Azure AD Attributes

Question

Azure AD Attributes

Handian Sudianto 7,656

Hello, How we can change or remove mobile phone values for all AAD users?

Abdurrahman Ulu 0 Reputation points

2023-06-13T12:55:39.8466667+00:00

Hi, I have a similar task to remove the homePhone values in Azure AD for in a hybrid infrastructure and as I know we are unable to remove attribute values in Azure AD because the on-premises AD mastered Directory Sync objects. So, the boss is on-prem AD and if we want to delete a value for a user or all users in Azure AD, we must delete this value in on-prem AD (Set-ADUser) first then sync to Azure AD through Azure AD Connect, tight?

I used the following cmdlets in PS and got an error.

get-user -Identity au35790 | set-user -HomePhone $null

OR

Set-user -Identity au35790 -HomePhone $null

OR

get-user -Filter * | set-user -homePhone $null

error msg: An Azure Active Directory call was made to keep object in sync between Azure Active Directory and Exchange Online. However, it failed. Detailed error message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration. Dualwrite (Graph) Request Id:......

So, the below PS cmdlet does not work for the hybrid Azure AD environment, right?

2 answers

Your answer

Abdurrahman Ulu 0 Reputation points

2023-06-13T12:55:39.8466667+00:00

Hi, I have a similar task to remove the homePhone values in Azure AD for in a hybrid infrastructure and as I know we are unable to remove attribute values in Azure AD because the on-premises AD mastered Directory Sync objects. So, the boss is on-prem AD and if we want to delete a value for a user or all users in Azure AD, we must delete this value in on-prem AD (Set-ADUser) first then sync to Azure AD through Azure AD Connect, tight?

I used the following cmdlets in PS and got an error.

get-user -Identity au35790 | set-user -HomePhone $null

OR

Set-user -Identity au35790 -HomePhone $null

OR

get-user -Filter * | set-user -homePhone $null

error msg: An Azure Active Directory call was made to keep object in sync between Azure Active Directory and Exchange Online. However, it failed. Detailed error message: Unable to update the specified properties for on-premises mastered Directory Sync objects or objects currently undergoing migration. Dualwrite (Graph) Request Id:......

So, the below PS cmdlet does not work for the hybrid Azure AD environment, right?

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

1 deleted comment

Comments have been turned off. Learn more

Answer 2

Anonymous

Hi @Handian Sudianto , are you asking for individual changes or bulk? For individual changes you can follow this document. user-profile-properties-single-page-view

Navigate to "Contact Information" and you can manually update this. Please let me know if you have any questions or need help with bulk operations.

If this answer helped you please mark it as "Verified" so other users can reference it.

Thank you,

James

Handian Sudianto 7,656 Reputation points

2023-02-17T05:51:54.6066667+00:00

Hello James Hamil

I mean change for all users in one time, i need to change for all my more than 1000 users.