Commands › Exchange Online

Get-AdministrativeUnit

Exchange Online ExchangeOnlineManagement Get-*

This cmdlet is functional only in the cloud-based service. Use the Get-AdministrativeUnit cmdlet to view administrative units, which are Microsoft Entra containers of resources. You can use administrative units to delegate administrative permissions and apply policies to different groups of users. **Note**: Administrative units are available only in Microsoft Entra ID P1 or P2. You create and manage administrative units in Microsoft Graph PowerShell.

Quick start script

# Get-AdministrativeUnit — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Get-AdministrativeUnit | Format-List

# 3. Export for evidence / drift tracking
Get-AdministrativeUnit | Export-Clixml .\AdministrativeUnit-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-AdministrativeUnit [[-Identity] <AdministrativeUnitIdParameter>]
 [-Confirm]
 [-DomainController <Fqdn>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (4)

Parameter	Type	What it controls
-Identity	AdministrativeUnitIdParameter	The Identity parameter specifies the administrative unit that you want to view. You can use any value that uniquely identifies the administrative unit. For example:
-Confirm	SwitchParameter	This parameter is reserved for internal Microsoft use.
-DomainController	Fqdn	This parameter is available only in on-premises Exchange.
-WhatIf	SwitchParameter	This parameter is reserved for internal Microsoft use.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.