ESC
Type to search...
↑↓ Navigate ↵ Open ESC Close

UserAuthenticationMethod.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read/Write All Resources

Allows the application to read and write authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read and write all users' authentication methods

Allows the application to read and write authentication methods of all users in your organization, without a signed-in user. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods

Permission ID: 50483e42-d915-4231-9639-7fdb7fd190e5
Delegated Permission Admin consent required

Read and write all users' authentication methods.

Allows the app to read and write authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

User sees: Allows the app to read and write authentication methods of all users you have access to in your organization. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.
Permission ID: b7887744-6746-4312-813d-72daeaee7e2d

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
id String Unique identifier. Read-only.
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation 
{
  "@odata.type": "#microsoft.graph.authentication"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.
hardwareOathMethods hardwareOathAuthenticationMethod collection The hardware OATH time-based one-time password (TOTP) devices assigned to a user for authentication.
passwordlessMicrosoftAuthenticatorMethods passwordlessMicrosoftAuthenticatorAuthenticationMethod collection Represents the Microsoft Authenticator Passwordless Phone Sign-in methods registered to a user for authentication.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /me/authentication/emailMethods
GET /me/authentication/emailMethods/{emailMethods-id}
GET /me/authentication/externalAuthenticationMethods
GET /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /me/authentication/fido2Methods
GET /me/authentication/fido2Methods/{id}
GET /me/authentication/methods
GET /me/authentication/methods/{id}
GET /me/authentication/microsoftAuthenticatorMethods
GET /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /me/authentication/passwordMethods
GET /me/authentication/passwordMethods/{passwordMethods-id}
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /me/authentication/platformCredentialMethods
GET /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /me/authentication/qrCodePinMethod/standardQRCode
GET /me/authentication/qrCodePinMethod/temporaryQRCode
GET /me/authentication/softwareOathMethods
GET /me/authentication/softwareOathMethods/{id}
GET /me/authentication/temporaryAccessPassMethods
GET /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /me/authentication/windowsHelloForBusinessMethods
GET /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/emailMethods
GET /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
GET /users/{id | userPrincipalName}/authentication/fido2Methods
GET /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
GET /users/{id | userPrincipalName}/authentication/methods
GET /users/{id | userPrincipalName}/authentication/methods/{id}
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/operations/{id}
GET /users/{id | userPrincipalName}/authentication/passwordMethods
GET /users/{id | userPrincipalName}/authentication/passwordMethods/{passwordMethods-id}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/qrCodePinMethod
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id}/authentication/qrCodePinMethod/standardQRCode
GET /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
GET /users/{usersId}/authentication/externalAuthenticationMethods
GET /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
POST /me/authentication/phoneMethods/{id}/enableSmsSignIn
POST /me/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/emailMethods
POST /users/{id | userPrincipalName}/authentication/methods/{passwordMethods-id}/resetPassword
POST /users/{id | userPrincipalName}/authentication/phoneMethods
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{id}/enableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
POST /users/{usersId}/authentication/externalAuthenticationMethods
PATCH /me/authentication/qrCodePinMethod/pin
PATCH /me/authentication/qrCodePinMethod/standardQRCode
PATCH /me/authentication/qrCodePinMethod/temporaryQRCode
PATCH /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
PATCH /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
PATCH /users/{id}/authentication/qrCodePinMethod/pin
PATCH /users/{id}/authentication/qrCodePinMethod/standardQRCode
PATCH /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
PUT /me/authentication/qrCodePinMethod
PUT /users/{id}/authentication/qrCodePinMethod
DELETE /me/authentication/emailMethods/{emailMethods-id}
DELETE /me/authentication/fido2Methods/{id}
DELETE /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
DELETE /me/authentication/phoneMethods/{phoneMethodId}
DELETE /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
DELETE /me/authentication/qrCodePinMethod/standardQRCode
DELETE /me/authentication/qrCodePinMethod/temporaryQRCode
DELETE /me/authentication/softwareOathMethods/{id}
DELETE /me/authentication/temporaryAccessPassMethods/{id}
DELETE /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
DELETE /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
DELETE /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
DELETE /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
DELETE /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
DELETE /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
DELETE /users/{id | userPrincipalName}/authentication/qrCodePinMethod
DELETE /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
DELETE /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{id}
DELETE /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
DELETE /users/{id}/authentication/qrCodePinMethod/standardQRCode
DELETE /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
DELETE /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}/$ref
