Remove-WorkforceInsightsDelegationAccess
This cmdlet is available only in the Exchange Online PowerShell module version 3.9.2-Preview1 or later. For more information, see About the Exchange Online PowerShell module.
Use the Remove-WorkforceInsightsDelegationAccess cmdlet to remove delegate access from the specified account (the delegate) so they can't view organizational insights like the leader (the delegator).
For information about the parameter sets in the Syntax section below, see Exchange cmdlet syntax.
Syntax
Default (Default)
Remove-WorkforceInsightsDelegationAccess
-Delegate <Guid>
-Delegator <Guid>
[-ResultSize <Unlimited>]
[<CommonParameters>]
Description
Use the Get-WorkforceInsightsDelegationAccess cmdlet to find the Microsoft Entra ObjectId values of delegate accounts that were given the capabilities of delegator accounts.
To run this cmdlet, you need to be a member of one of the following role groups in Microsoft Entra ID in the destination organization:
- Global Administrator
- AI Administrator
Important
Microsoft strongly advocates for the principle of least privilege. Assigning accounts only the minimum permissions necessary to perform their tasks helps reduce security risks and strengthens your organization's overall protection. Global Administrator is a highly privileged role that you typically limit to emergency scenarios or when you can't use a different role.
Examples
Example 1
Remove-WorkforceInsightsDelegationAccess -Delegate 8bd05978-667c-4eda-a029-291ea8930677 -Delegator a5f5dbca-8cc8-4a36-bbfc-9b8947b4eb60
This example removes the workforce insights delegation access capability of the specified delegator account from the specified delegate account.
Parameters
-Delegate
Applicable: Exchange Online
The Delegate parameter specifies the account that can view organizational insights like the leader (the account specified by the Delegator account).
A valid value for this parameter is the Microsoft Entra ObjectId value of the delegate account. Use the Get-MgUser cmdlet in Microsoft Graph PowerShell to find this value.
Parameter properties
| Type: | Guid |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | True |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-Delegator
Applicable: Exchange Online
The Delegator parameter specifies the account of the leader that can view organizational insights. This capability is delegated to the account specified by the Delegate parameter.
A valid value for this parameter is the ObjectID value of the delegator account. Use the Get-MgUser cmdlet in Microsoft Graph PowerShell to find this value.
Parameter properties
| Type: | Guid |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | True |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
-ResultSize
Applicable: Exchange Online
This parameter is reserved for internal Microsoft use.
Parameter properties
| Type: | Unlimited |
| Default value: | None |
| Supports wildcards: | False |
| DontShow: | False |
Parameter sets
(All)
| Position: | Named |
| Mandatory: | False |
| Value from pipeline: | False |
| Value from pipeline by property name: | False |
| Value from remaining arguments: | False |
CommonParameters
This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.