Forum Discussion

Chad_Scott's avatar
Chad_Scott
Copper Contributor
Mar 08, 2023

Set-UnifiedGroup -EmailAddresses does not update Azure AD proxyAddresses property

Here's how to recreate the problem:

 

1. Set-UnifiedGroup -Identity XYZ -EmailAddresses @{ Add = 'additional address' }

2. (Get-UnifiedGroup -Identity XYZ).EmailAddresses and confirm additional address is displayed

3. GET https://graph.microsoft.com/v1.0/groups/XYZ and confirm proxyAddresses does not contain the new address

4 Replies

  • chad512's avatar
    chad512
    Copper Contributor

    I can't find a changelog to explain it, but as of today I'm seeing the Entra proxyAddresses property updated when making a change via Set-UnifiedGroup.

  • jakobnotseth's avatar
    jakobnotseth
    Copper Contributor

    Having the same issue. Doing School Data Sync cleanup and changing emails on groups as part of the cleanup process. We absolutely need somewhere to set emails properly on groups, this is not working as it should at all.

  • Two points. First, IIRC only the primary SMTP is synchronized to other parts of the service (which is the reason why DBEB doesn't support secondary aliases for Groups). The workaround is to use the PrimarySMTPAddress instead, and change it twice to have the new alias recorded as secondary:

    Set-UnifiedGroup blabla -PrimarySmtpAddress 'email address removed for privacy reasons'
    Set-UnifiedGroup blabla -PrimarySmtpAddress 'email address removed for privacy reasons'

    The other thing that comes to mind is that the process is not always synchronous and when the initial "signal" fails, it can take up to 24h to sync. If you are in a hurry, use the method above.
    • Chad_Scott's avatar
      Chad_Scott
      Copper Contributor

      VasilMichev Thanks for the information. If I understand you correctly, you'd use Set-UnifiedGroup to set the secondary email address first and then the use it again to set the primary email address second, thus bumping the previously set address to a secondary position. I can't do that with the architecture of our code, where the ordering of operations is different.

       

      Is this a known bug? I just doesn't seem reasonable that this property wouldn't sync to Azure AD and be available via Graph.

Resources