Az 16.0.0

Gallery Module for Azure PowerShell: https://www.powershellgallery.com/packages/Az/16.0.0

To install Az from the PowerShell Gallery, run the following command:

Install-Module -Name Az -Repository PSGallery -Force

To update from an older version of Az, run the following command:

Update-Module -Name Az

Docker images

• mcr.microsoft.com/azure-powershell:latest
• mcr.microsoft.com/azure-powershell:alpine-3.21
• mcr.microsoft.com/azure-powershell:16.0.0-alpine-3.21
• mcr.microsoft.com/azure-powershell:alpine-3.22
• mcr.microsoft.com/azure-powershell:16.0.0-alpine-3.22
• mcr.microsoft.com/azure-powershell:debian-12
• mcr.microsoft.com/azure-powershell:16.0.0-debian-12
• mcr.microsoft.com/azure-powershell:azurelinux-3.0
• mcr.microsoft.com/azure-powershell:16.0.0-azurelinux-3.0
• mcr.microsoft.com/azure-powershell:azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:16.0.0-azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:ubuntu-24.04
• mcr.microsoft.com/azure-powershell:16.0.0-ubuntu-24.04

Release Notes

Az.Accounts 5.5.0

• Added ChangeSafety Support
• Upgraded 'Azure.Identity' to 1.17.2.

Az.Aks 7.2.0

• Added ChangeSafety Support

Az.AnalysisServices 1.3.0

• Added ChangeSafety Support

Az.ApiManagement 4.2.0

• Added ChangeSafety Support

Az.Attestation 3.1.0

• Added ChangeSafety Support

Az.Automation 1.12.0

• Added ChangeSafety Support

Az.Batch 4.1.0

• Added ChangeSafety Support

Az.Billing 2.3.0

• Added ChangeSafety Support

Az.CloudService 3.0.0

• Upgraded code generator

Az.CognitiveServices 1.17.0

• Added ChangeSafety Support

Az.Compute 11.6.0

• Added ChangeSafety Support
• Added '-ZonalPlatformFaultDomainAlignMode' to 'New-AzVmssConfig', 'New-AzVmss' (SimpleParameterSet), and 'Update-AzVmss' cmdlets.
• Added '-OsDiskStorageFaultDomainAlignment' parameter to 'Set-AzVmssStorageProfile' cmdlet.
• Added '-StorageFaultDomainAlignment' parameter to 'Add-AzVmssDataDisk', 'Set-AzVMOSDisk', and 'Add-AzVMDataDisk' cmdlets.
• Fixed 'Set-AzVMRunCommand' and 'Set-AzVmssVMRunCommand' to skip blank lines when processing local script files via '-ScriptLocalPath', preventing invalid ';;' syntax errors in shell scripts.
• Added '-InstantAccess' parameter to 'New-AzRestorePointCollection' and 'Update-AzRestorePointCollection' cmdlets.
• Added '-InstantAccessDurationInMinutes' parameter to 'New-AzRestorePoint' cmdlet.

Az.ContainerInstance 5.0.0

• Upgraded code generator

Az.ContainerRegistry 5.1.0

• Added ChangeSafety Support

Az.CosmosDB 1.21.0

• Added ChangeSafety Support

Az.DataBoxEdge 1.3.0

• Added ChangeSafety Support

Az.Databricks 2.0.0

• Upgraded code generator

Az.DataFactory 1.20.0

• Added ChangeSafety Support

Az.DataLakeAnalytics 1.2.0

• Added ChangeSafety Support

Az.DataLakeStore 1.6.0

• Added ChangeSafety Support

Az.DataMigration 1.1.0

• Added ChangeSafety Support
• Preannounced breaking changes

Az.DataProtection 3.0.0

• Changed retention rule to require '-Name Default_OperationalStore'
• Added 'RenameTo' to restore request
• Upgraded code generator
• Added Cosmos DB protection support

Az.DataShare 1.2.0

• Added ChangeSafety Support

Az.DesktopVirtualization 6.0.0

• Upgraded API version to 2025-10-10
• Added MultiplePersistent enum value to HostPool property loadBalancerType.
• Fixed 'New-AzWvdRegistrationInfo', 'Remove-AzWvdRegistrationInfo'.