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
GET /me/authentication/emailMethods
GET /me/authentication/emailMethods/{emailMethods-id}
GET /me/authentication/externalAuthenticationMethods
GET /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /me/authentication/fido2Methods
GET /me/authentication/fido2Methods/{id}
GET /me/authentication/hardwareOathMethods
GET /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
GET /me/authentication/methods
GET /me/authentication/methods/{id}
GET /me/authentication/microsoftAuthenticatorMethods
GET /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /me/authentication/passwordlessMicrosoftAuthenticatorMethods
GET /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
GET /me/authentication/passwordMethods
GET /me/authentication/passwordMethods/{passwordMethods-id}
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /me/authentication/platformCredentialMethods
GET /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /me/authentication/qrCodePinMethod
GET /me/authentication/qrCodePinMethod/standardQRCode
GET /me/authentication/qrCodePinMethod/temporaryQRCode
GET /me/authentication/softwareOathMethods
GET /me/authentication/softwareOathMethods/{id}
GET /me/authentication/temporaryAccessPassMethods
GET /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /me/authentication/windowsHelloForBusinessMethods
GET /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/emailMethods
GET /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
GET /users/{id | userPrincipalName}/authentication/fido2Methods
GET /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
GET /users/{id | userPrincipalName}/authentication/methods
GET /users/{id | userPrincipalName}/authentication/methods/{id}
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/operations/{id}
GET /users/{id | userPrincipalName}/authentication/passwordlessMicrosoftAuthenticatorMethods
GET /users/{id | userPrincipalName}/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
GET /users/{id | userPrincipalName}/authentication/passwordMethods
GET /users/{id | userPrincipalName}/authentication/passwordMethods/{passwordMethods-id}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods
GET /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods
GET /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
GET /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods
GET /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
GET /users/{id}/authentication/qrCodePinMethod
GET /users/{id}/authentication/qrCodePinMethod/standardQRCode
GET /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
GET /users/{user-id}/authentication/fido2Methods/creationOptions(challengeTimeoutInMinutes={challengeTimeoutInMinutes})
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
GET /users/{usersId}/authentication/externalAuthenticationMethods
GET /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
GET /users/{usersId}/authentication/hardwareOathMethods
GET /users/{usersId}/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
POST /me/authentication/hardwareOathMethods
POST /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}/activate
POST /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}/deactivate
POST /me/authentication/hardwareOathMethods/assignAndActivate
POST /me/authentication/hardwareOathMethods/assignAndActivateBySerialNumber
POST /me/authentication/phoneMethods/{id}/enableSmsSignIn
POST /me/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/emailMethods
POST /users/{id | userPrincipalName}/authentication/methods/{passwordMethods-id}/resetPassword
POST /users/{id | userPrincipalName}/authentication/phoneMethods
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{id}/enableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
POST /users/{id}/authentication/fido2methods
POST /users/{usersId}/authentication/externalAuthenticationMethods
POST /users/{usersId}/authentication/hardwareOathMethods
POST /users/{usersId}/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}/activate
POST /users/{usersId}/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}/deactivate
POST /users/{usersId}/authentication/hardwareOathMethods/assignAndActivate
POST /users/{usersId}/authentication/hardwareOathMethods/assignAndActivateBySerialNumber
PATCH /me/authentication/qrCodePinMethod/pin
PATCH /me/authentication/qrCodePinMethod/standardQRCode
PATCH /me/authentication/qrCodePinMethod/temporaryQRCode
PATCH /me/authentication/requirements
PATCH /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
PATCH /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
PATCH /users/{id | userPrincipalName}/authentication/requirements
PATCH /users/{id | userPrincipalName}/authentication/signInPreferences
PATCH /users/{id}/authentication/qrCodePinMethod/pin
PATCH /users/{id}/authentication/qrCodePinMethod/standardQRCode
PATCH /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
PUT /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}/device/assignTo/$ref
PUT /me/authentication/qrCodePinMethod
PUT /users/{id}/authentication/qrCodePinMethod
PUT /users/{usersId}/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}/device/assignTo/$ref
DELETE /me/authentication/emailMethods/{emailMethods-id}
DELETE /me/authentication/fido2Methods/{id}
DELETE /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
DELETE /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
DELETE /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
DELETE /me/authentication/phoneMethods/{phoneMethodId}
DELETE /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
DELETE /me/authentication/qrCodePinMethod
DELETE /me/authentication/qrCodePinMethod/standardQRCode
DELETE /me/authentication/qrCodePinMethod/temporaryQRCode
DELETE /me/authentication/softwareOathMethods/{id}
DELETE /me/authentication/temporaryAccessPassMethods/{id}
DELETE /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
DELETE /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
DELETE /users/{id | userPrincipalName}/authentication/fido2Methods/{id}
