Forum Discussion

Ottovw's avatar
Ottovw
Copper Contributor
Feb 06, 2020
Solved

Extension Attributes on groups

Hello,

 

We are using extension attributes on users. I can't not find any clear answer how to set an extension attribute we just created to a Azure AD Group. Is this even possible because i can't find any PowerShell command just like the one for adding extension on Users (Set-AzureADUserExtension).  

De documentation about extension attributes are here: https://docs.microsoft.com/en-us/powershell/azure/active-directory/using-extension-attributes-sample?view=azureadps-2.0https://docs.microsoft.com/en-us/powershell/azure/active-directory/using-extension-attributes-sample?view=azureadps-2.0

 

IIt literally says this: 

You can attach an extension attribute to the following object types:

  • users
  • groups
  • ....

For example, i have just created a test extension with TargetObjects 'Groups'. But how do we add this extension on a group? 

 

For users you can find the extension attributes by using powershell command: 
Get-AzureADUser -ObjectId "xxx-xxx-xxx-xx" | select -ExpandProperty extensionproperty

Is there a way to show the extension attributes on groups? 

  • Ottovw's avatar
    Ottovw
    Oct 08, 2020

    mailerman2080 GiulianoDeLuca 

     

    Not through PowerShell but I do have tested this with the use of Graph API and extensibility-schema for groups. I think this is the only way but it only work on O365 groups and when extra data is inserted, the data is not visible true PowerShell. 

    https://docs.microsoft.com/en-us/graph/extensibility-schema-groups

3 Replies

    • Ottovw's avatar
      Ottovw
      Copper Contributor

      mailerman2080 GiulianoDeLuca 

       

      Not through PowerShell but I do have tested this with the use of Graph API and extensibility-schema for groups. I think this is the only way but it only work on O365 groups and when extra data is inserted, the data is not visible true PowerShell. 

      https://docs.microsoft.com/en-us/graph/extensibility-schema-groups

    • GiulianoDeLuca's avatar
      GiulianoDeLuca
      MVP

      mailerman2080 same here, I guess is not possible to do it via Powershell there should be another way, hopefully, someone else will clarify that

Resources