Table of Contents

Stop-CafPimGroup

Deactivates the user's assignment to a PIM group.

Syntax

Stop-CafPimGroup
    [-GroupName <string>]
    [-Tenant <string>]
    [-NoMsalFallback]
    [-ShowMsalErrors]

Description

Deactivates the user's assignment to a PIM group. The user must be eligible for the group. Either you run this cmdlet under a .azcontext which defines tenantId and adminEntraGroupName or you provide those values using the parameters.

Example

Stop-CafPimGroup
    -GroupName "AdminGroup"
    -Tenant "contoso.com"

Parameter

-GroupName
The name of the security group used for PIM.

Property Value
Type: string
Default value: None
Required: False

-Tenant
The tenant id or domain name.

Property Value
Type: string
Default value: None
Required: False

-NoMsalFallback
If set, the command will not retry using MSAL.PS to force MFA authentication.

Property Value
Type: SwitchParameter
Default value: False
Required: False

-ShowMsalErrors
If set, raw MSAL errors are shown in the output.

Property Value
Type: SwitchParameter
Default value: False
Required: False

See also