Azure AD priv roles

Get-GlobalAdminUPN.ps1

# Script to get all User Principal Names of users in the Global Administrators role in Azure Active Directory.
# Uses the MSGraph beta endpoint and requires the correct permissions to access the data. See: https://docs.microsoft.com/en-us/graph/api/rbacapplication-list-roledefinitions?view=graph-rest-beta&tabs=http#permissions.

Select-MgProfile -Name "beta"
Connect-MgGraph -Scopes 'RoleManagement.Read.Directory'

$memberList = [System.Collections.Generic.List[string]]::new()
$roleId = (Get-MgDirectoryRole -Filter "DisplayName eq 'Global Administrator'").Id
$userList = Get-MgDirectoryRoleMember -DirectoryRoleId $roleId

foreach ($user in $userList) {
    $upn = (Get-MgUser -UserId $user.id).UserPrincipalName
    $memberList.Add($upn)
}
$memberList