Az.DevTestLabs 1.2.0

• Added ChangeSafety Support

Az.Dns 2.1.0

• Added ChangeSafety Support

Az.DnsResolver 2.0.0

• Added 'Invoke-AzDnsResolverBulkDnsResolverDomainList'
• Upgraded code generator
• Removed 'ActionBlockResponseCode' from DNS security rule cmdlets
• Made 'DnsResolverDomainList', 'Domain' parameters optional

Az.EventHub 5.5.0

• Added ChangeSafety Support

Az.FileShare 1.0.0

• General availability for module Az.FileShare

Az.FrontDoor 2.2.0

• Upgraded API version to 2025-11-01
• Hid Network Experiment cmdlets
• Fixed 'New/Remove-AzFrontDoorWafPolicy' 'UriFormatException'

Az.Functions 5.0.0

• Upgraded code generator
• Validated SKU in 'Update-AzFunctionApp'
• Fixed cloud portability using dynamic 'StorageEndpointSuffix' [#29034]
• Fixed 'Update-AzFunctionApp'

Az.HDInsight 6.5.0

• Added ChangeSafety Support

Az.IotHub 2.9.0

• Added ChangeSafety Support

Az.KeyVault 6.5.0

• Added ChangeSafety Support
• Added support for creating AES 'oct-HSM' keys via 'Add-AzKeyVaultKey -KeyType oct -Destination HSM'.
• Fixed 'New-AzKeyVault' 'RequestDisallowedByPolicy' error.
• Removed certificate-backed items from 'Get-AzKeyVaultKey'/'Get-AzKeyVaultSecret'; use 'Get-AzKeyVaultCertificate' instead [#26217].

Az.Kusto 3.0.0

• Upgraded code generator

Az.LoadTesting 2.0.0

• Upgraded code generator

Az.LogicApp 1.7.0

• Added ChangeSafety Support

Az.MachineLearning 1.3.0

• Added ChangeSafety Support

Az.MachineLearningServices 2.0.0

• Upgraded code generator

Az.Maintenance 1.6.0

• Added ChangeSafety Support

Az.ManagedServices 4.0.0

• Upgraded code generator

Az.Migrate 3.0.0

• Upgraded code generator

Az.Monitor 8.0.0

• Added ChangeSafety Support
• Updated MonitorWorkspace module to API 2025-10-03 with CRUD cmdlets for issues, alerts, resources, investigation, visualization, metrics containers, 'Set-AzMonitorWorkspace'
• Upgraded Pipelines API to GA 2026-04-01: added '-DistributionMaxInstancesPerHost', '-ExecutionPlacementConstraint', '-TlsConfiguration'; removed '-NetworkingConfiguration', UDP receiver, 'TcpUrl', 'JsonArrayMapperKey', 'SourceFieldName', 'SyslogProtocol', 'DestinationField*'; expanded parameter sets

Az.MySql 2.0.0

• Upgraded code generator

Az.NetAppFiles 1.3.0

• Added ChangeSafety Support

Az.Network 8.0.0

• Added ChangeSafety Support
• Changed 'UserAssignedIdentityId' type to string[]

Az.NetworkCloud 3.0.0

• Upgraded API version to 2025-09-01
• Preannounced breaking changes.

Az.NotificationHubs 1.3.0

• Added ChangeSafety Support

Az.OperationalInsights 3.4.0

• Added ChangeSafety Support

Az.PolicyInsights 2.0.0

• Changed output types: 'PSAttestation'/'PSPolicyMetadata'/'PSRemediation' renamed; flattened 'SystemData'
• Renamed 'ResourceTags'/'ManagementGroupIds' to singular forms
• Flattened 'Get-AzPolicyStateSummary', remediation output properties
• Changed 'Start/Stop-AzPolicyRemediation' default behavior (added '-NoWait')

