Getting user's country in PowerShell

Question

Getting user's country in PowerShell

Christine VACHER 21

I am able to get someone's country like this

https://graph.microsoft.com/v1.0/users/<userid>?$select=Country

or this

https://graph.microsoft.com/v1.0/users/<userid>/Country

I don't get the same information for the same users in Powershell. The Country property does not seem to be set.

PS> $User = Get-MgUser -UserId $SameUserid  
PS> $User.Country  
 *-> nothing returned <-*

6 answers

Your answer

Answer 1

Michael Taylor 60,161

It works using the URL because you are specifically asking for it. If you leave off the $select=country or /Country then you don't get it. That is what Get-MgUser is calling. However that cmdlet let's you specify additional properties to retrieve via the -Property argument. So ask for the country as well. Perhaps something like this:

   Get-MgUser -UserId $SameUserId -Property Country

Answer 2

Christine VACHER 21

I am getting the first part of your answer.

Unfortunately, Country does not seem to be a property that can be asked for the way you suggest.
The only properties that I am able to retrieve with -Property are Id DisplayName Mail UserPrincipalName and UserType. Not even Surname (which I can get from the $User object of my question).

Even more puzzling: This guy here is readily getting the Country property:
2022-02-17_11h45_45.jpg.webp

Any idea?

Michael Taylor 60,161 Reputation points

2022-10-21T15:52:27.877+00:00
What is shown to you on the screen isn't necessarily all the data that is returned, just a summary. Put the results of the query into a variable and then access the Country info.

$user = Get-MgUser ... $user.Country

Christine VACHER 21

PS C:\Users\Christine\...\WindowsPowerShell\Scripts> $User = Get-MgUser -UserId tch¿¿¿y@f¿¿¿e.org  
PS C:\Users\Christine\...\WindowsPowerShell\Scripts> $User.Country  
PS C:\Users\Christine\...\WindowsPowerShell\Scripts> $User | Format-List  

AboutMe                               :   
[...]  
CalendarGroups                        :  
CalendarView                          :  
Calendars                             :  
Chats                                 :  
City                                  :  
CompanyName                           :  
ConsentProvidedForMinor               :  
ContactFolders                        :  
Contacts                              :  
Country                               :  
[...]  
GivenName                             : T¿¿¿m  
HireDate                              :  
Id                                    : 4f¿-¿-¿eb  
[...]  
JobTitle                              : A¿¿¿s  
[...]  
Mail                                  : tch¿¿¿y@f¿¿¿e.org  
[...]  
MemberOf                              :  
Messages                              :  
MobilePhone                           : 5¿¿¿¿¿¿¿¿2  
[...]  
State                                 :  
StreetAddress                         :  
Surname                               : ch¿¿¿y  
[...]  
UserPrincipalName                     : tch¿¿¿y@f¿¿¿e.org  
[...]

Michael Taylor 60,161 Reputation points

2022-10-24T15:52:43.727+00:00

Given that it is returning Country my running theories include: lack of permissions, value not set or not being expanded. It appears Country is a simple string but using the -ExpandProperty(sic) might help. Otherwise I think the issue might be with your permissions or the user. You could try a different user and see what happens.

Answer 3

Zehui Yao_MSFT 5,876

Hi @Christine VACHER , here are some examples of my success running locally, the same is used in the documentation.
I think fl is a kind of shortcut to Format-List in what you're sharing. Hope it can help you.

Get-MgUser -UserId <string>| Format-List  ID, DisplayName, Mail, UserPrincipalName, Country

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Christine VACHER 21 Reputation points

2022-10-22T17:30:46.507+00:00
Hi @Zehui Yao_MSFT ,
I am getting the same results as you. No Country is returned despite being available in Graph:

https://graph.microsoft.com/v1.0/users/4f¿¿¿eb/Country

>

{ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users('4f¿¿¿eb')/country", "value": "Canada" }

Zehui Yao_MSFT 5,876

Hi @Christine VACHER , this seems to be a synchronization issue with the powershell, I now use the following script to get the value, hopefully it will also work for you:

  $clientID = 'client id'       
  $secretKey = 'client secret'      
  $tenantID = 'tenant id'                   
  $authUrl = "https://login.microsoftonline.com/" + $tenantID + "/oauth2/v2.0/token/"      
  $body = @{       
      "scope" = "https://graph.microsoft.com/.default";       
      "grant_type" = "client_credentials";       
      "client_id" = $ClientID       
      "client_secret" = $secretKey       
  }   
          