DELETE /users/{id | userPrincipalName}/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
DELETE /users/{id | userPrincipalName}/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
DELETE /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
DELETE /users/{id | userPrincipalName}/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
DELETE /users/{id | userPrincipalName}/authentication/softwareOathMethods/{id}
DELETE /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods/{id}
DELETE /users/{id | userPrincipalName}/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
DELETE /users/{id}/authentication/qrCodePinMethod
DELETE /users/{id}/authentication/qrCodePinMethod/standardQRCode
DELETE /users/{id}/authentication/qrCodePinMethod/temporaryQRCode
DELETE /users/{usersId}/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}/$ref
DELETE /users/{usersId}/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgUserAuthenticationEmailMethod /me/authentication/emailMethods
List emailMethods
Get-MgUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Get emailAuthenticationMethod
Get-MgUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods
List externalAuthenticationMethod objects
Get-MgUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
Get externalAuthenticationMethod
Get-MgUserAuthenticationFido2Method /me/authentication/fido2Methods
List fido2AuthenticationMethod
Get-MgUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Get fido2AuthenticationMethod
Get-MgUserAuthenticationMethod /me/authentication/methods
List methods
Get-MgUserAuthenticationMethod /me/authentication/methods/{id}
Get authenticationMethod
Get-MgUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods
List microsoftAuthenticatorAuthenticationMethods
Get-MgUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Get microsoftAuthenticatorAuthenticationMethod
Get-MgUserAuthenticationOperation /users/{id | userPrincipalName}/authentication/operations/{id}
Get longRunningOperation
Get-MgUserAuthenticationPasswordMethod /me/authentication/passwordMethods
List passwordMethods
Get-MgUserAuthenticationPasswordMethod /me/authentication/passwordMethods/{passwordMethods-id}
Get passwordAuthenticationMethod
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
Get-MgUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods
List platformCredentialAuthenticationMethods
Get-MgUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Get platformCredentialAuthenticationMethod
Get-MgUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods
List softwareOathMethods
Get-MgUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Get softwareOathAuthenticationMethod
Get-MgUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods
List temporaryAccessPassMethods
Get-MgUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
Get temporaryAccessPassAuthenticationMethod
Get-MgUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods
List windowsHelloForBusinessAuthenticationMethods
Get-MgUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Get windowsHelloForBusinessAuthenticationMethod
New-MgUserAuthenticationEmailMethod /users/{id | userPrincipalName}/authentication/emailMethods
Create emailMethod
New-MgUserAuthenticationExternalAuthenticationMethod /users/{usersId}/authentication/externalAuthenticationMethods
Create externalAuthenticationMethod
New-MgUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods
Create phoneMethod
New-MgUserAuthenticationTemporaryAccessPassMethod /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Create temporaryAccessPassMethod
Remove-MgUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Delete emailAuthenticationMethod
Remove-MgUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Delete fido2AuthenticationMethod
Remove-MgUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Delete microsoftAuthenticatorAuthenticationMethod
Remove-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Delete phoneAuthenticationMethod
Remove-MgUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Delete platformCredentialAuthenticationMethod
Remove-MgUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Delete softwareOathAuthenticationMethod
Remove-MgUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{id}
Delete temporaryAccessPassAuthenticationMethod
Remove-MgUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Delete windowsHelloForBusinessAuthenticationMethod
Update-MgUserAuthenticationEmailMethod /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
Update emailAuthenticationMethod
Update-MgUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Update phoneAuthenticationMethod
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaExternalIndustryDataOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaIdentityGovernanceRoleManagementAlertOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaUserAuthenticationEmailMethod /me/authentication/emailMethods
List emailAuthenticationMethods
Get-MgBetaUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Get emailAuthenticationMethod
Get-MgBetaUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods
List externalAuthenticationMethod objects
Get-MgBetaUserAuthenticationExternalAuthenticationMethod /me/authentication/externalAuthenticationMethods/{externalAuthenticationMethodId}
Get externalAuthenticationMethod
Get-MgBetaUserAuthenticationFido2Method /me/authentication/fido2Methods
List fido2AuthenticationMethod
Get-MgBetaUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Get fido2AuthenticationMethod
Get-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods
List hardwareOathAuthenticationMethod objects
Get-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
Get hardwareOathAuthenticationMethod
Get-MgBetaUserAuthenticationMethod /me/authentication/methods
List methods
Get-MgBetaUserAuthenticationMethod /me/authentication/methods/{id}
Get authenticationMethod
Get-MgBetaUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods
List microsoftAuthenticatorAuthenticationMethods
