Install-Module Microsoft.Graph {{Scope}} -Repository PSGallery -Force {{AllowClobber}}

Connect-MgGraph {{Scopes}} {{TenantId}}

Connect-MgGraph {{ClientId}} {{TenantId}} {{Thumbprint}}

Get-MgContext | Select-Object Account, TenantId, Scopes

Disconnect-MgGraph

Install-Module -Name Az {{Scope}} -Repository PSGallery -Force; Connect-AzAccount {{Tenant}}

Get-MgUser -All {{Property}} | Select-Object DisplayName, UserPrincipalName, Id, AccountEnabled

Get-MgUser {{Filter}} {{ConsistencyLevel}} -All

$pwd = @{ Password = {{Password}}; ForceChangePasswordNextSignIn = $true }

Update-MgUser {{UserId}} {{Department}} {{JobTitle}} {{UsageLocation}}

Update-MgUser {{UserId}} -AccountEnabled:$false

Revoke-MgUserSignInSession {{UserId}}

$profile = @{ Password = {{Password}}; ForceChangePasswordNextSignIn = $true }

Get-MgUserManager {{UserId}} | Select-Object -ExpandProperty AdditionalProperties

Remove-MgUser {{UserId}}

Get-MgGroup -All {{Filter}} | Select-Object DisplayName, Id, GroupTypes, SecurityEnabled, MailEnabled

New-MgGroup -DisplayName {{DisplayName}} -MailNickname {{MailNickname}} -SecurityEnabled -MailEnabled:$false {{Description}}

New-MgGroup -DisplayName {{DisplayName}} -MailNickname {{MailNickname}} -SecurityEnabled -MailEnabled:$false -GroupTypes 'DynamicMembership' -MembershipRule {{MembershipRule}} -MembershipRuleProcessingState 'On'

New-MgGroupMember -GroupId {{GroupId}} -DirectoryObjectId {{MemberId}}

Get-MgGroupMember -GroupId {{GroupId}} -All | Select-Object -ExpandProperty AdditionalProperties

Remove-MgGroupMemberByRef -GroupId {{GroupId}} -DirectoryObjectId {{MemberId}}

Get-MgDevice -All | Select-Object DisplayName, DeviceId, OperatingSystem, TrustType, IsCompliant, ApproximateLastSignInDateTime

$cutoff = (Get-Date).AddDays(-{{Days}})

Update-MgDevice -DeviceId {{DeviceObjectId}} -AccountEnabled:$false

Remove-MgDevice -DeviceId {{DeviceObjectId}}

Get-MgDirectoryRole -All | Select-Object DisplayName, Id, RoleTemplateId

Get-MgDirectoryRoleMember -DirectoryRoleId {{RoleId}} | Select-Object -ExpandProperty AdditionalProperties

New-MgRoleManagementDirectoryRoleAssignment -PrincipalId {{PrincipalId}} -RoleDefinitionId {{RoleDefinitionId}} -DirectoryScopeId '/'

Get-MgApplication -All | Select-Object DisplayName, AppId, Id, SignInAudience, PublisherDomain

Get-MgServicePrincipal -All | Select-Object DisplayName, AppId, Id, AccountEnabled, AppOwnerOrganizationId

$limit = (Get-Date).AddDays({{Days}})

Get-MgIdentityConditionalAccessPolicy -All | Select-Object DisplayName, State, Id, ModifiedDateTime

$params = @{

Update-MgIdentityConditionalAccessPolicy -ConditionalAccessPolicyId {{PolicyId}} -State {{State}}

Get-MgDeviceManagementManagedDevice -All | Select-Object DeviceName, OperatingSystem, OSVersion, ComplianceState, ManagedDeviceOwnerType, LastSyncDateTime, UserPrincipalName

Get-MgDeviceManagementManagedDevice -Filter "complianceState eq 'noncompliant'" -All | Select-Object DeviceName, UserPrincipalName, OperatingSystem, LastSyncDateTime

Sync-MgDeviceManagementManagedDevice -ManagedDeviceId {{ManagedDeviceId}}

Restart-MgDeviceManagementManagedDevice -ManagedDeviceId {{ManagedDeviceId}}

Clear-MgDeviceManagementManagedDevice -ManagedDeviceId {{ManagedDeviceId}} {{KeepUserData}}

Invoke-MgRetireDeviceManagementManagedDevice -ManagedDeviceId {{ManagedDeviceId}}

Get-MgDeviceManagementManagedDeviceUser -ManagedDeviceId {{ManagedDeviceId}} | Select-Object DisplayName, UserPrincipalName, Id

Get-MgDeviceManagementManagedDevice -All | Select-Object DeviceName, OperatingSystem, IsEncrypted, UserPrincipalName | Sort-Object IsEncrypted

