1.0.13

Release Notes

1.0.13 - November 12th, 2025

New commands:

• Grant-EntraBetaMcpServerPermission: Grants delegated permissions to Model Context Protocol (MCP) clients for accessing the Microsoft MCP Server for Enterprise.
• Revoke-EntraBetaMcpServerPermission: Revokes MCP Server permissions from a specified client in Microsoft Entra ID.

New Parameters:

• Get-EntraContact & Get-EntraBetaContact:
  • Added -HasErrorsOnly parameter to return only contacts with service provisioning errors.
• Get-EntraGroup & Get-EntraBetaGroup:
  • Added -HasErrorsOnly parameter to return only groups that have service provisioning errors.
  • Added -HasLicenseErrorsOnly parameter to only groups that have members with license errors.
• Get-EntraUser & Get-EntraBetaUser:
  • Added -EnabledFilter parameter which filters users based on the state of their accounts. Valid values are EnabledOnly and DisabledOnly.
  • Added -HasErrorsOnly parameter which returns only users that have one or more service provisioning or validation errors (surfaced via the serviceProvisioningErrors collection).
  • Added -LicenseReconciliationNeededOnly parameter which returns only users whose service provisioning errors include license-related issues indicating that license reconciliation is needed (for example, insufficient licenses, dependency violations, mutually exclusive plans).
  • Added -Synchronized parameter which returns only users synchronized from on-premises Active Directory (those with onPremisesSyncEnabled eq true). This is useful for distinguishing cloud-only identities from hybrid managed identities.
  • Added -UnlicensedUsersOnly parameter which returns only users who have no assigned licenses.

Bug Fixes:

• Fixed Get-EntraUser issue where handling of guest UPNs was corrected to properly escape/quote special characters so that user@external#EXT#@tenant.onmicrosoft.com no longer triggers “unterminated string literal” errors.
• Set-EntraUserManager -ManagerId parameter type corrected from Guid to String, enabling UPN (and not just objectId) for the manager reference.
• Updated documentation.

Installation instructions

Install the module from the PowerShell gallery

Install-Module -Name Microsoft.Entra -RequiredVersion 1.0.13 -Repository PSGallery -Force -AllowClobber

For beta module

Install-Module -Name Microsoft.Entra.Beta -RequiredVersion 1.0.13 -Repository PSGallery -Force -AllowClobber

What's Changed

• Introducing new filter parameters to Get-EntraUser cmdlet (Entra only) by Givinalis Omachar (@givinalis) in #1551
• Introducing new filter parameters to Get-EntraGroup cmdlet (Entra only) by Givinalis Omachar (@givinalis) in #1553
• Introducing new filter parameters to Get-EntraBetaGroup cmdlet (Entra Beta only) by Givinalis Omachar (@givinalis) in #1556
• Introducing new filter parameters to Get-EntraBetaUser cmdlet (Entra Beta only) by Givinalis Omachar (@givinalis) in #1555
• Introducing new filter parameters to Get-EntraBetaContact cmdlet (Entra Beta only) by Givinalis Omachar (@givinalis) in #1557
• Introducing new filter parameters to Get-EntraContact cmdlet (Entra only) by Givinalis Omachar (@givinalis) in #1554
• Grant and Revoke MCP client permissions management command by Givinalis Omachar (@givinalis) in #1559
• Fix Get-EntraUser when using guest UPN by Kennedy Kang'ethe (@KenitoInc) in #1550
• Fix Get-EntraGroup example description by Kennedy Kang'ethe (@KenitoInc) in #1548
• Fix ManagerId in Set-EntraUserManager by Kennedy Kang'ethe (@KenitoInc) in #1549

Full Changelog: 1.0.12...1.0.13