Az.PowerBIEmbedded 2.2.0

• Added ChangeSafety Support

Az.PrivateDns 1.3.0

• Added ChangeSafety Support

Az.RecoveryServices 7.12.0

• Added ChangeSafety Support
• Added soft delete support for Azure File share backup items ('Undo-AzRecoveryServicesBackupItemDeletion' 'Get-AzRecoveryServicesBackupItem -DeleteState SoftDeleted')

Az.RedisCache 1.12.0

• Added ChangeSafety Support

Az.RedisEnterpriseCache 2.0.0

• Upgraded code generator

Az.ResourceGraph 1.3.0

• Added ChangeSafety Support

Az.ResourceMover 2.0.0

• Upgraded code generator

Az.Resources 10.0.0

• Added ChangeSafety Support
• Updated deployment stack cmdlets to '2025-07-01' API; added '-ResourcesWithoutDeleteSupport', '-ValidationLevel'
• Fixed 'Set-AzRoleAssignment' unable to delete conditions
• Updated Policy.Autorest to 2025-03-01: added '-Expand', '-EnforcementMode', '-Version'; removed '-BackwardCompatible'
• Fixed 'Get-AzRoleDefinition' null ABAC 'Condition' [#29058] [#25940]
• [Breaking Change] Role definition cmdlets use 'Permissions' array with per-permission conditions

Az.Security 1.9.0

• Added ChangeSafety Support

Az.SecurityInsights 4.0.0

• Upgraded code generator

Az.ServiceBus 4.2.0

• Added ChangeSafety Support

Az.ServiceFabric 5.2.0

• Added ChangeSafety Support
• Added 'Enable-AzServiceFabricManagedClusterMaintenanceWindow', 'Get-AzServiceFabricManagedClusterMaintenanceWindowStatus'

Az.SignalR 3.0.0

• Added ChangeSafety Support
• Upgraded code generator

Az.Sql 7.0.0

• Added ChangeSafety Support
• Removed 'EnableSoftDelete' from 'New-AzSqlServer', 'Set-AzSqlServer'. Used 'SoftDeleteRetentionDays' instead: setting 'SoftDeleteRetentionDays'.
• Reverted 'the support for UAMI authentication in Data Sync cmdlets'

Az.SqlVirtualMachine 3.0.0

• Upgraded code generator

Az.StackHCI 3.0.0

• Upgraded code generator

Az.StackHCIVM 2.0.0

• Fixed missing export of 'Save-AzStackHCIVMVirtualMachine', 'Suspend-AzStackHCIVMVirtualMachine'

Az.Storage 9.7.0

• Added ChangeSafety Support
• Updated prompt in 'Start-AzStorageAccountMigration'
• Added MockRun TriggerType in 'New/Update-AzStorageTaskAssignment'
• Added Smart access tier, AllowedCopyScope in 'New/Set-AzStorageAccount'
• Added static website config in 'Update-AzStorageBlobServiceProperty'
• Added tags replication in 'Set-AzStorageObjectReplicationPolicy'

Az.StorageAction 2.0.0

• Internal code generation updated.

Az.StorageMover 2.1.0

• Upgraded API version to 2025...

Az.Storage v9.6.3-preview

https://www.powershellgallery.com/packages/Az.Storage/9.6.3-preview

• Supported advanced platform metrics for storage accounts

Az.DesktopVirtualization v5.4.8-preview

https://www.powershellgallery.com/packages/Az.DesktopVirtualization/5.4.8-preview

• Fixed registration info command failures under Azure Policy constraints

Az.Sql v6.6.0-preview

https://www.powershellgallery.com/packages/Az.Sql/6.6.0-preview

• Added support for User Assigned Managed Identity (UAMI) authentication in Data Sync cmdlets (New-AzSqlSyncGroup, Update-AzSqlSyncGroup, New-AzSqlSyncMember, Update-AzSqlSyncMember)

Az.Accounts v5.4.1-preview

https://www.powershellgallery.com/packages/Az.Accounts/5.4.1-preview

• Upgraded Azure.Identity dependency from 1.13.0 to 1.17.2.

