Merge pull request #269824 from shellyhaverkamp/smh-fhir-objids

Find identity obj IDs in Azure API for FHIR

Author: v-shils

articles/healthcare-apis/azure-api-for-fhir/find-identity-object-ids.md

@@ -1,76 +1,86 @@
 ---
-title: Find identity object IDs for authentication - Azure API for FHIR
-description: This article explains how to locate the identity object IDs needed to configure authentication for Azure API for FHIR
+title: Find identity object IDs for authentication in Azure API for FHIR
+description: This article explains how to locate the identity object IDs needed to configure authentication for Azure API for FHIR.
 services: healthcare-apis
 author: expekesheth
 ms.service: healthcare-apis
 ms.subservice: fhir
 ms.custom: has-azure-ad-ps-ref
 ms.topic: conceptual
-ms.date: 9/27/2023
+ms.date: 3/21/2024
 ms.author: kesheth
 ---
 
-# Find identity object IDs for authentication configuration for Azure API for FHIR
+# Find identity object IDs for authentication configuration in Azure API for FHIR
 
 [!INCLUDE [retirement banner](../includes/healthcare-apis-azure-api-fhir-retirement.md)]
 
-In this article, you'll learn how to find identity object IDs needed when configuring the Azure API for FHIR to [use an external or secondary Active Directory tenant](configure-local-rbac.md) for data plane.
+In this article, learn how to find the identity object IDs needed to configure the Azure API for FHIR service to [use an external or secondary Active Directory tenant](configure-local-rbac.md) for data plane.
 
 ## Find user object ID
 
-If you have a user with user name `[email protected]`, you can locate the users `ObjectId` using the following PowerShell command:
+If you have a user with user name `[email protected]`, you can locate the user's `ObjectId` by using a Microsoft Graph PowerShell command or the Azure Command-Line Interface (CLI).
 
-```azurepowershell-interactive
-$(Get-AzureADUser -Filter "UserPrincipalName eq '[email protected]'").ObjectId
+#### [PowerShell](#tab/powershell)
+
+```powershell
+$(Get-MgUser -Filter "UserPrincipalName eq '[email protected]'").Id
 ```
 
-or you can use the Azure CLI:
+#### [Azure CLI](#tab/command-line)
 
 ```azurecli-interactive
 az ad user show --id [email protected] --query id --out tsv
 ```
 
+---
+
 ## Find service principal object ID
 
-Suppose you've registered a [service client app](register-service-azure-ad-client-app.md) and you would like to allow this service client to access the Azure API for FHIR, you can find the object ID for the client service principal with the following PowerShell command:
+Suppose you registered a [service client app](register-service-azure-ad-client-app.md) and you want to allow this service client to access the Azure API for FHIR. Find the object ID for the client service principal with a Microsoft Graph PowerShell command or the Azure CLI.
 
-```azurepowershell-interactive
-$(Get-AzureADServicePrincipal -Filter "AppId eq 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'").ObjectId
+#### [PowerShell](#tab/powershell)
+
+```powershell
+$(Get-MgServicePrincipal -Filter "AppId eq 'XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX'").Id
 ```
 
-where `XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX` is the service client application ID. Alternatively, you can use the `DisplayName` of the service client:
+Where `XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX` is the service client application ID. Alternatively, you can use the `DisplayName` of the service client:
 
-```azurepowershell-interactive
-$(Get-AzureADServicePrincipal -Filter "DisplayName eq 'testapp'").ObjectId
+```powershell
+$(Get-MgServicePrincipal -Filter "DisplayName eq 'testapp'").Id
 ```
 
-If you're using the Azure CLI, you can use:
+#### [Azure CLI](#tab/command-line)
 
 ```azurecli-interactive
 az ad sp show --id XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX --query id --out tsv
 ```
 
+---
+
 ## Find a security group object ID
 
-If you would like to locate the object ID of a security group, you can use the following PowerShell command:
+If you would like to locate the object ID of a security group, you can use a Microsoft Graph PowerShell command or the Azure CLI.
+
+#### [PowerShell](#tab/powershell)
 
-```azurepowershell-interactive
-$(Get-AzureADGroup -Filter "DisplayName eq 'mygroup'").ObjectId
+```powershell
+$(Get-MgGroup -Filter "DisplayName eq 'mygroup'").Id
 ```
+
 Where `mygroup` is the name of the group you're interested in.
 
-If you're using the Azure CLI, you can use:
+#### [Azure CLI](#tab/command-line)
 
 ```azurecli-interactive
 az ad group show --group "mygroup" --query id --out tsv
 ```
 
+---
+
 ## Next steps
 
-In this article, you've learned how to find identity object IDs needed to configure the Azure API for FHIR to use an external or secondary Microsoft Entra tenant. Next read about how to use the object IDs to configure local RBAC settings:
- 
->[!div class="nextstepaction"]
->[Configure local RBAC settings](configure-local-rbac.md)
+[Configure local RBAC settings](configure-local-rbac.md)
 
-FHIR® is a registered trademark of [HL7](https://hl7.org/fhir/) and is used with the permission of HL7.
+[!INCLUDE [FHIR trademark statement](../includes/healthcare-apis-fhir-trademark.md)]