Microsoft.Graph Entra ID user list with licenses using Get-MgUser

supercrisz 

Hi, Christaan.

You can't pull those long-text descriptive names that come from the Azure AD portal via Graph.

As you've already noted, the best you can get as the SkuId and the associated short code.

Microsoft does provide a table of skus and their associated descriptive name (linked below), however, the only approach this lends itself to is saving that table as your own CSV and uses that as a dictionary from which you can look up the AssignedLicenses (from the attribute of the same name on the Azure AD object).

• Product names and service plan identifiers for licensing - Microsoft Entra ID | Microsoft Learn

I've taken your script and adapted it to look up the sku code (part number), but I have not gone that extra step to incorporate the long descriptive names. You should readily be able to adapt the example to do that if you prefer to.

$CsvFile = "$env:USERPROFILE\users.csv";

#region Prestage the known SKUs for this tenant. Doing this removes the performance overhead from making an extra call per user to Get-MgUserLicenseDetail.
# Endpoint documentation: https://learn.microsoft.com/en-us/graph/api/subscribedsku-list?view=graph-rest-beta&tabs=http
$SubscribedSkus = [System.Collections.Generic.Dictionary[[string],[string]]]::new();

(Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/beta/subscribedSkus").value |
    ForEach-Object {
        $Sku = [pscustomobject] $_;

        $SubscribedSkus.Add($Sku.skuId, $Sku.skuPartNumber);
    }
#endregion

#region Fetch the users, lookup any matching SKUs and export the results to CSV.
Get-MgBetaUser -All -Property 'AccountEnabled','City','Country','Department','DisplayName','JobTitle','UserPrincipalName','CreatedDateTime','SignInActivity', 'AssignedLicenses' |
    ForEach-Object {
        $Summary = [pscustomobject] @{
            AccountEnabled = $_.AccountEnabled;
            City = $_.City;
            Country = $_.Country;
            Department = $_.Department;
            DisplayName = $_.DisplayName;
            JobTitle = $_.JobTitle;
            UserPrincipalName = $_.UserPrincipalName;
            CreatedDateTime = $_.CreatedDateTime;
            LastInteractiveSignInDate = $_.SignInActivity.LastSignInDateTime;
            LastNonInteractiveSignInDate = $_.SignInActivity.LastNonInteractiveSignInDateTime;
            Licences = [System.Collections.Generic.List[string]]::new();
        }

        foreach ($Entry in $_.AssignedLicenses) {
            if ($SubscribedSkus.ContainsKey($Entry.SkuId))
            {
                # Add the friendly name if it's known.
                $Summary.Licences.Add($SubscribedSkus[$Entry.SkuId]);
            }
            else
            {
                # Otherwise add the SkuId GUID. Note, not all SkuIds in Microsoft licencing have a friendly entry in the subscribedSkus endpoint, meaning this is an expected scenario.
                $Summary.Licences.Add($Entry.SkuId);
            }
        }

        # You wouldn't normally do this next statement, but it's sadly necessary to avoid Export-Csv botching the list.
        $Summary.Licences = $Summary.Licences -join "`n";

        $Summary;
    } |
        Export-Csv -NoTypeInformation -Path $CsvFile;
#endregion

Cheers,

Lain