Microsoft Graph API - Get members from cloud only groups

[Sebastian Mellebeek]

Hey all, 

Was wondering if someone has an idea or even the solution to get the members of cloud only groups in Azure AD. 

I achieved showing cloud only groups via:

groups?$select=id,displayName,description,mailNickname,onPremisesSamAccountName,onPremisesSyncEnabled,securityIdentifier&$filter=onPremisesSyncEnabled eq null&$count=true

Header contains ConsistencyLevel = eventual as described in (https://learn.microsoft.com/en-us/graph/aad-advanced-queries?tabs=http) 

But for now I can't find a working solution to only show the members for these groups. Someone any idea how to build the query? 

With kind regards,

Sebastian Mellebeek

[#2]

I will share with you a PowerShell script that retrieve all members for cloud only groups and export it to a CSV file.

$Groups = Get-AzureADGroup -All $true | Where-Object {$_.GroupType -eq "Unified"}
$Results = @()
foreach ($Group in $Groups) {
if ($Group.SecurityEnabled -eq $false) {
$Members = Get-AzureADGroupMember -ObjectId $Group.ObjectId
$Results += $Members | Select-Object @{Name="GroupName"; Expression={$Group.DisplayName}}, DisplayName, UserPrincipalName
}
}
$Results | Export-Csv -Path "CloudOnlyGroupsMembers.csv" -NoTypeInformation

[#3]

Hey ElieKarkafy,

Thanks for the script.

The thing is that i'm really searching on how to establish this with an ODATA query in Microsoft Graph Explorer.

Any idea on that part?

With kind regards,
Sebastian Mellebeek

[#4]

@Sebastian Mellebeek try this and let me know if it works

1. Go to the Microsoft Graph Explorer website: https://developer.microsoft.com/en-us/graph/graph-explorer

2. Sign in with your Microsoft account.

3. Select the "v1.0" version of the Microsoft Graph API.

4. In the query box, enter the following URL:

   https://graph.microsoft.com/v1.0/groups?$filter=groupTypes/any(c:c+eq+'Unified')

   This will retrieve all groups in your organization that are cloud-only (i.e., have the "Unified" group type).

5. Click the "Run query" button.

6. If there are many groups, you may need to use the $top query parameter to limit the number of results returned. For example, you can add ?$top=50 to the end of the URL to return only the first 50 groups.

7. For each group returned in the response, you can retrieve the members by adding /members to the end of the group's ID in the id field. For example:

   https://graph.microsoft.com/v1.0/groups/{group-id}/members

   Replace {group-id} with the ID of the group for which you want to retrieve the members.

8. If a group has many members, you may need to use the $top query parameter to limit the number of results returned. For example, you can add ?$top=50 to the end of the URL to return only the first 50 members.

9. If a group has more members than the $top parameter specified, you can use the $skip query parameter to retrieve the next page of results. For example, you can add ?$top=50&$skip=50 to the end of the URL to retrieve the second page of results.

[#5]

Hey @eliekarkafy,

Thanks again for helping. 

As of step 7, this is a new query, right? Or can we combine the query from step 4 and step 7 into one query? Because in the end, that would be the outcome that I need. 

With kind regards,

Sebastian Mellebeek