How to get guest users list from Azure AD

Question

Hi

I have multiple domains in my tenant. I want to get a list of guest users. Please see below example of account, what kind of guest users I want to get.

rambo.jan_test.com#EXT#@abc.onmicrosoft.comm (This is UPN)

I have number of accounts like this in my tenant. Please provide me a powershell cmdlet or script. thanks

Regards

Answer 1

All guest users in Azure AD will have UPN is the same format that you have mentioned above (rambo.jan_test.com#EXT#@abc.onmicrosoft.com).

However, you can also use below powershell command to get the desired output that you are looking for,

Get-AzureADUser -All $true | where {$_.userPrincipalName -like "#EXT#"}

To run above command, you will need Azure AD module installed.

If you already have Azure AD module you can follow below steps to get the output,

• Run command "connect-AzureAD"
• Enter the Global admin credentials.
• Now run command Get-AzureADUser -All $true | where {$_.userPrincipalName -like "#EXT#"}
• You can also run command Get-AzureADUser -All $true -filter "usertype eq 'guest'"

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

You can use the following PowerShell cmdlet to get a list of guest users in your tenant:

sql

Copy code

Get-AzureADUser -Filter "userType eq 'Guest'" | Select-Object DisplayName, UserPrincipalName

This cmdlet filters the Azure AD users with the userType equals to Guest, and selects the DisplayName and UserPrincipalName properties to be displayed in the output.

Answer 3

You can use the following PowerShell script to retrieve a list of guest users in your tenant:

sql

Copy code

Connect-AzureAD

$guestUsers = Get-AzureADMSInvitation -Filter "invitedUserDisplayName ne ''" | Where-Object {$_.InvitedUserEmailAddress -like "#EXT#@"}

$guestUsers | Select-Object DisplayName,InvitedUserDisplayName,InvitedUserEmailAddress

This script first connects to Azure Active Directory using the Connect-AzureAD cmdlet. Then, it retrieves a list of all MS invitations using the Get-AzureADMSInvitation cmdlet and filters the list to only include guests users by checking if the InvitedUserEmailAddress property contains the string #EXT#@. Finally, it selects the DisplayName, InvitedUserDisplayName, and InvitedUserEmailAddress properties for each guest user and displays the results.

Answer 4

I wanted to do the same simple task using the Microsoft Graph SDK, however i cannot find any usable info regarding the topic.

The AzureAD module is being deprecated, and will sees to function on 31 March 2024.

Answer 5

Using https://intune.microsoft.com shouldn't there be a simple way to filter and display only the Guest type of account and then export to XLSX file. I've sent feedback to Microsoft Service Health team.