Get-MgBetaUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Get microsoftAuthenticatorAuthenticationMethod
Get-MgBetaUserAuthenticationOperation /identityGovernance/roleManagementAlerts/operations/{longRunningOperationId}
Get longRunningOperation
Get-MgBetaUserAuthenticationPasswordlessMicrosoftAuthenticatorMethod /me/authentication/passwordlessMicrosoftAuthenticatorMethods
List passwordlessMicrosoftAuthenticatorAuthenticationMethods
Get-MgBetaUserAuthenticationPasswordlessMicrosoftAuthenticatorMethod /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
Get passwordlessMicrosoftAuthenticatorAuthenticationMethod
Get-MgBetaUserAuthenticationPasswordMethod /me/authentication/passwordMethods
List passwordMethods
Get-MgBetaUserAuthenticationPasswordMethod /me/authentication/passwordMethods/{passwordMethods-id}
Get passwordAuthenticationMethod
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
Get-MgBetaUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods
List platformCredentialAuthenticationMethods
Get-MgBetaUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Get platformCredentialAuthenticationMethod
Get-MgBetaUserAuthenticationQrCodePinMethod /me/authentication/qrCodePinMethod
Get qrCodePinAuthenticationMethod
Get-MgBetaUserAuthenticationQrCodePinMethodStandardQrCode /me/authentication/qrCodePinMethod/standardQRCode
Get qrCode
Get-MgBetaUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods
List softwareOathMethods
Get-MgBetaUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Get softwareOathAuthenticationMethod
Get-MgBetaUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods
List temporaryAccessPassMethods
Get-MgBetaUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{temporaryAccessPassAuthenticationMethodId}
Get temporaryAccessPassAuthenticationMethod
Get-MgBetaUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods
List windowsHelloForBusinessAuthenticationMethods
Get-MgBetaUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Get windowsHelloForBusinessAuthenticationMethod
Invoke-MgBetaCreationUserAuthenticationFido2MethodOption /users/{user-id}/authentication/fido2Methods/creationOptions(challengeTimeoutInMinutes={challengeTimeoutInMinutes})
fido2AuthenticationMethod: creationOptions
Invoke-MgBetaDeactivateUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}/deactivate
hardwareOathAuthenticationMethod: deactivate
New-MgBetaUserAuthenticationEmailMethod /users/{id | userPrincipalName}/authentication/emailMethods
Create emailAuthenticationMethod
New-MgBetaUserAuthenticationExternalAuthenticationMethod /users/{usersId}/authentication/externalAuthenticationMethods
Create externalAuthenticationMethod
New-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods
Create hardwareOathAuthenticationMethod
New-MgBetaUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods
Create phoneAuthenticationMethod
New-MgBetaUserAuthenticationTemporaryAccessPassMethod /users/{id | userPrincipalName}/authentication/temporaryAccessPassMethods
Create temporaryAccessPassMethod
Remove-MgBetaUserAuthenticationEmailMethod /me/authentication/emailMethods/{emailMethods-id}
Delete emailAuthenticationMethod
Remove-MgBetaUserAuthenticationFido2Method /me/authentication/fido2Methods/{id}
Delete fido2AuthenticationMethod
Remove-MgBetaUserAuthenticationHardwareOathMethod /me/authentication/hardwareOathMethods/{hardwareOathAuthenticationMethodId}
Delete hardwareOathAuthenticationMethod
Remove-MgBetaUserAuthenticationMicrosoftAuthenticatorMethod /me/authentication/microsoftAuthenticatorMethods/{microsoftAuthenticatorAuthenticationMethodId}
Delete microsoftAuthenticatorAuthenticationMethod
Remove-MgBetaUserAuthenticationPasswordlessMicrosoftAuthenticatorMethod /me/authentication/passwordlessMicrosoftAuthenticatorMethods/{id}
Delete passwordlessMicrosoftAuthenticatorAuthenticationMethod
Remove-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Delete phoneAuthenticationMethod
Remove-MgBetaUserAuthenticationPlatformCredentialMethod /me/authentication/platformCredentialMethods/{platformCredentialAuthenticationMethodId}
Delete platformCredentialAuthenticationMethod
Remove-MgBetaUserAuthenticationQrCodePinMethod /me/authentication/qrCodePinMethod
Delete qrCodePinAuthenticationMethod
Remove-MgBetaUserAuthenticationQrCodePinMethodStandardQrCode /me/authentication/qrCodePinMethod/standardQRCode
Delete qrCode
Remove-MgBetaUserAuthenticationSoftwareOathMethod /me/authentication/softwareOathMethods/{id}
Delete softwareOathAuthenticationMethod
Remove-MgBetaUserAuthenticationTemporaryAccessPassMethod /me/authentication/temporaryAccessPassMethods/{id}
Delete temporaryAccessPassAuthenticationMethod
Remove-MgBetaUserAuthenticationWindowsHelloForBusinessMethod /me/authentication/windowsHelloForBusinessMethods/{windowsHelloForBusinessAuthenticationMethodId}
Delete windowsHelloForBusinessAuthenticationMethod
Set-MgBetaUserAuthenticationHardwareOathMethodAndActivate /me/authentication/hardwareOathMethods/assignAndActivate
hardwareOathAuthenticationMethod: assignAndActivate
Set-MgBetaUserAuthenticationHardwareOathMethodAndActivateBySerialNumber /me/authentication/hardwareOathMethods/assignAndActivateBySerialNumber
hardwareOathAuthenticationMethod: assignAndActivateBySerialNumber
Update-MgBetaUserAuthenticationEmailMethod /users/{id | userPrincipalName}/authentication/emailMethods/{emailMethods-id}
Update emailAuthenticationMethod
Update-MgBetaUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Update phoneAuthenticationMethod
Update-MgBetaUserAuthenticationQrCodePinMethodPin /me/authentication/qrCodePinMethod/pin
Update qrPin
Update-MgBetaUserAuthenticationQrCodePinMethodStandardQrCode /me/authentication/qrCodePinMethod/standardQRCode
Create or Update qrCode
Update-MgBetaUserAuthenticationRequirement /users/{id | userPrincipalName}/authentication/signInPreferences
Update authentication method states
Update-MgBetaUserAuthenticationSignInPreference /users/{id | userPrincipalName}/authentication/signInPreferences
Update authentication method states

