Using Get-MgApplicationOwnerCount in Graph PowerShell

The Get-MgApplicationOwnerCount cmdlet is part of the Microsoft Graph PowerShell module and is used to retrieve the count of owners assigned to a particular application in your Azure Active Directory (AAD) tenant. This cmdlet is especially useful for administrators who need to manage and audit the ownership of applications within their organization.

In this article, we will explore the syntax of the Get-MgApplicationOwnerCount cmdlet, provide usage examples, offer tips for effective use, and discuss common errors along with their solutions. We'll also look into practical use cases where this cmdlet can be applied.

Cmdlet Syntax

Get-MgApplicationOwnerCount -ApplicationId <String> -ConsistencyLevel <String> -Filter <String>  

• -ApplicationId: (Required): Specifies the unique identifier (ID) of the application.
• -ConsistencyLevel : (Required) Must be set to "Eventual" for the cmdlet to function correctly.
• -Filter : (Optional) OData filter expression to refine the count of owners.

Usage Examples

Example 1: Get the Total Count of Owners for an Application

To retrieve the total count of owners for a specific application, use the following command:

Get-MgApplicationOwnerCount -ApplicationId "12345678-90ab-cdef-1234-567890abcdef" -ConsistencyLevel "Eventual"

Example 2: Get the Count of Owners Using a Filter

You can filter the owners based on specific criteria using the -Filter parameter. For example, to count only owners with a specific displayName:

Get-MgApplicationOwnerCount -ApplicationId "12345678-90ab-cdef-1234-567890abcdef" -ConsistencyLevel "Eventual" -Filter "displayName eq 'John Doe'"

Cmdlet Tips

• Always Use the -ConsistencyLevel Eventual Parameter: This parameter is required for the Get-MgApplicationOwnerCount cmdlet to work. Omitting this will result in an error.
• Filter with Care: The -Filter parameter supports OData query syntax. Make sure your filter expressions are correctly formatted to avoid syntax errors.

Possible Errors & Solutions

Error: Request_UnsupportedQuery

Cause: This error occurs when the -Filter parameter is used with an unsupported query.

Solution: Ensure that your filter expressions are valid and supported. Double-check the OData syntax and ensure the property you are filtering by is available for use.

Error: The 'ConsistencyLevel' parameter is required

Cause: This error occurs when the -ConsistencyLevel parameter is omitted.

Solution: : Always include -ConsistencyLevel "Eventual" in your cmdlet usage.

Error: Invalid Application ID

Cause: This error occurs when an incorrect or non-existent Application ID is provided.

Solution: : Verify the Application ID by using the Get-MgApplication cmdlet or through the Azure portal.

Use Cases

• Audit Application Owners: Regularly audit the number of owners assigned to critical applications to ensure that access is appropriately managed.
• Compliance Reporting: Use the owner count to generate reports for compliance checks, ensuring that sensitive applications have the correct ownership structure.
• Dynamic Management: Automatically trigger alerts or workflows if the owner count exceeds or falls below a predefined threshold, helping maintain application security.

Conclusion

The Get-MgApplicationOwnerCount cmdlet is a vital tool for Azure AD administrators, enabling efficient management and auditing of application ownership. By understanding its syntax, usage, and common errors, you can effectively integrate this cmdlet into your administrative scripts and processes. Remember to always use the -ConsistencyLevel "Eventual" parameter and verify your filter expressions to avoid common pitfalls.

Whether you are auditing application ownership, generating compliance reports, or managing access dynamically, the Get-MgApplicationOwnerCount cmdlet provides a robust solution for counting application owners in your AAD environment.

Additional Resources:

Microsoft Graph PowerShell Module Documentation
Microsoft Graph API Documentation

Related Articles:

Using Get-MgDirectoryRole in Graph PowerShell
Using Get-MgUserLicenseDetail in Graph PowerShell
Using Find-GraphMgCommand in Graph PowerShell
Connect to Microsoft 365 Using PowerShell
How to Create Bulk Users in Office 365 Using Graph PowerShell?
Create Microsoft 365 Group Using Microsoft Graph PowerShell
Block Microsoft 365 User Using Microsoft Graph PowerShell
Assign Microsoft 365 License Using Graph PowerShell
Microsoft 365 User Management Using Graph PowerShell
Checking Group Membership in Microsoft 365
Bulk Assign Microsoft 365 License
Find Inactive Users in Microsoft 365
Using Powershell Graph Search Query
Using Powershell Graph Filter Query
Using Where-Object In Graph PowerShell
Using Expand Property In Graph PowerShell
Using Select Object In Graph PowerShell
Using -Contains Operator In Graph PowerShell
Add User to Multiple Microsoft 365 Groups Using Graph PowerShell
Get Microsoft 365 User Location Using Graph PowerShell
Import Microsoft 365 Groups from CSV File Using Graph PowerShell
Microsoft 365 Group User Import Using Graph PowerShell