Get-MsolUserRole Azure AD V2 cmdlet equivalent

Question

I currently try to migrate an existing PowerShell script that uses the old MSOnline PowerShell module to the AzureAD (V2) module. I am able to replace most of the cmdlets but I don't find a replacement for the Get-MsolUserRole cmdlet to retrieve administrator roles for a specific user.

The similar AzureAD (V2) cmdlets doesn't allow me to query the roles by the objectId of the user (they require the role objectid). Any suggestions?

Answer 1

The closest equivalent is Get-AzureADUserMembership, but since this will also include other membership (e.g. group memberships), you will need to filter the results down to only directory roles:

Get-AzureADUserMembership -ObjectId "[e-mail]" -All $true `
| Where-Object { $_.ObjectType -eq "Role" }