
    [-All]
    [<CommonParameters>]

Description

The Get-EntraServicePrincipalOwner cmdlet gets the owners of a service principal in Microsoft Entra ID.

Examples

Example 1: Retrieve the owner of a service principal

Connect-Entra -Scopes 'Application.Read.All'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
Get-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id | Select-Object Id, userPrincipalName, DisplayName, '@odata.type'

Id                                   userPrincipalName                       displayName    @odata.type
--                                   -----------------                       -----------    -----------
aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb AlexW@Contoso.com     Alex Wilber    #microsoft.graph.user
bbbbbbbb-1111-2222-3333-cccccccccccc ChristieC@Contoso.com Christie Cline #microsoft.graph.user

This example gets the owners of a specified service principal. You can use the command Get-EntraServicePrincipal to get service principal object ID.

  • -ServicePrincipalId parameter specifies the unique identifier of a service principal.

Example 2: Retrieve all the owners of a service principal

Connect-Entra -Scopes 'Application.Read.All'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
Get-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id -All | Select-Object Id, userPrincipalName, DisplayName, '@odata.type'

Id                                   userPrincipalName                       displayName    @odata.type
--                                   -----------------                       -----------    -----------
aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb AlexW@Contoso.com     Alex Wilber    #microsoft.graph.user
bbbbbbbb-1111-2222-3333-cccccccccccc ChristieC@Contoso.com Christie Cline #microsoft.graph.user

This command gets all the owners of a service principal. You can use the command Get-EntraServicePrincipal to get service principal object ID.

  • -ServicePrincipalId parameter specifies the unique identifier of a service principal.

Example 3: Retrieve top two owners of a service principal

Connect-Entra -Scopes 'Application.Read.All'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
Get-EntraServicePrincipalOwner -ServicePrincipalId $servicePrincipal.Id -Top 2 | Select-Object Id, userPrincipalName, DisplayName, '@odata.type'

Id                                   userPrincipalName                       displayName    @odata.type
--                                   -----------------                       -----------    -----------
aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb AlexW@Contoso.com     Alex Wilber    #microsoft.graph.user
bbbbbbbb-1111-2222-3333-cccccccccccc ChristieC@Contoso.com Christie Cline #microsoft.graph.user

This command gets top two owners of a service principal. You can use the command Get-EntraServicePrincipal to get service principal object ID. You can use -Limit as an alias for -Top.

  • -ServicePrincipalId parameter specifies the unique identifier of a service principal.

Example 4: Retrieve top two owners of a service principal and select and append a property not returned by default.

Connect-Entra -Scopes 'Application.Read.All'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
Get-EntraServicePrincipalOwner -ServicePrincipalId 0a40f8f8-4e30-4f58-bf26-772ad69f41f6 -Property userType -AppendSelected -Top 2 | Select-Object Id, userPrincipalName, DisplayName, '@odata.type', userType

Id                                   displayName          @odata.type              userType
--                                   -----------          -----------              ---------
aaaaaaaa-0000-1111-2222-bbbbbbbbbbbb Alex Wilber          #microsoft.graph.user    Member
bbbbbbbb-1111-2222-3333-cccccccccccc Christie Cline       #microsoft.graph.user    Member

This command gets top two owners of a service principal. You can use the command Get-EntraServicePrincipal to get service principal object ID. You can use -Limit as an alias for -Top.

  • -ServicePrincipalId parameter specifies the unique identifier of a service principal.
  • -Property parameter selects a property userType that is not returned by default.
  • -AppendSelected parameter ensures the selected property is returned together with default properties.

Parameters

-All

List all pages.

Parameter properties

Type:System.Management.Automation.SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-AppendSelected

Specifies whether to append the selected properties.

Parameter properties

Type:System.Management.Automation.SwitchParameter
Default value:False
Supports wildcards:False
DontShow:False

Parameter sets

Append
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-Property

Specifies properties to be returned.

Parameter properties

Type:

System.String[]

Default value:None
Supports wildcards:False
DontShow:False
Aliases:Select

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:False
Value from pipeline by property name:False
Value from remaining arguments:False

-ServicePrincipalId

Specifies the ID of a service principal in Microsoft Entra ID.

Parameter properties

Type:System.String
Default value:None
Supports wildcards:False
DontShow:False
Aliases:ObjectId

Parameter sets

(All)
Position:Named
Mandatory:True
Value from pipeline:True
Value from pipeline by property name:True
Value from remaining arguments:False

-Top

Specifies the maximum number of records to return.

Parameter properties

Type:System.Int32
Default value:None
Supports wildcards:False
DontShow:False
Aliases:Limit

Parameter sets

(All)
Position:Named
Mandatory:False
Value from pipeline:True
Value from pipeline by property name:True
Value from remaining arguments:False

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.