Document decision tree about when to choose Az.Resources or Microsoft.Graph module for Azure AD user and group management

[LeonarddeR]

Description

There are currently 4 PowerShell modules that can do user and group management in Azure AD:

• MSOnline
• Azure AD PowerShell
• Microsoft Graph PowerShell
• AZ.Resources

I'm aware of the deprecation of the first two modules. Both point at Microsoft.Graph as a proper replacement, however I noticed that AZ.Resources also switched to Microsoft Graph lately. This all is pretty confusing. I think it should be properly documented when or not to choose for AZ.Resources instead of Microsoft.Graph, and when Microsoft.Graph should be preferred. If both modules serve a different audience, that should also be clear for people who need to make a decision for new projects and migration of old projects that use MSOnline or Azure AD PowerShell.

Script or Debug output

No response

Environment data

No response

Module versions

No response

Error output

No response

[dingmeng-xue]

Thanks for reporting. Due to Azure user needs to handle AzureAD user, group, application, and service principal with Azure services, Azure PowerShell provides their support in Az.Resources module. So, those four types are our focus.

MicrosoftGraph module serve all services behind MicrosoftGraph API. AzureAD is just a subset. So, if you want to manage objects in MicrosoftGraph API including AzureAD and others such as calendar, email, conversation and so on, MicrosoftGraph is a better choice.

If you only manage AzureAD object in your script, both can support your requirement.

It's good suggestion that we should tell user in our conceptual doc.

[Keldandorin]

Yes please clear up the confusion and if possible keep to one model that rules it all. At the moment I can not find Invite guest user in either AZ och MSGraph. Kinde hat using 2-3 modules and logon in them for every automation I do.