# Count assigned E3 licenses
(Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq (Get-MgSubscribedSku | Where SkuPartNumber -eq 'SPE_E3').SkuId)" -ConsistencyLevel eventual).Count
 
# Assign E5 license to a user
$E5Sku = (Get-MgSubscribedSku | Where SkuPartNumber -eq 'SPE_E5').SkuId
Set-MgUserLicense -UserId "[email protected]" -AddLicenses @{SkuId = $E5Sku} -RemoveLicenses @()
 
# List users with Copilot
Get-MgUser -Filter "assignedLicenses/any(x:x/skuId eq (Get-MgSubscribedSku | Where SkuPartNumber -eq 'Microsoft_365_Copilot').SkuId)" -ConsistencyLevel eventual

Get-MgUser -Filter "AccountEnabled eq true" -Property DisplayName,UserPrincipalName,Department,JobTitle,CreatedDateTime |
Export-Csv -Path "ActiveUsers.csv" -NoTypeInformation -Encoding UTF8

$Groups = Get-MgGroup -All
$Results = foreach ($Group in $Groups) {
    $Members = Get-MgGroupMember -GroupId $Group.Id
    foreach ($Member in $Members) {
        [PSCustomObject]@{
            GroupName = $Group.DisplayName
            GroupId = $Group.Id
            MemberName = (Get-MgUser -UserId $Member.Id).DisplayName
            MemberUPN = (Get-MgUser -UserId $Member.Id).UserPrincipalName
        }
    }
}
$Results | Export-Csv -Path "GroupsAndMembers.csv" -NoTypeInformation -Encoding UTF8

$Users = Get-MgUser -All -Property DisplayName,UserPrincipalName,AssignedLicenses
$Results = foreach ($User in $Users) {
    $Licenses = $User.AssignedLicenses | ForEach-Object {
        (Get-MgSubscribedSku | Where-Object SkuId -eq $_.SkuId).SkuPartNumber
    }
    [PSCustomObject]@{
        DisplayName = $User.DisplayName
        UserPrincipalName = $User.UserPrincipalName
        Licenses = $Licenses -join "; "
    }
}
$Results | Export-Csv -Path "UsersLicenses.csv" -NoTypeInformation -Encoding UTF8

Get-MgUser -All -Property DisplayName,UserPrincipalName,SignInActivity |
Select-Object DisplayName, UserPrincipalName, @{Name="LastSignIn";Expression={$_.SignInActivity.LastSignInDateTime}} |
Export-Csv -Path "LastSignIns.csv" -NoTypeInformation -Encoding UTF8

# Microsoft Graph installation and connection
if (!(Get-Module -ListAvailable -Name Microsoft.Graph)) {
    Write-Host "Installing Microsoft.Graph module..." -ForegroundColor Green
    Install-Module -Name Microsoft.Graph -Force -Scope CurrentUser
}
 
# Install ImportExcel module for CSV processing
if (!(Get-Module -ListAvailable -Name ImportExcel)) {
    Write-Host "Installing ImportExcel module..." -ForegroundColor Green
    Install-Module -Name ImportExcel -Force -Scope CurrentUser
}
 
# Connect with required permissions
Write-Host "Connecting to Microsoft Graph..." -ForegroundColor Green
Connect-MgGraph -Scopes "User.ReadWrite.All", "Group.ReadWrite.All"
 
# General configuration (adapt to your environment)
$csvPath = "C:\temp\NewUsers.csv"
$logPath = "C:\temp\user_creation_log.txt"
$mainDomain = "mycompany.com"
$defaultDepartment = "IT"
$defaultCountry = "United States"
$usageLocation = "US"
 
# Create log file
New-Item -Path $logPath -ItemType File -Force
Write-Host "Log file created: $logPath" -ForegroundColor Yellow
 
# Import CSV data (expected columns: FirstName, LastName, JobTitle, Department)
if (Test-Path $csvPath) {
    $users = Import-Csv -Path $csvPath -Delimiter ";"
    Write-Host "CSV file imported: $($users.Count) users found" -ForegroundColor Green
} else {
    Write-Host "CSV file not found: $csvPath" -ForegroundColor Red
    exit
}
 
