blocks|key|236046|text|您可以尝试使用Get-AzureRmADUser来获取ObjectId。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|236047|示例：|236048|Get-AzureRmADUser+-UserPrincipalName+"xxxx@xxxx.com"|code-block|syntax|javascript|236049|结果：|236050|​|236051|📷|atomic|236052|236053|Id就是ObjectId，你可以得到它。此外，您还可以通过其他属性获取它，不仅仅是-UserPrincipalName，只需参考命令的链接即可。|236054|更新|BOLD|236055|如果您使用Guest帐户，您可以尝试下面的命令。|236056|Get-AzureADUser+%7C+?{$_.UserType+-eq+"Guest"}+%7C+?{$_.UserPrincipalName+-like+"*partofyouraccount*"}|236057|236058|236059|236060|注意：在使用此命令之前，您需要install+Azure+AD+powershell+module。|236061|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.microsoft.com/en-us/powershell/module/azurerm.resources/Get-AzureRmADUser?view=azurermps-6.7.0|1|IMAGE|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/bd5f2d7bd032ed761cc77dcc4e451e6b.png|imageAlt|2|https://ask.qcloudimg.com/http-save/yehe-900000/bf46ad468327c6765dac115eef66c026.png|3|https://docs.microsoft.com/en-us/powershell/azure/active-directory/install-adv2?view=azureadps-2.0^0|7|H|R|8|7|H|0|0|0|0|0|0|0|1|1|0|0|0|2|4|8|15|I|0|0|2|0|5|5|0|0|0|0|1|2|0|0|0|2|F|Y|3|0^^$0|@$1|2|3|4|5|6|7|1Q|8|@$9|1R|A|1S|B|C]|$9|1T|A|1U|B|C]]|D|@$9|1V|A|1W|1|1X]]|E|$]]|$1|F|3|G|5|6|7|1Y|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|1Z|8|@]|D|@]|E|$K|L]]|$1|M|3|N|5|6|7|20|8|@]|D|@]|E|$]]|$1|O|3|P|5|6|7|21|8|@]|D|@]|E|$]]|$1|Q|3|R|5|S|7|22|8|@]|D|@$9|23|A|24|1|25]]|E|$]]|$1|T|3|P|5|6|7|26|8|@]|D|@]|E|$]]|$1|U|3|V|5|6|7|27|8|@$9|28|A|29|B|C]|$9|2A|A|2B|B|C]|$9|2C|A|2D|B|C]]|D|@]|E|$]]|$1|W|3|X|5|6|7|2E|8|@$9|2F|A|2G|B|Y]]|D|@]|E|$]]|$1|Z|3|10|5|6|7|2H|8|@$9|2I|A|2J|B|C]]|D|@]|E|$]]|$1|11|3|12|5|J|7|2K|8|@]|D|@]|E|$K|L]]|$1|13|3|P|5|6|7|2L|8|@]|D|@]|E|$]]|$1|14|3|R|5|S|7|2M|8|@]|D|@$9|2N|A|2O|1|2P]]|E|$]]|$1|15|3|P|5|6|7|2Q|8|@]|D|@]|E|$]]|$1|16|3|17|5|6|7|2R|8|@$9|2S|A|2T|B|Y]]|D|@$9|2U|A|2V|1|2W]]|E|$]]|$1|18|3|-4|5|6|7|2X|8|@]|D|@]|E|$]]]|19|$1A|$5|1B|1C|1D|E|$1E|1F]]|1G|$5|1H|1C|1I|E|$1J|1K|1L|-4]]|1M|$5|1H|1C|1I|E|$1J|1N|1L|-4]]|1O|$5|1B|1C|1D|E|$1E|1P]]]]

You could try <a href="https://docs.microsoft.com/en-us/powershell/module/azurerm.resources/Get-AzureRmADUser?view=azurermps-6.7.0" rel="nofollow noreferrer"><code>Get-AzureRmADUser</code></a> to get the <code>ObjectId</code> .

Sample:

<pre><code>Get-AzureRmADUser -UserPrincipalName "xxxx@xxxx.com"
</code></pre>

Result:

<a href="https://i.stack.imgur.com/n8aPl.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/n8aPl.png" alt="enter image description here"></a>

The <code>Id</code> is the <code>ObjectId</code>, you could get it. Also, you could get it via other properties, not only <code>-UserPrincipalName</code>, just refer to the link of the command.

Update:

If you use a <code>Guest</code> account, you could try the command below.

