-
Title
HOW TO: Retrieve Azure attribute values via the Active Roles Management Shell -
Description
Unless done properly, the values returned for Azure attributes will be null or blank even when they are explicitly queried.
For example, this cmdlet will return a blank value for edsaAzureUserPrincipalName:
Get-QADUser "Office 365Test1" -proxy -IncludedProperties edsaAzureUserPrincipalName | select edsaAzureUserPrincipalName
-
Cause
Azure attributes are all computed attributes and depend on the value of edsvaAzureObjectID. Because of this, the value of this attribute must also be included in the request.
In addition, some attributes (such as those related to licensing) also require edsaAzureUserPrincipalName -
Resolution
Always include edsvaAzureObjectID in any requests which need to check any Azure attribute values. For example, the correct cmdlet for the above query would be:
Get-QADUser "Office 365Test10" -proxy -IncludedProperties edsaAzureUserPrincipalName,edsvaAzureObjectID | select edsaAzureUserPrincipalName
In order to return a value for a licensing attribute such as edsaAzureUserAssignedLicenses, use a cmdlet similar to:
Get-qaduser "Office 365Test10" -proxy -IncludedProperties edsvaAzureObjectID,edsaAzureUserPrincipalName,edsaAzureUserAssignedLicenses | select edsaAzureUserAssignedLicenses