# Function to generate a secure password
function New-RandomPassword {
    param([int]$Length = 12)
    $chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!@#$%"
    return -join ((1..$Length) | ForEach-Object { $chars[(Get-Random -Maximum $chars.Length)] })
}
 
# User creation loop
foreach ($user in $users) {
    # Check required fields
    if ([string]::IsNullOrWhiteSpace($user.FirstName) -or [string]::IsNullOrWhiteSpace($user.LastName)) {
        $message = "ERROR: First name or last name missing for user on line $($users.IndexOf($user) + 2)"
        Write-Host $message -ForegroundColor Red
        Add-Content -Path $logPath -Value "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') - $message"
        continue
    }
 
    # Generate user information
    $firstName = $user.FirstName.Trim()
    $lastName = $user.LastName.Trim()
    $displayName = "$firstName $lastName"
    $mailNickname = "$($firstName.ToLower()).$($lastName.ToLower())"
    $email = "$mailNickname@$mainDomain"
    $password = New-RandomPassword
    $jobTitle = if (![string]::IsNullOrWhiteSpace($user.JobTitle)) { $user.JobTitle } else { "User" }
    $department = if (![string]::IsNullOrWhiteSpace($user.Department)) { $user.Department } else { $defaultDepartment }
 
    Write-Host "Creating user: $displayName ($email)" -ForegroundColor Cyan
 
    try {
        # Check if user already exists
        $existingUser = Get-MgUser -Filter "UserPrincipalName eq '$email'" -ErrorAction SilentlyContinue
        if ($existingUser) {
            $message = "WARNING: User $email already exists"
            Write-Host $message -ForegroundColor Yellow
            Add-Content -Path $logPath -Value "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') - $message"
            continue
        }
 
        # Create user
        $passwordProfile = @{
            Password = $password
            ForceChangePasswordNextSignIn = $true
        }
 
        $newUser = @{
            DisplayName = $displayName
            UserPrincipalName = $email
            MailNickname = $mailNickname
            GivenName = $firstName
            Surname = $lastName
            JobTitle = $jobTitle
            Department = $department
            Country = $defaultCountry
            UsageLocation = $usageLocation
            PasswordProfile = $passwordProfile
            AccountEnabled = $true
        }
 
        $userCreated = New-MgUser @newUser
 
        # Success log with password
        $successMessage = "SUCCESS: User $displayName created | Email: $email | Password: $password"
        Write-Host "User created successfully" -ForegroundColor Green
        Add-Content -Path $logPath -Value "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') - $successMessage"
 
        # Pause to avoid rate limiting
        Start-Sleep -Milliseconds 500
 
    } catch {
        # Error log
        $errorMessage = "ERROR: Failed to create $displayName ($email) - $($_.Exception.Message)"
        Write-Host "Error during creation: $($_.Exception.Message)" -ForegroundColor Red
        Add-Content -Path $logPath -Value "$(Get-Date -Format 'yyyy-MM-dd HH:mm:ss') - $errorMessage"
    }
}
 
Write-Host "`n=== SUMMARY ===" -ForegroundColor Magenta
Write-Host "Script completed. Check the log file for details: $logPath" -ForegroundColor Yellow
Write-Host "To assign licenses, use: Set-MgUserLicense" -ForegroundColor Yellow
 
# Disconnect
Disconnect-MgGraph

FirstName;LastName;JobTitle;Department
John;Doe;System Administrator;IT
Jane;Smith;Developer;IT
Peter;Johnson;Project Manager;Marketing
Sarah;Williams;Accountant;Finance

# View available licenses
Get-MgSubscribedSku
 
# Set location (required)
Update-MgUser -UserId "[email protected]" -UsageLocation "US"
 
# Assign a license
$SkuId = (Get-MgSubscribedSku | Where-Object {$_.SkuPartNumber -eq "SPE_E3"}).SkuId
Set-MgUserLicense -UserId "[email protected]" -AddLicenses @(@{SkuId=$SkuId}) -RemoveLicenses @()