  $authToken = Invoke-RestMethod -Uri $authUrl –Method POST -Body $body                   
  $url = "https://graph.microsoft.com/beta/users/{userId}"     
  $headers = @{       
  "Authorization" = "Bearer $($authToken.access_token)"   
   "Content-type"  = "application/json"       
  }       
  $response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get   
  Write-Output $response.country

Zehui Yao_MSFT 5,876 Reputation points

2022-10-26T01:47:06.323+00:00

Hi @Christine VACHER , would you mind providing any update on the status of this issue?
Christine VACHER 21 Reputation points

2022-10-30T22:43:27.517+00:00

Hi @Zehui Yao_MSFT , sorry for the delay. For some reason, I am not able to submit a reply.
Christine VACHER 21 Reputation points

2022-10-30T22:44:45.113+00:00
Hope this one works ...

Resort to plain REST, applications and OAuth were the things I wanted to avoid by using the PowerShell module in the first place. Anyway...
Below is a code for getting canadians in the organization.
It relies on application authentification and a secret string written in the script, both of which being not suitable.
I wish to force the user to authenticate itself. (Is it was is called "delegation"?)

$clientID = '72d¿¿¿f859' $secretKey = 'gm¿¿¿Dv' $tenantID = '75¿¿¿de' $authUrl = "https://login.microsoftonline.com/" + $tenantID + "/oauth2/v2.0/token/" $body = @{ "scope" = "https://graph.microsoft.com/.default"; "grant_type" = "client_credentials"; "client_id" = $ClientID "client_secret" = $secretKey } $authToken = Invoke-RestMethod -Uri $authUrl –Method POST -Body $body

Christine VACHER 21

Resort to plain REST, applications and OAuth were the things I wanted to avoid by using the PowerShell module in the first place. Anyway...
Below is my code for getting canadians in a given group.
It relies on application authentification and a secret string written in the script, both of which being not suitable.
I wish to force the user to authenticate itself. (Is it was is called "delegation"?)

$clientID = '72d¿¿¿f859'       
$secretKey = 'gm¿¿¿Dv'  
$tenantID = '75¿¿¿de'                   
$authUrl = "https://login.microsoftonline.com/" + $tenantID + "/oauth2/v2.0/token/"      
$body = @{       
    "scope"         = "https://graph.microsoft.com/.default";       
    "grant_type"    = "client_credentials";       
    "client_id"     = $ClientID       
    "client_secret" = $secretKey       
}   
$authToken = Invoke-RestMethod -Uri $authUrl –Method POST -Body $body  

$url = 'https://graph.microsoft.com/v1.0/groups/ce816¿¿¿8092/transitiveMembers?$count=true&$filter=Country%20eq%20''Canada''&$select=createdDateTime,displayName,userPrincipalName,jobTitle'  
$headers = @{       
    "Authorization" = "Bearer $($authToken.access_token)"   
    "ConsistencyLevel" = "eventual" # Necessary for $select  
}       
$response = Invoke-RestMethod -Uri $url -Headers $headers -Method Get   
$response.value | Select-Object * -ExcludeProperty '@odata.type' | Format-Table

Zehui Yao_MSFT 5,876 Reputation points

2022-10-31T03:37:34.703+00:00

Hi @Christine VACHER , I found in the test just now today that as long as you select the beta version the command can return the value normally!
Zehui Yao_MSFT 5,876 Reputation points

2022-11-01T10:31:49.313+00:00

Hi @Christine VACHER , Is the above information useful?

Answer 4

Thank you @Zehui Yao_MSFT .
This worked for me (getting canadian team members):

Get-InstalledModule Microsoft.Graph  
  
Select-MgProfile -Name beta  
  
Connect-MgGraph -Scopes Group.Read.All, User.Read  
$OurTeam = Get-MgGroup -Filter "DisplayName eq 'Our Team'"  
$OurTeamMembersId = Get-MgGroupTransitiveMember -GroupId $OurTeam.Id -Property Id  
# One cannot filter Get-MgUser on Country since it is not a default property  
$OurTeamMembersId | ForEach-Object { Get-MgUser -UserId $_.Id } | Where-Object Country -eq 'Canada' | Select-Object DisplayName,UserPrincipalName

Answer 5

Andreea Ciocoiu 0

So I used @Zehui Yao_MSFT answer, it shows only the property, not what is stored in it. As in: User's image

In Azure Portal I have as followed: User's image

and User's image

Any ideas why it won't work or if there are other ways?

PS: permissions are set as recommended by Microsoft on API

Share via

Getting user's country in PowerShell

6 answers

Your answer