Az.Sql v6.5.0

https://www.powershellgallery.com/packages/Az.Sql/6.5.0

• Added support for User Assigned Managed Identity (UAMI) authentication in Data Sync cmdlets (New-AzSqlSyncGroup, Update-AzSqlSyncGroup, New-AzSqlSyncMember, Update-AzSqlSyncMember)

Az.Storage v9.6.2-preview

https://www.powershellgallery.com/packages/Az.Storage/9.6.2-preview

• Supported cross tenant user delegation SAS token generation with OAuth-based storage contexts

Az 15.6.1

Gallery Module for Azure PowerShell: https://www.powershellgallery.com/packages/Az/15.6.1

To install Az from the PowerShell Gallery, run the following command:

Install-Module -Name Az -Repository PSGallery -Force

To update from an older version of Az, run the following command:

Update-Module -Name Az

Release Notes

15.6.1 - May 2026

Az.DataProtection 2.10.1

• Fixed non-ASCII U+2013 characters failed module import in WindowsPowerShell

Az.Kusto 2.4.1

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229

SHA256 Hashes of the release artifacts

• Az-Cmdlets-15.6.1.40772.tar.gz
  • 9215FA7ACD0F53D9A471D1A44FD6618B7C37DF23547103A636D59F091C49E3A8

Az.Kusto v2.4.1

https://www.powershellgallery.com/packages/Az.Kusto/2.4.1

• Preannounced breaking changes. Please refer to https://go.microsoft.com/fwlink/?linkid=2333229

Az 15.6.0

Gallery Module for Azure PowerShell: https://www.powershellgallery.com/packages/Az/15.6.0

To install Az from the PowerShell Gallery, run the following command:

Install-Module -Name Az -Repository PSGallery -Force

To update from an older version of Az, run the following command:

Update-Module -Name Az

Docker images

• mcr.microsoft.com/azure-powershell:latest
• mcr.microsoft.com/azure-powershell:alpine-3.23
• mcr.microsoft.com/azure-powershell:15.6.0-alpine-3.23
• mcr.microsoft.com/azure-powershell:debian-12
• mcr.microsoft.com/azure-powershell:15.6.0-debian-12
• mcr.microsoft.com/azure-powershell:azurelinux-3.0
• mcr.microsoft.com/azure-powershell:15.6.0-azurelinux-3.0
• mcr.microsoft.com/azure-powershell:azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:15.6.0-azurelinux-3.0-arm64
• mcr.microsoft.com/azure-powershell:ubuntu-24.04
• mcr.microsoft.com/azure-powershell:15.6.0-ubuntu-24.04

Release Notes

15.6.0 - May 2026

Az.Accounts 5.4.0

• Updated the 'System.Memory' dependency to v4.6.3 to support the Storage SDK update.
• Added 'AzureAppConfigurationEndpointSuffix' and 'AzureAppConfigurationEndpointResourceId' to 'Add-AzEnvironment' and 'Set-AzEnvironment'
  • Users can now configure Azure App Configuration endpoints when adding or updating custom environments

Az.Aks 7.1.2

• Set 'useAADAuth' to 'true' by default in the omsagent addon profile when enabling the Monitoring addon via 'Enable-AzAksAddOn' and 'New-AzAksCluster'
  • This ensures compatibility with the latest Azure Monitor agent which requires AAD authentication

Az.AppConfiguration 2.1.0

• Upgraded API version from 2022-05-01 to 2024-06-01
• Added support for App Configuration store replicas
  • Added 'New-AzAppConfigurationReplica'
  • Added 'Get-AzAppConfigurationReplica'
  • Added 'Remove-AzAppConfigurationReplica'
• Added 'DataPlaneProxyAuthenticationMode', 'DataPlaneProxyPrivateLinkDelegation', and 'DefaultKeyValueRevisionRetentionPeriodInSecond' to 'New-AzAppConfigurationStore' and 'Update-AzAppConfigurationStore'
• Removed 'SoftDeleteRetentionInDay' from 'Update-AzAppConfigurationStore' as it is a create-only property
• Added data plane snapshot cmdlets for Azure App Configuration
  • Added 'New-AzAppConfigurationSnapshot'
  • Added 'Get-AzAppConfigurationSnapshot'
  • Added 'Update-AzAppConfigurationSnapshot'
  • Added 'Test-AzAppConfigurationSnapshot'
• Added 'Snapshot' to 'Get-AzAppConfigurationKeyValue' to support retrieving key-values by snapshot name
• Added 'Get-AzAppConfigurationOperationDetail' to retrieve data plane operation details

