{"id":54,"date":"2025-04-09T09:49:35","date_gmt":"2025-04-09T09:49:35","guid":{"rendered":"https:\/\/burlage.it\/?p=54"},"modified":"2025-04-18T09:45:20","modified_gmt":"2025-04-18T09:45:20","slug":"mggraph-group","status":"publish","type":"post","link":"https:\/\/burlage.it\/index.php\/2025\/04\/09\/mggraph-group\/","title":{"rendered":"MgGraph – Group"},"content":{"rendered":"\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span><\/path><\/path><\/svg><\/span>
# MgGraph - Connect to Entra AD with limited scope (example)<\/span><\/span>\nConnect-MgGraph<\/span> -Scopes <\/span>"Directory.Read.All"<\/span>, <\/span>"Group.Read.All"<\/span>, <\/span>"GroupMember.ReadWrite.All"<\/span><\/span>\n<\/span>\n# MgGraph - Search for a group by name (examples)<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"DisplayName eq 'GroupName'"<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"startswith(DisplayName,'GroupNa')"<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"DisplayName eq 'GroupNameA' or DisplayName eq 'GroupNameB'"<\/span><\/span>\nGet-MgGroup<\/span> -Search <\/span>'Description:servergroup'<\/span> -ConsistencyLevel eventual<\/span><\/span>\n<\/span>\n# MgGraph - Collect the groupID of a group<\/span><\/span>\n$groupName<\/span> = <\/span>'GroupName'<\/span><\/span>\n$groupId<\/span> = <\/span>Get-MgGroup<\/span> -Filter <\/span>"DisplayName eq '<\/span>$groupName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty Id<\/span><\/span>\n$groupId<\/span><\/span>\n<\/span>\n# MgGraph - Display the number of members of a group<\/span><\/span>\n$groupName<\/span> = <\/span>'GroupName'<\/span><\/span>\n$groupObject<\/span> = <\/span>Get-MgGroup<\/span> -Filter <\/span>"displayName eq '<\/span>$groupName<\/span>'"<\/span><\/span>\n$groupId<\/span> = <\/span>$groupObject<\/span>.Id<\/span><\/span>\nGet-MgGroupMemberCount<\/span> -GroupId <\/span>$groupId<\/span> -ConsistencyLevel eventual<\/span><\/span>\n<\/span>\n# MgGraph - Lookup a group by DisplayName<\/span><\/span>\n$displayName<\/span> = <\/span>'Group Name'<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"displayName eq '<\/span>$groupName<\/span>'"<\/span><\/span>\n<\/span>\n# MgGraph - Lookup a group by DisplayName and show all properties<\/span><\/span>\n$displayName<\/span> = <\/span>'Group Name'<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"displayName eq '<\/span>$groupName<\/span>'"<\/span> | <\/span>Format-List<\/span><\/span>\n<\/span>\n# MgGraph - List the Entra applications assigned to a group<\/span><\/span>\n$displayName<\/span> = <\/span>'Group Name'<\/span><\/span>\n$groupId<\/span> = (<\/span>Get-MgGroup<\/span> -Filter <\/span>"DisplayName eq '<\/span>$displayName<\/span>'"<\/span>).Id<\/span><\/span>\n$assignedApplications<\/span> = <\/span>Get-MgGroupAppRoleAssignment<\/span> -GroupId <\/span>$groupId<\/span> | <\/span>Sort-Object<\/span> ResourceDisplayName <\/span><\/span>\n$assignedApplications<\/span> | <\/span>Format-Table<\/span> ResourceDisplayName,Id, AppRoleId, PrincipalDisplayName -AutoSize<\/span><\/span>\n<\/span>\n# MgGraph - Count the members of an Entra group<\/span><\/span>\n$groupName<\/span> = <\/span>'Group Name'<\/span><\/span>\n$groupId<\/span> = <\/span>Get-MgGroup<\/span> -Filter <\/span>"DisplayName eq '<\/span>$groupName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty Id<\/span><\/span>\n(<\/span>Get-MgGroupMember<\/span> -GroupId <\/span>$groupId<\/span> -All).Count<\/span><\/span>\n<\/span>\n# MgGraph - Display deleted groups<\/span><\/span>\nGet-MgDirectoryDeletedItemAsGroup<\/span> -All<\/span><\/span>\n<\/span>\n# MgGraph - Display all dynamic groups<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"GroupTypes\/any(x:x eq 'DynamicMembership')"<\/span><\/span>\n<\/span>\n# MgGraph - Display all dynamic groups sorted on creation time<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"GroupTypes\/any(x:x eq 'DynamicMembership')"<\/span> | <\/span>Select-Object<\/span> -Property DisplayName,CreatedDateTime | <\/span>Sort-Object<\/span> -Property CreatedDateTime<\/span><\/span>\n<\/span>\n# MgGraph - Display all groups created between now and one year ago<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"CreatedDateTime ge <\/span>$(<\/span>(<\/span>Get-Date<\/span>).AddYears(<\/span>-1<\/span>).ToString(<\/span>"s"<\/span>)<\/span>)<\/span>Z"<\/span> -ConsistencyLevel eventual -CountVariable Count<\/span><\/span>\n<\/span>\n# MgGraph - Display all groups created between now and one year ago and that start with a specific string <\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"CreatedDateTime ge <\/span>$(<\/span>(<\/span>Get-Date<\/span>).AddYears(<\/span>-1<\/span>).ToString(<\/span>"s"<\/span>)<\/span>)<\/span>Z and startsWith(Displayname,'xx-yyy-')"<\/span> -ConsistencyLevel eventual -CountVariable Count<\/span><\/span>\n<\/span>\n# MgGraph - Display all details of a group<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"DisplayName eq 'GroupName'"<\/span> | <\/span>Format-List<\/span><\/span>\nGet-MgGroup<\/span> -GroupId <\/span>'00000000-0000-0000-0000-000000000000'<\/span> | <\/span>Format-List<\/span><\/span>\n<\/span>\n# MgGraph - Display the membershiprule of a dynamic group<\/span><\/span>\n(<\/span>Get-MgGroup<\/span> -Filter <\/span>"DisplayName eq 'GroupName'"<\/span>).MemberShipRule<\/span><\/span>\n<\/span>\n# MgGraph - Display the membershiprule of a dynamic group<\/span><\/span>\n$groupName<\/span> = <\/span>'GroupName'<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"DisplayName eq '<\/span>$groupName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -Property <\/span>'MemberShipRule'<\/span><\/span>\n<\/span>\n# MgGraph - Display the membershiprule of a dynamic group<\/span><\/span>\n$groupName<\/span> = <\/span>'GroupName'<\/span><\/span>\nGet-MgGroup<\/span> -Filter <\/span>"DisplayName eq '<\/span>$groupName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'MemberShipRule'<\/span><\/span>\n<\/span>\n# MgGroup - Display deleted groups in Entra and display the output in a seperate window<\/span><\/span>\nConnect-MgGraph<\/span> -Scopes Directory.Read.All, Group.ReadWrite.All<\/span><\/span>\n[<\/span>array<\/span>]<\/span>$DeletedGroups<\/span> = <\/span>Get-MgDirectoryDeletedItemAsGroup<\/span> -All<\/span><\/span>\nIf<\/span> (<\/span>$DeletedGroups<\/span>.count<\/span> -eq <\/span>0<\/span>) { <\/span>Write-Host<\/span> <\/span>"No recoverable groups can be found - exiting"<\/span>; <\/span>break<\/span>}<\/span><\/span>\n$Report<\/span> = [<\/span>System.Collections.Generic.List<\/span>[<\/span>Object<\/span>]]::new(); <\/span>$Now<\/span> = <\/span>Get-Date<\/span><\/span>\nForEach<\/span> (<\/span>$Group<\/span> <\/span>in<\/span> <\/span>$DeletedGroups<\/span>) {<\/span><\/span>\n     [<\/span>datetime<\/span>]<\/span>$DeletedDate<\/span> = <\/span>$Group<\/span>.deletedDateTime<\/span><\/span>\n     <\/span>$PermanentRemovalDue<\/span> = <\/span>Get-Date<\/span>(<\/span>$DeletedDate<\/span>).AddDays(<\/span>30<\/span>)<\/span><\/span>\n     <\/span>$TimeUntilRemoval<\/span> = <\/span>$PermanentRemovalDue<\/span> - <\/span>$Now<\/span><\/span>\n     <\/span>$ReportLine<\/span> = [<\/span>PSCustomObject<\/span>]<\/span>@<\/span>{ <\/span><\/span>\n          <\/span>Group<\/span>                = <\/span>$Group<\/span>.displayName<\/span><\/span>\n          <\/span>Id<\/span>                   = <\/span>$Group<\/span>.id<\/span><\/span>\n          <\/span>Deleted<\/span>              = <\/span>$Group<\/span>.deletedDateTime<\/span><\/span>\n          <\/span>PermanentDeleteOn<\/span>    = <\/span>Get-Date<\/span>(<\/span>$PermanentRemovalDue<\/span>) -format g<\/span><\/span>\n          <\/span>DaysRemaining<\/span>        = <\/span>$TimeUntilRemoval<\/span>.Days<\/span> } <\/span><\/span>\n       <\/span>$Report<\/span>.Add<\/span>(<\/span>$ReportLine<\/span>) <\/span><\/span>\n}<\/span><\/span>\n$Report<\/span> | <\/span>Sort-Object<\/span> {<\/span>$_<\/span>.PermanentDeleteOn<\/span> -as [<\/span>datetime<\/span>]} | <\/span>Out-GridView<\/span><\/span>\n<\/span>\n# MgGraph - Display all members of a group by DisplayName and UPN, sorted by DisplayName and count the total<\/span><\/span>\n$groupDisplayName<\/span> = <\/span>'entraGroupName'<\/span><\/span>\n$groupId<\/span> = <\/span>Get-MgGroup<\/span> -Filter <\/span>"DisplayName eq '<\/span>$groupDisplayName<\/span>'"<\/span> | <\/span>Select-Object<\/span> -ExpandProperty <\/span>'Id'<\/span><\/span>\n$allMembers<\/span> = <\/span>Get-MgGroupMember<\/span> -GroupId <\/span>$groupId<\/span> -All<\/span><\/span>\n$allMemberDisplayName<\/span> = <\/span>foreach<\/span> (<\/span>$member<\/span> <\/span>in<\/span> <\/span>$allMembers<\/span>) {<\/span>Get-MgUser<\/span> -UserId <\/span>$member<\/span>.Id<\/span> | <\/span>Select-Object<\/span> -Property <\/span>'Id'<\/span>,<\/span>'DisplayName'<\/span>,<\/span>'UserPrincipalName'<\/span>} <\/span><\/span>\n$allMemberDisplayName<\/span> | <\/span>Sort-Object<\/span> -Property <\/span>'DisplayName'<\/span><\/span>\n$allMemberDisplayName<\/span>.Count<\/span><\/span>\n<\/span>\n<\/span><\/code><\/pre><\/div>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-54","post","type-post","status-publish","format-standard","hentry","category-powershell"],"_links":{"self":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts\/54","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/comments?post=54"}],"version-history":[{"count":12,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts\/54\/revisions"}],"predecessor-version":[{"id":107,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/posts\/54\/revisions\/107"}],"wp:attachment":[{"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/media?parent=54"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/categories?post=54"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/burlage.it\/index.php\/wp-json\/wp\/v2\/tags?post=54"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}