Get-MgServicePrincipal

Use Get-MgServicePrincipal to list tenant service principals and distinguish object IDs from application IDs.

Command 1 min read Windows PowerShell 5.1 and PowerShell 7

Documentation: Microsoft Learn — Get-MgServicePrincipal

Written and tested by Dhrub Bharali · Updated 02 October 2026

Common usage

Get-MgServicePrincipal -ErrorAction Stop

This is a usage example, not the complete parameter-set reference. Follow Microsoft Learn below for supported parameters and version details.

See the command anatomy

Read the command and its supplied arguments. This example requires real PowerShell or its module; this diagram does not execute it.

Get-MgServicePrincipal -ErrorAction Stop

Stage 1Get-MgServicePrincipal-ErrorAction

Try it

Windows PowerShell

PowerShell example · browser support is limited.

Execution scope: The full example below requires PowerShell outside this browser. You can edit this runner to use the supported practice commands; unsupported syntax returns an explanation.

Command

Interactive simulation · fictional data

Examples

Get-MgServicePrincipal -ErrorAction Stop

1Get-MgServicePrincipal -ErrorAction Stop

Show reference output

Sample output · fictional data, shaped like the real thing

DisplayName        AppId                                 Id
-----------        -----                                 --
Microsoft Graph     00000003-0000-0000-c000-000000000000  8f4c...

Practical use and troubleshooting

Practical scenario: Use Get-MgServicePrincipal when you need to list tenant service principals and distinguish object IDs from application IDs. Start with one identified target and inspect the returned values before extending the operation to a list. Keep the identity in your report so you can trace each result back to the object or path that produced it.

Common error and fix: A resource-not-found error can come from confusing AppId with the service principal's Id. Resolve the object in the intended tenant and supply the identifier required by the parameter. In an unattended script, capture this failure with its original error record and record which target failed. An empty result and an unsuccessful query must remain distinguishable in the final report.

See also: Get-MgApplication. Get-MgServicePrincipal reads tenant enterprise-application objects; Get-MgApplication reads application registrations. An application registration and its service principal are separate directory objects. Read the linked command before substituting it; similar names do not imply identical inputs or output.

Get-MgServicePrincipal reference on Microsoft Learn

Recap

Get-MgServicePrincipal Use Get-MgServicePrincipal to list tenant service principals and distinguish object IDs from application IDs.

Next: Get-MgGroup