Model Mondays S2:E2 – Understanding Model Context Protocol (MCP)
June 28, 2025Important Update: Azure AD Graph retirement
June 28, 2025
AzureAD PowerShell was announced as deprecated in 2023. In this update, we’ll share more information about the timeline, what to expect, and required actions. We understand that retirements can be disruptive, but this activity is an important part of our commitment to security and programmability for our customers’ tenants.
Key points
- The AzureAD and AzureAD-Preview PowerShell modules will be retired (and stop working) starting in mid-October 2025.
- You can expect one or more temporary outage tests of 8-24hrs in duration in the month of September 2025.
It’s important to take action now by migrating your scripts using these retiring modules to Microsoft Graph PowerShell SDK or Microsoft Entra PowerShell. Over the coming months, we’ll provide more specific timelines regarding impact of these retirements through M365 Message Center messages.
Identifying use of AzureAD PowerShell in your tenant
There are two tools available to you to understand usage of these legacy modules and impact of this retirement: Entra Recommendations and Sign-in logs.
Entra Recommendations
The recommendation titled: Migrate from the retiring MSOnline and AzureAD PowerShell usage to Microsoft Graph PowerShell provides a report on usage of legacy PowerShell in the last 30days. This recommendation is updated daily and shows the operations, number of API requests, last request date, and max daily user count for these modules.
Sign-in logs
Sign-in logs are useful to identify who’s using AzureAD PowerShell. You can search Sign-in logs (interactive and non-interactive both) for the application “Azure Active Directory PowerShell” to show sign-in requests made with the retiring modules.
Migrating AzureAD PowerShell to Microsoft Graph
To migrate from your scripts to Microsoft Graph, identify the scripts using the AzureAD cmdlets and replace them with Microsoft Graph PowerShell or Microsoft Entra PowerShell equivalents. Additional documentation, including cmdlet mapping guidance, can be found in the More resources links below.
If you’re using Microsoft Entra PowerShell, you can also use the compatibility mode option to make migration easier. With this feature, Microsoft Entra PowerShell can run most AzureAD PowerShell scripts with only minimal changes:
Import-Module -Name Microsoft.Entra.Users |
Also using Azure AD Graph APIs in your apps?
Those APIs are going away in early September 2025, and temporary outages will begin as soon as late July. For guidance on identifying affected apps and migrating to Microsoft Graph, read this blog post on Azure AD Graph API retirement.
Kristopher Bash
More resources
- Migrate from Azure AD PowerShell to Microsoft Graph PowerShell.
- Find Azure AD and MSOnline cmdlets in Microsoft Graph PowerShell
- Microsoft Graph PowerShell SDK
- Microsoft Entra PowerShell
Learn more about Microsoft Entra
Prevent identity attacks, ensure least privilege access, unify access controls, and improve the experience for users with comprehensive identity and network access solutions across on-premises and clouds.