Az.Cdn 6.0.2

• Announced upcoming breaking changes for all 'AzCdnEdgeAction' cmdlets and the 'SubjectAlternativeName' parameter of 'New-AzCdnSecretCustomerCertificateParametersObject', which will be removed in a future release.

Az.Compute 11.5.0

• Added '-Feature' parameter to 'Update-AzGalleryImageDefinition' to allow updating existing gallery image features (such as DiskControllerTypes, SecurityType, IsAcceleratedNetwork, and IsHibernate). Each feature supports a 'StartsAtVersion' property to specify the minimum gallery image version that supports the updated feature.
• Added '-AllowUpdateImage' parameter to 'Update-AzGalleryImageDefinition'. Must be set to true when using the '-Feature' parameter to update gallery image features.
• Added managed identity support for Azure Compute Galleries
  • 'New-AzGallery': Added '-EnableSystemAssignedIdentity' and '-UserAssignedIdentity' to assign managed identities at creation time
  • 'Update-AzGallery': Added '-EnableSystemAssignedIdentity' and '-UserAssignedIdentity' to add managed identities to an existing gallery. '-UserAssignedIdentity' appends to existing identities
  • 'Update-AzGallery': Added '-DisableSystemAssignedIdentity' to remove system-assigned managed identity
  • 'Update-AzGallery': Added '-RemoveUserAssignedIdentity' accepting a list of identity resource IDs to remove specific user-assigned identities, or 'All' to remove all user-assigned identities
  • 'Get-AzGallery': Now returns managed identity details in the 'Identity' property
• Compute ComputeRP related cmdlets will now use 2025-11-01 version of the ComputeRP API.

Az.Databricks 1.11.1

• Added breaking change announcement for 'Update-AzDatabricksVNetPeering': parameters 'AllowForwardedTraffic', 'AllowGatewayTransit', 'AllowVirtualNetworkAccess' and 'UseRemoteGateway' will change from Boolean to SwitchParameter

Az.DataProtection 2.10.0

• Added auto-protection support for Blob and ADLS (Azure Data Lake Storage) backup in 'New-AzDataProtectionBackupConfigurationClientObject'
  • Added '-AutoProtection' switch parameter to enable auto-protection
  • Added '-AutoProtectionExclusionRule' parameter to specify exclusion rules for auto-protection
• Updated API version from 2025-09-01 to 2026-03-01

Az.DesktopVirtualization 5.4.7

• Added preannouncement for breaking changes in Az.DesktopVirtualization 6.0.0
  • Parameter 'Tag' will be removed from the Update cmdlet of Application and Desktop.

Az.DnsResolver 1.2.4

• Fixed misleading breaking change warning on 'New-AzDnsResolverDomainList' that incorrectly stated the cmdlet was being deprecated
  • The cmdlet displayed 'The cmdlet is being deprecated. There will be no replacement for it.' when the intent was only to announce that the 'Domain' parameter is no longer mandatory
  • 'New-AzDnsResolverDomainList' are now able to create domain lists without domains.

