[Announcement] Azure AD Graph API retirement: action required if you're on an old Azure CLI release

Aperta
  • Qualcosa non va?
#34,178 1 commento 0 reazioni 1 assegnatario Vedi su GitHub

I maintainer di solito rispondono entro 1 giorno

@isra-fel ci sta già lavorando.

Dal 7/10/2026.

Valutazione

Questa issue non è ancora stata valutata.

Descrizione

AAD Auto-Assign feature-request

Summary

Azure AD Graph API (the legacy graph.windows.net API
entered its retirement process in September 2024, with the general shutdown completed on
July 1, 2025. Azure CLI completed its migration away from Azure AD Graph well ahead of that
deadline — az ad commands have been backed by Microsoft Graph since Azure CLI 2.37.0.
If you are running a current version of Azure CLI, no action is required.

This issue is for customers still running an old, unsupported release that may still depend on
Azure AD Graph.

Why you're seeing this now

Because Azure CLI is a Microsoft first-party client, its Azure AD Graph application identity has
remained available temporarily, purely to give very old releases a transition buffer. This does
not mean those old releases are supported — they have long been out of maintenance. Beginning
after October 6, 2026, the Microsoft Entra team will progressively disable this remaining
legacy access over a two-month period. Old Azure CLI releases that still depend on Azure AD Graph
may stop working at any point during this phased shutdown.

Am I affected?

You are only affected if you are running Azure CLI older than 2.37.0. Check your version with:

az version

If you're on 2.37.0 or later, you are already using Microsoft Graph and this does not apply to you.

What to do

If you're on an old release:

  1. Upgrade to the latest Azure CLI as soon as possible:
    Install or update Azure CLI
  2. Check CI/CD pipeline images, automation runbooks, and any pinned/containerized environments —
    these are the most common places an old version silently persists even after developer
    machines have been updated.
  3. If you have custom scripts or tooling calling graph.windows.net directly (independent of
    az), those will need to migrate to Microsoft Graph directly regardless of your Azure CLI
    version.

Questions or issues

If you believe you're on a current Azure CLI release but are still seeing Azure AD Graph-related
authentication errors, please comment on this issue or open a new issue with your az version
output and the exact error message.

Lingua principale
Python
Stelle
4.7k
Fork
3.5k
Merge medio
4g 14h
PR unite (30g)
92

Preparare l'ambiente

Apri in Codespaces

Avvia il container di sviluppo del progetto nel browser, con il tuo account GitHub.

Come iniziare

  1. Leggi tutta la issue e poi la guida ai contributi del progetto.
  2. Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
  3. Fai un fork del repository e lavora su un branch.
  4. Apri una pull request che faccia riferimento al numero della issue.

Altre issue di Azure/azure-cli

Tutte le issue di Azure/azure-cli

Issue simili

Altre issue su Python

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.