Microsoft Secure Tech Accelerator
Apr 03 2024, 07:00 AM - 11:00 AM (PDT)
Microsoft Tech Community

Inconsistent Date Values and Attribute Names

Silver Contributor

When I use the Graph Explorer https://graph.microsoft.com/v1.0/groups/{ID} it returns  "createdDateTime": "2016-03-17T13:37:42Z",

When I use Get-UnifiedGroup -Identity ID -IncludeAllProperties it returns

WhenCreated : 8/9/2018 12:40:08 PM.

 

How come what appears to be the same attribute, has 2 different names and 2 different values for the same group?

4 Replies

I'm guessing it's because they represent different objects - the "parent" object in AAD and the workload-specific representation in ExO. In particular, if you have some very old ones, you might see that they all have a very similar creation dates in ExO, corresponding to the time around which Microsoft changed their recipient type, while the AAD value is a very different one.

Is there a powershell module/cmdlet that returns the same data as the Graph?

The AAD one, via Get-AzureADMSGroup.

thanks, so what is the difference between that one and Get-AzureADGroup?

 

I found a note stating that "Going forward, all cmdlets that call Microsoft Graph will have “MS” in their cmdlet names, as in “Get-AzureADMSGroup”. The cmdlets that call Azure AD Graph will not change, so there is also a “Get-AzureADGroup” cmdlet." 

 

Unfortunately, the docs at https://docs.microsoft.com/en-us/powershell/module/azuread/Get-AzureADMSGroup?view=azureadps-2.0 don't make any mention of this. These modules and their associated documentation are still very confusing to me.