Code Examples

C# / .NET SDK
authenticationMethod: resetPassword
View official example on Microsoft Learn
// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Users.Item.Authentication.Methods.Item.ResetPassword;

var requestBody = new ResetPasswordPostRequestBody
{
	NewPassword = "Cuyo5459",
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Users["{user-id}"].Authentication.Methods["{authenticationMethod-id}"].ResetPassword.PostAsync(requestBody);
JavaScript
authenticationMethod: resetPassword
View official example on Microsoft Learn
const options = {
	authProvider,
};

const client = Client.init(options);

const passwordResetResponse = {
    newPassword: 'Cuyo5459'
};

await client.api('/users/6ea91a8d-e32e-41a1-b7bd-d2d185eed0e0/authentication/methods/28c10230-6103-485e-b985-444c60001490/resetPassword')
	.post(passwordResetResponse);
PowerShell
authenticationMethod: resetPassword
View official example on Microsoft Learn
Import-Module Microsoft.Graph.Identity.SignIns

$params = @{
	newPassword = "Cuyo5459"
}

Reset-MgUserAuthenticationMethodPassword -UserId $userId -AuthenticationMethodId $authenticationMethodId -BodyParameter $params
Python
authenticationMethod: resetPassword
View official example on Microsoft Learn
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.users.item.authentication.methods.item.reset_password.reset_password_post_request_body import ResetPasswordPostRequestBody
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ResetPasswordPostRequestBody(
	new_password = "Cuyo5459",
)

result = await graph_client.users.by_user_id('user-id').authentication.methods.by_authentication_method_id('authenticationMethod-id').reset_password.post(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for UserAuthenticationMethod.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.