script to fetch Azure AD Applications and associated user and groups details in the tenant

[sivapratap kurapati]

Hi Team,

Please help in fetching user and group details for all the registered application in Azure Tenant to csv.

I was successful in listing out the applications using Get-AzureADApplication. But unable to get the user and group related properties for the listed applications.

$_.AppRoles gives the display name as "User" but not "xyz@contoso.com" Please advise.

Regards,

Sivapratap 

[#2]

Your best option is to use the Get-AzureADServicePrincipal cmdlet - Get-AzureADApplication only returns applications your company has registered. As for the permissions/user assignments, Get-AzureADServicePrincipalOAuth2PermissionGrant is a good start, then you can add the missing information via other cmdlets. I have a sample script for this here: https://gallery.technet.microsoft.com/Azure-AD-Integrated-44658ec2?redir=0