az ad user
By mikefrobbins
Archived: 2026-04-05 14:50:51 UTC
In this article
1. Commands
2. az ad user create
3. az ad user delete
4. az ad user get-member-groups
5. az ad user list
6. az ad user show
7. az ad user update
Manage Microsoft Entra users.
Commands
Create a user.
az ad user create --display-name
 --password
 --user-principal-name
 [--force-change-password-next-sign-in {false, true}]
 [--immutable-id]
 [--mail-nickname]
Create a user
az ad user create --display-name myuser --password password --user-principal-name myuser@contoso.com
Object's display name or its prefix.
The password that should be assigned to the user for authentication.
The user principal name (someuser@contoso.com). It must contain one of the verified domains for the tenant.
The following parameters are optional, but depending on the context, one or more might become required for the
command to execute successfully.
https://docs.microsoft.com/en-us/cli/azure/ad/user?view=azure-cli-latest
Page 1 of 4

--force-change-password-next-sign-in
Marks this user as needing to update their password the next time they authenticate. If omitted, false will be used.
Property Value
Default value: False
Accepted values: false, true
This property is used to associate an on-premises Active Directory user account to their Microsoft Entra user
object. This property must be specified when creating a new user account in the Graph if you're using a federated
domain for the user's userPrincipalName (UPN) property. NOTE: The $ and _ characters can't be used when
specifying this property.
Mail alias. Defaults to user principal name.
Global Parameters
Delete a user.
az ad user delete --id
Delete a user.
az ad user delete --id myuser@contoso.com
The object ID or principal name of the user for which to get information.
Global Parameters
Get groups of which the user is a member.
az ad user get-member-groups --id
 [--security-enabled-only {false, true}]
Get groups of which the user is a member
az ad user get-member-groups --id myuser@contoso.com
The object ID or principal name of the user for which to get information.
The following parameters are optional, but depending on the context, one or more might become required for the
command to execute successfully.
https://docs.microsoft.com/en-us/cli/azure/ad/user?view=azure-cli-latest
Page 2 of 4

True to specify that only security groups that the entity is a member of should be returned; false to specify that all
groups and directory roles that the entity is a member of should be returned.
Property Value
Default value: False
Accepted values: false, true
Global Parameters
List users.
az ad user list [--display-name]
 [--filter]
 [--upn]
List all users.
az ad user list
The following parameters are optional, but depending on the context, one or more might become required for the
command to execute successfully.
Object's display name or its prefix.
OData filter, e.g. --filter "displayname eq 'test' and servicePrincipalType eq 'Application'".
User principal name, e.g. john.doe@contoso.com.
Global Parameters
Get the details of a user.
az ad user show --id
Show a user.
az ad user show --id myuser@contoso.com
The object ID or principal name of the user for which to get information.
Global Parameters
Update a user.
https://docs.microsoft.com/en-us/cli/azure/ad/user?view=azure-cli-latest
Page 3 of 4

az ad user update --id
 [--account-enabled {false, true}]
 [--display-name]
 [--force-change-password-next-sign-in {false, true}]
 [--mail-nickname]
 [--password]
Update a user.
az ad user update --id myuser@contoso.com --display-name username2
The object ID or principal name of the user for which to get information.
The following parameters are optional, but depending on the context, one or more might become required for the
command to execute successfully.
Enable the user account.
Property Value
Accepted values: false, true
Object's display name or its prefix.
--force-change-password-next-sign-in
If the user must change her password on the next login.
Property Value
Accepted values: false, true
Mail alias. Defaults to user principal name.
User password.
Global Parameters
Source: https://docs.microsoft.com/en-us/cli/azure/ad/user?view=azure-cli-latest
https://docs.microsoft.com/en-us/cli/azure/ad/user?view=azure-cli-latest
Page 4 of 4