<pre><code>Get-AzureADUser | ?{$_.UserType -eq "Guest"} | ?{$_.UserPrincipalName -like "*partofyouraccount*"}
</code></pre>

<a href="https://i.stack.imgur.com/XqjTg.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/XqjTg.png" alt="enter image description here"></a>

Note: Before using this command, you need to <a href="https://docs.microsoft.com/en-us/powershell/azure/active-directory/install-adv2?view=azureadps-2.0" rel="nofollow noreferrer">install Azure AD powershell module</a>.

blocks|key|3050656|text|您也可以使用azure+cli获取它。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3050657|az+ad+signed-in-user+show+--query+objectId+-o+tsv|code-block|syntax|javascript|3050658|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

You can also get it using the azure cli

<pre><code>az ad signed-in-user show --query objectId -o tsv
</code></pre>

blocks|key|3050681|text|使用Powershell+cmdlet：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3050682|$myObjectId+=+(Get-AzADUser+-UserPrincipalName+(Get-AzContext).Account).Id|code-block|syntax|javascript|3050683|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

With Powershell cmdlets:
<pre><code>$myObjectId = (Get-AzADUser -UserPrincipalName (Get-AzContext).Account).Id
</code></pre>

blocks|key|236086|text|您看到的关于"Name“的信息与订阅相关。使用以下命令获取“objectId”下的帐户：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|236087|(Get-AzContext).Account.ExtendedProperties.HomeAccountId.Split('.')[0]|code-block|syntax|javascript|236088|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

The info on &quot;Name&quot; you are seeing is related to the subscription. Use the command below to get the objectId under &quot;Account&quot;:
<pre><code>(Get-AzContext).Account.ExtendedProperties.HomeAccountId.Split('.')[0]
</code></pre>

blocks|key|235014|text|我不是AAD专家，但我发现我自己的个人Azure订阅与我的工作无关，one返回以下命令的nothing：|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|entityRanges|data|235015|#+does+not+work+sometimes
(Get-AzADUser+-UserPrincipalName+(Get-AzContext).Account).Id|code-block|syntax|javascript|235016|然而，我发现我可以可靠地获取我的用户主体名称(UPN)和对象ID，使用Az+CLI获取访问令牌，然后使用Microsoft+Graph+API获取用户信息。|235017|$token+=+Get-AzAccessToken+-Resource+"https://graph.microsoft.com/"
$headers+=+@{+Authorization+=+"Bearer+$($token.Token)"+}
Invoke-RestMethod+https://graph.microsoft.com/v1.0/me+-Headers+$headers|235018|​|235019|📷|atomic|235020|235021|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/df7cb0ccb1a0205e8f2291cf85a61a06.png|imageAlt^0|18|7|0|0|0|0|0|0|1|0|0|0^^$0|@$1|2|3|4|5|6|7|13|8|@$9|14|A|15|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|16|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|17|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|18|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|19|8|@]|D|@]|E|$]]|$1|Q|3|R|5|S|7|1A|8|@]|D|@$9|1B|A|1C|1|1D]]|E|$]]|$1|T|3|P|5|6|7|1E|8|@]|D|@]|E|$]]|$1|U|3|-4|5|6|7|1F|8|@]|D|@]|E|$]]]|V|$W|$5|X|Y|Z|E|$10|11|12|-4]]]]

I am not an expert in AAD but I have found that my own personal Azure subscription unrelated to my work one returns nothing for the following command:
<pre><code># does not work sometimes
(Get-AzADUser -UserPrincipalName (Get-AzContext).Account).Id
</code></pre>
However I found that I can reliably get my user principal name (UPN) and object ID using the Az CLI to get an access token then the Microsoft Graph API to each back the user information.
<pre><code>$token = Get-AzAccessToken -Resource &quot;https://graph.microsoft.com/&quot;
$headers = @{ Authorization = &quot;Bearer $($token.Token)&quot; }
Invoke-RestMethod https://graph.microsoft.com/v1.0/me -Headers $headers
</code></pre>
<a href="https://i.stack.imgur.com/eUaOY.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/eUaOY.png" alt="Example screenshot" /></a>

I'm trying to invoke an ARM template that requires a PrincipalId of the currently signed in user.

<a href="https://docs.microsoft.com/en-us/azure/templates/microsoft.keyvault/vaults" rel="noreferrer">https://docs.microsoft.com/en-us/azure/templates/microsoft.keyvault/vaults</a>

I've signed in using powershell, as a guest account in the organisation's AAD.
When I check the resulting context, I get:

<pre><code>Name : [sky.sigal@ministryof.me, 5f813400-5b93-43b0-af8f-5fd04714f1ef]
Account : me@here.com
SubscriptionName : SomeSubscriptionName
TenantId : e6d2d4cc-b762-486e-8894-4f5f540d5f31
Environment : AzureCloud
</code></pre>

I'm wondering how to get the AAD ObjectId from the above, without string parsing "Name"?

Note that the documentation for the ARM Template is not very clear so not sure if me@here.com would work just as well (am assuming it's talking about a Guid).

Thank you.

How to get the Azure AD objectid of the signed in user?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我正在尝试调用一个ARM模板，该模板需要当前登录用户的PrincipalId。我使用powershell登录，作为组织的AAD中的访客帐户。当我检查产生的上下文时，我得到：Name             : [sky.sigal@ministryof.me, 5f813400-5b93-43b0-af8f-5fd04...

问如何获取登录用户的Azure AD objectid？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何获取登录用户的Azure AD objectid？EN