Get-MgDeviceManagementDeviceCompliancePolicy -All | Select-Object DisplayName, Id, '@odata.type', LastModifiedDateTime

Get-MgDeviceManagementDeviceConfiguration -All | Select-Object DisplayName, Id, '@odata.type', LastModifiedDateTime

$params = @{

$assignment = @{

Get-MgDeviceManagementDeviceConfigurationAssignment -DeviceConfigurationId {{ConfigurationId}} | Select-Object Id, Target

Get-MgDeviceAppManagementMobileApp -All | Select-Object DisplayName, Id, '@odata.type', Publisher

$body = @{

Get-MgDeviceAppManagementMobileApp -MobileAppId {{AppId}} -ExpandProperty installSummary | Select-Object DisplayName -ExpandProperty InstallSummary

Get-MgDeviceAppManagementiOSManagedAppProtection -All | Select-Object DisplayName, Id

Get-MgDeviceManagementWindowsAutopilotDeviceIdentity -All | Select-Object SerialNumber, Model, Manufacturer, GroupTag, EnrollmentState

Install-Script -Name Get-WindowsAutopilotInfo -Force

Get-MgDeviceManagementDeviceEnrollmentConfiguration -All | Select-Object DisplayName, Id, '@odata.type', Priority

Get-MgDeviceManagementWindowsAutopilotDeploymentProfile -All | Select-Object DisplayName, Id, DeviceNameTemplate, EnrollmentStatusScreenSettings

dsregcmd /status

dsregcmd /debug /join

Add-Computer -DomainName {{DomainName}} -Credential (Get-Credential) {{OUPath}} -Restart

Get-ChildItem 'HKLM:\SOFTWARE\Microsoft\Enrollments' -Recurse -ErrorAction SilentlyContinue | Get-ItemProperty | Where-Object { $_.UPN } | Select-Object UPN, ProviderID, EnrollmentState

Get-ScheduledTask | Where-Object { $_.TaskName -eq 'PushLaunch' } | Start-ScheduledTask

Get-ComputerInfo | Select-Object CsName, WindowsProductName, OsVersion, OsBuildNumber, CsManufacturer, CsModel, BiosSerialNumber, CsDomain

Get-BitLockerVolume -MountPoint {{MountPoint}} | Select-Object MountPoint, VolumeStatus, ProtectionStatus, EncryptionPercentage -ExpandProperty KeyProtector

Get-LocalGroupMember -Group 'Administrators'

Add-LocalGroupMember -Group {{Group}} -Member {{Member}}

Get-Service -Name {{ServiceName}} | Format-List Status, Name, DisplayName

Get-WinEvent -FilterHashtable @{ LogName = {{LogName}}; Level = 2 } -MaxEvents {{MaxEvents}} | Select-Object TimeCreated, Id, ProviderName, Message

winget install --id {{PackageId}} --silent --accept-package-agreements --accept-source-agreements

Install-Module PSWindowsUpdate -Scope CurrentUser -Force

Enable-PSRemoting -Force {{SkipNetworkProfileCheck}}

Enter-PSSession -ComputerName {{ComputerName}} -Credential (Get-Credential) {{UseSSL}}

Invoke-Command -ComputerName {{ComputerNames}} -Credential (Get-Credential) -ScriptBlock { {{ScriptBlock}} }

Get-CimInstance -ComputerName {{ComputerName}} -ClassName {{ClassName}} | Select-Object *

Test-Connection -TargetName {{TargetName}} -Count {{Count}}

Get-MgAuditLogSignIn -Filter {{Filter}} -Top {{Top}} | Select-Object CreatedDateTime, UserPrincipalName, AppDisplayName, @{n='Status';e={$_.Status.ErrorCode}}, IpAddress

Get-MgAuditLogDirectoryAudit -Top {{Top}} | Select-Object ActivityDateTime, ActivityDisplayName, @{n='Initiator';e={$_.InitiatedBy.User.UserPrincipalName}}, Result

Get-MgSubscribedSku | Select-Object SkuPartNumber, @{n='Enabled';e={$_.PrepaidUnits.Enabled}}, ConsumedUnits

Get-MgUser -All -Property DisplayName,UserPrincipalName,Department,JobTitle,AccountEnabled | Select-Object DisplayName, UserPrincipalName, Department, JobTitle, AccountEnabled | Export-Csv -Path {{Path}} -NoTypeInformation -Encoding UTF8

Get-MgDeviceManagementManagedDevice -All | Select-Object DeviceName, UserPrincipalName, OperatingSystem, OSVersion, ComplianceState, LastSyncDateTime | Export-Csv -Path {{Path}} -NoTypeInformation -Encoding UTF8

Invoke-MgGraphRequest -Method GET -Uri {{Uri}} -OutputType PSObject | Select-Object -ExpandProperty value