Nedim's IT CORNER

To begin, the Microsoft Graph PowerShell SDK is an application programming interface (API) that serves as a PowerShell-based wrapper for Microsoft Graph. It provides a comprehensive set of cmdlets designed to automate tasks at scale by leveraging Microsoft Graph APIs. Through this SDK, administrators can connect to and manage one or multiple Microsoft 365 and Azure Active Directory tenants.

At its core, the SDK operates on top of the Microsoft Graph API, which is a unified RESTful endpoint that integrates Microsoft’s cloud services into a single platform. Microsoft has heavily invested in this framework, making it a central component for service integration and management. As new features and services are introduced within Microsoft Graph, corresponding updates are typically made to the PowerShell SDK, allowing administrators to take advantage of new capabilities with minimal delay.

The SDK offers several key capabilities:

• It provides full access to Microsoft Graph APIs

Under the hood, the SDK directly leverages the Microsoft Graph API, a robust and heavily invested platform that unifies Microsoft cloud services through a single RESTful endpoint. The PowerShell SDK builds on this foundation, enabling administrators to interact with these services efficiently through PowerShell. As Microsoft continues to introduce new features and enhancements to the Microsoft Graph API, corresponding updates are typically incorporated into the PowerShell SDK. This ensures ongoing alignment with the latest capabilities and reduces the need for separate tooling.

Through Microsoft Graph, the SDK enables interaction with key services such as Azure Active Directory, SharePoint Online, Exchange Online and Microsoft Teams. While these services are accessed through object-based endpoints—such as users, groups, or devices—they are all managed through the same underlying platform. A key advantage of this approach is the use of a single access token and endpoint, simplifying authentication and connectivity. Rather than establishing multiple connections to individual services, administrators can access all supported workloads through a unified entry point.

• It is cross platform

Runs Everywhere: You can install and use the SDK on Windows, macOS, Linux, Azure Cloud Shell.

Consistent Commands: The commands and scripting logic remain the same regardless of the OS you’re using.

• It is compatible with Windows Powershell 5.1

PowerShell 7 and later is the recommended PowerShell version for use with the Microsoft Graph PowerShell SDK but there may be situations where you need to use powershell 5.1 or there may be times where you’re combining functions together and you’ll need to go backwards and forwards.

• Support for Modern Authentication

The SDK leverages the Microsoft Authentication Library (MSAL), which provides enhanced security and flexibility compared to the legacy Azure Active Directory Authentication Library (ADAL). By using MSAL, authentication is consistent across Microsoft services and aligns with current security best practices. It supports multiple authentication methods, including username and password, multifactor authentication, and certificate-based authentication. This modern approach ensures secure access while accommodating a wide range of authentication scenarios.

• It is open-source

Finally, the Microsoft Graph PowerShell SDK is an open-source project. While it is officially managed and maintained by Microsoft, it also benefits from active community involvement. Users can participate by providing feedback, submitting issues, and contributing to the codebase. This collaborative model allows both Microsoft and the broader community to continuously improve the SDK and ensure it meets real-world needs.

Microsoft Graph PowerShell SDK Modules

The Microsoft Graph PowerShell SDK comes in two modules, Microsoft.Graph (Published Version 1.0) and Microsoft.Graph.Beta, that you’ll install separately. These modules call the Microsoft Graph v1.0 and Microsoft Graph beta endpoints, respectively. You can install the two modules on the same PowerShell version.

INSTALLING MICROSOFT GRAPH POWERSHELL SDK

PowerShell 7 and later is the recommended version for working with the Microsoft Graph PowerShell SDK across all platforms. No additional prerequisites are required when using the SDK with PowerShell 7 or newer.

To install it on Windows Powershell 5.1 you will need to have:

• .NET Framework 4.7.2 or later
• Install the NuGet provider (Often, you don’t have to do anything there. If it’s the first time that you’re installing it, it will actually ask you and say do you wish to install the NuGet provider, and you’ll say yes, and carry on.)

• Execution policy – if we’re using the Windows platform, then we need to set the execution policy to be remote signed or less restrictive because we need to install those components and then be able to execute.

With that in mind let’s install it by running this command. (If you’re doing this for the very first time on a fresh machine and you’ve never done this, you will have to install Nuget provider)

If no scope is specified, the module will be installed for the current user, which is perfectly acceptable.

Install-Module Microsoft.Graph -Scope AllUsers -force 

Once done we will have Microsoft.Graph and all the sub-modules available to use.

We have taken the first step toward mastering the Microsoft Graph PowerShell SDK. We explored what it is, reviewed the prerequisites, discussed key considerations, and completed the installation. In future posts, we’ll dive deeper into practical examples, including automating tasks, managing users and groups, and leveraging advanced queries.

Stay tuned.