Is it possible to manually export dynamic group to include membership rules?

Question

Is it possible to manually export dynamic group to include membership rules?

Pender Sessoms 30

I have exhausted Google and I have a tenant with approximately 90 dynamically assigned groups that I need to export to a csv file that will show their membership rules. So far, I am unable to do so. Please can anyone shed some light before I individually go through each group (copy and paste) each membership rule for all 90 groups? Please and thank you.

-new cloud analyst (intern)

Pender Sessoms 30 Reputation points

2023-07-10T12:00:35.6466667+00:00

Again, without ever being formally trained on powershell. This was the output i was getting. I am connected to the environment though. I am still learning powershell and CLI so if the answer is obvious i apologize, but I can't seem to figure out how to get this to work.
Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-07-11T03:30:50.61+00:00

@Pender Sessoms

Let's work on this issue offline.

Please send us an email on azcommunity [at] microsoft [dot] com with Sub - Attn: Sandeg and following details in the email body:

Link to this thread/post

We can connect offline and discuss further on this.
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2023-07-31T17:26:23.3133333+00:00

@Pender Sessoms

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

2 answers

Your answer

Pender Sessoms 30 Reputation points

2023-07-10T12:00:35.6466667+00:00

Again, without ever being formally trained on powershell. This was the output i was getting. I am connected to the environment though. I am still learning powershell and CLI so if the answer is obvious i apologize, but I can't seem to figure out how to get this to work.
Sandeep G-MSFT 20,906 Reputation points Microsoft Employee Moderator

2023-07-11T03:30:50.61+00:00

@Pender Sessoms

Let's work on this issue offline.

Please send us an email on azcommunity [at] microsoft [dot] com with Sub - Attn: Sandeg and following details in the email body:

Link to this thread/post

We can connect offline and discuss further on this.
JamesTran-MSFT 36,911 Reputation points Microsoft Employee Moderator

2023-07-31T17:26:23.3133333+00:00

@Pender Sessoms

I wanted to check in and see if you had any other questions or if you were able to resolve this issue?

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.

If the information helped address your question, please Accept the answer. This will help us and also improve searchability for others in the community who might be researching similar information.

Answer 1

Vasil Michev 119.6K MVP Volunteer Moderator

Are those Azure AD groups, or Exchange dynamic DGs? Assuming the former, you can use the following:

Get-MgGroup -Filter "groupTypes/any(x:x eq 'dynamicmembership')" | select Id,DisplayName, MembershipRule | Export-CSV -nti "blabla.csv"

For Exchange Online DDGs, use the Get-DynamicDistributionGroup cmdlet instead:

Get-DynamicDistributionGroup | select Name,RecipientFilter | Export-csv -NTI "blabla.csv"

Pender Sessoms 30 Reputation points

2023-07-08T15:56:33.1033333+00:00

They are Azure AD Dynamic Groups. I couldn't get that to work either. :/ I have Read permissions only to this environment.
Vasil Michev 119.6K Reputation points MVP Volunteer Moderator

2023-07-09T13:37:49.1833333+00:00

Care to be more specific, what exactly doesn't work? Read permissions are all you need to run the above samples, but you might require consent first, if no one has used the Graph SDK for PowerShell in your tenant.

Answer 2

@Pender Sessoms

Thank you for posting your question in Microsoft Q&A.

I have tried this in my lab and I got the correct report for all dynamic groups with there membership rules.

This cannot be performed via GUI.

However, you can use PowerShell to get the output with all dynamic groups with there membership rules.

Follow below steps,

Open Windows PowerShell as administrator.
Run command "Import-Module Microsoft.Graph.Groups"
Once you install the module you can run command Connect-MgGraph -Scopes "group.read.all". Enter the Global admin credentials if it prompts for credentials.
Run command "Get-MgGroup -All | Where-Object GroupTypes -EQ "DynamicMembership" | select -Property GroupTypes,DisplayName,MembershipRule | Export-Csv c:\testchecker.csv"

NOTE: You can change the path at the end of the command for exporting the output.

Above command will pull all Dynamic group types along with their displayname and MembershipRule.

Output will be exported to csv.

Let me know if you have any further questions on this.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

Is it possible to manually export dynamic group to include membership rules?

2 answers

Your answer