5 Useful Update-MgUser Scripts for Microsoft 365 Admins

Managing user properties in Microsoft 365 manually can be time-consuming and error-prone. PowerShell automation with the Microsoft Graph Update-MgUser cmdlet allows administrators to streamline updates, ensure consistency, and maintain compliance. This article explores five practical scripts that every M365 admin can use to simplify daily tasks.

Prerequisites

Before running the scripts, connect to Microsoft Graph:

Connect-MgGraph -Scopes "User.ReadWrite.All"

1. Update a Single User’s Job Title

This is one of the most common tasks — updating user profile information.

$params = @{    
  jobTitle = "Senior Systems Engineer"
}
Update-MgUser -UserId "user@domain.com" -BodyParameter $params

👉 Use case: Promote users or update roles after internal changes.

2. Update Department for a User

$params = @{   
  department = "IT Operations"
}
Update-MgUser -UserId "user@domain.com" -BodyParameter $params

👉 Use case: Align users to correct departments for reporting and policies.

3. Disable a User Account

Instead of deleting users, disabling accounts is often safer.

$params = @{    
  accountEnabled = $false
}
Update-MgUser -UserId "user@domain.com" -BodyParameter $params

👉 Use case: Offboarding users while preserving mailbox and data.

4. Update Multiple Properties at Once

You can update several attributes in a single command.

$params = @{    
  jobTitle   = "Team Lead"    
  department = "Engineering"    
  city       = "Chennai"
}
Update-MgUser -UserId "user@domain.com" -BodyParameter $params

👉 Use case: Bulk profile corrections or onboarding updates.

5. Update Multiple Properties at Once

You can update several attributes in a single command.

$params = @{   
  jobTitle   = "Team Lead"    
  department = "Engineering"    
  city       = "Chennai"
}
Update-MgUser -UserId "user@domain.com" -BodyParameter $params

👉 Use case: Bulk profile corrections or onboarding updates.



6. Bulk Update Users via CSV (Most Useful)

This is where Update-MgUser really shines — handling bulk updates.

Sample CSV (users.csv)

UserPrincipalName,JobTitle,Department,City
user1@domain.com,Manager,Sales,Chennai
user2@domain.com,Analyst,Finance,Bangalo
reuser3@domain.com,Engineer,IT,Hyderabad

Script

$users = Import-Csv "C:\Scripts\users.csv"

foreach ($user in $users) {    
  $params = @{        
    jobTitle   = $user.JobTitle        
    department = $user.Department        
    city       = $user.City    
  }    
  Update-MgUser -UserId $user.UserPrincipalName -BodyParameter $params
}

Use case:

• Mass updates during restructuring
• Migrating user data from another system
• Cleaning up inconsistent user attributes

Tips for Using Update-MgUser

• Always use -BodyParameter with a hashtable (recommended by Microsoft).
• Test scripts on a small set of users before bulk execution.
• Ensure required permissions (User.ReadWrite.All) are granted.
• Double-check CSV headers — they must match your script exactly.

Common Error to Watch For

$params = @{    
  accountEnabled = $false
}
                                                    

Frequently Asked Questions

• Can I update custom attributes with Update-MgUser?

Yes, provided they are supported by Microsoft Graph.

• What permissions are required to run Update-MgUser?

User.ReadWrite.All is mandatory.

• Can I run these scripts in Azure Automation?

Yes, with proper authentication setup.

• How do I test safely before bulk updates?

Use a small CSV with test accounts.

Conclusion

The Update-MgUser cmdlet is a must-have tool for every M365 administrator. From simple profile updates to large-scale bulk operations, it helps you manage users efficiently and consistently.

Start small with single-user updates, then move to CSV-based bulk scripts as you gain confidence — that’s where the real productivity boost happens.