Az.Migrate 2.12.1

• Fixed bugs in 'Initialize-AzMigrateLocalReplicationInfrastructure'
  • Added early Azure login validation with a clear error message when user is not logged in
  • Removed unnecessary caller identity resolution
  • Added cache storage account validations to reject unsupported SKU tiers and disabled public network access
• Updated 'New-AzMigrateLocalServerReplication'
  • Added storage path health validation before initiating replication

Az.NetAppFiles 1.2.0

• Updated to API version 2026-01-01
• Added new cmdlets for the Buckets resource (alias 'Anf*' for Azure NetApp Files):
  • 'Get-AzNetAppFilesBucket'
  • 'New-AzNetAppFilesBucket'
  • 'Update-AzNetAppFilesBucket'
  • 'Remove-AzNetAppFilesBucket'
  • 'New-AzNetAppFilesBucketCredential'
  • 'Set-AzNetAppFilesBucketAkvCredential'
  • 'Update-AzNetAppFilesBucketCertificate'
• Added new cmdlets for the Caches resource (alias 'Anf*' for Azure NetApp Files):
  • 'Get-AzNetAppFilesCache'
  • 'New-AzNetAppFilesCache'
  • 'Update-AzNetAppFilesCache'
  • 'Remove-AzNetAppFilesCache'
  • 'Get-AzNetAppFilesCachePeeringPassphrase'
  • 'Set-AzNetAppFilesCachePool'
  • 'Reset-AzNetAppFilesCacheSmbPassword'
• 'Start-AzNetAppFilesPeerExternalCluster' now returns the cluster peering command and passphrase as a 'PSClusterPeerCommandResponse' (was previously discarded)
• Surfaced new replication properties on 'PSNetAppFilesReplicationObject' ('(Get-AzNetAppFilesVolume).DataProtection.Replication'):
  • 'ExternalReplicationSetupStatus', 'ExternalReplicationSetupInfo' - external replication setup state machine + next-step guidance
  • 'MirrorState', 'RelationshipStatus' - current mirror state and transfer status

Az.Network 7.27.0

• Added support to associate a DDoS custom policy with a Load Balancer frontend IP configuration.
  • Added the '-DdosCustomPolicyId' parameter to 'New-AzLoadBalancerFrontendIpConfig', 'Add-AzLoadBalancerFrontendIpConfig', and 'Set-AzLoadBalancerFrontendIpConfig'.
  • Added the '-RemoveDdosCustomPolicy' switch to 'Set-AzLoadBalancerFrontendIpConfig'.

Az.PolicyInsights 1.7.4

• Added Breaking Change notifications to many of the cmdlets in Az.PolicyInsights.

Az.PostgreSql 1.4.1

• 'Az.PostgreSql' will be retired in an upcoming release.
  • To continue managing Azure Database for PostgreSQL resources, move to 'Az.PostgreSqlFlexibleServer'.
  • When the replacement module is released, it will be available to install from https://www.powershellgallery.com/packages/Az.PostgreSqlFlexibleServer

Az.ResourceMover 1.3.2

• Updated preannouncement breaking changes date to May 2026.

Az.Resources 9.1.0

• Made 'Remove-AzDenyAssignment' honor '-Confirm:False' and idempotent when no matching deny assignment exists. The redundant '-Force' switch was removed (the cmdlet relies on the standard 'SupportsShouldProcess'/'ConfirmImpact' pattern).
• Improved error messages for role assignment and role definition operations to include the underlying service error code and message instead of just the HTTP status code. [#19605] [#19374]
• Added '-PrincipalId' and '-PrincipalType' to 'New-AzDenyAssignment' to support per-principal deny assignments targeting a specific User or ServicePrincipal, in addition to the existing Everyone mode.
• Added 'New-AzDenyAssignment' for creating user-assigned deny assignments using the '2024-07-01-preview' API. Deny assignments allow denying specific write, delete, and action operations to all principals at a given scope while excluding specified principals.
• Added 'Remove-AzDenyAssignment' for removing user-assigned deny assignments by ID, name and scope, or pipeline input.
• Regenerated Authorization Management SDK from '2024-07-01-preview' swagger specification to include deny assignment create and delete operations.
• Fixed 'New-AzDeployment' not reporting nested ARM (Azure Resource Manager) error details (e.g. 'KeyVaultParameterReferenceSecretRetrieveFailed') when a 'MultipleErrorsOccurred' validation failure is returned. Previously, the inner errors were silently dropped and only the generic top-level error was shown. [#28308]

Az.SecurityInsights 3.2.2

• Updated preannouncement breaking changes date to May 2026.

Az.Sql 6.4.2

• ...