List of users in Azure AD

Question

List of users in Azure AD

GuestGuivenchi 105

Good day,

I manage a cloud-based Active Directory.

I want to download a list of users with specific columns, when downloading the .cvs file it doesn't contain the columns I chose.

How can I get the data I need?

Thank you.

Peter Kayode 506 Reputation points

2023-07-28T20:49:11.08+00:00

@GuestGuivenchi

# Install the AzureAD module if you haven't already

Install-Module AzureAD

# Import the AzureAD module

Import-Module AzureAD

# Connect to Azure AD

$credential = Get-Credential
Connect-AzureAD -Credential $credential

# Get the users and select the properties you need

$users = Get-AzureADUser | Select-Object UserPrincipalName, DisplayName, Department, JobTitle

# Export the users to a CSV file

$users | Export-Csv -Path "C:\temp\AzureADUsers.csv" -NoTypeInformation

This script will prompt you for your Azure AD admin credentials, then retrieve all users and select their UserPrincipalName, DisplayName, Department, and JobTitle properties. Finally, it will export the data to a CSV file located at "C:\temp\AzureADUsers.csv".

You can replace 'UserPrincipalName', 'DisplayName', 'Department', 'JobTitle' with the properties you're interested in.

Remember to replace the "C:\temp\AzureADUsers.csv" path with the path where you want to save your CSV file.

Please ensure to run these commands on a machine where you have the necessary permissions, and remember to install the AzureAD module if you have not done so already.

Please let me know if you need further assistance or have other questions.
GuestGuivenchi 105 Reputation points

2023-07-28T21:07:54.3466667+00:00

Thanks for your answer

At that time make the connection successfully, I put the command $users = Get-AzureADUser | Select-Object UserPrincipalName, DisplayName, Department, JobTitle

But I don't get any result, I don't get any error message either.
Peter Kayode 506 Reputation points

2023-07-28T21:14:24.14+00:00

GuestGuivenchi From your screenshot, you're only creating a variable.
Peter Kayode 506 Reputation points

2023-07-28T21:15:13.5+00:00

GuestGuivenchi Try Get-AzureADUser command and see if you get any information.
GuestGuivenchi 105 Reputation points

2023-07-28T21:25:57.1266667+00:00

thanks for your answer.

Apparently I get the information, but in my tenant I have 732 users, but in the PowerShell file I only get 100 users.

Do you know why I only have 100 users?

Thanks.
Peter Kayode 506 Reputation points

2023-07-28T21:33:26.0966667+00:00

Azure AD PowerShell cmdlets such as Get-AzureADUser return only a default of 100 items per call due to the underlying REST API's paging behavior.

In order to retrieve all the users, you can use the -All parameter. Here is an example:

$users = Get-AzureADUser -All $true | Select-Object UserPrincipalName, DisplayName, Department, JobTitle

This -All $true option tells the cmdlet to keep making requests until all pages of the result have been retrieved, hence returning all users in your tenant.
GuestGuivenchi 105 Reputation points

2023-07-28T21:50:39.38+00:00

Thanks for your help Peter.

I already have 732 users, now I will only investigate why the columns are empty for example: lastPasswordChangeDateTime, createdDateTime

Thanks for your help and sorry for the inconvenience.
Peter Kayode 506 Reputation points

2023-07-28T21:58:06.43+00:00
No inconvenience at all, I'm here to help!

For "lastPasswordChangeDateTime" and "createdDateTime", these properties are not directly available from the Get-AzureADUser cmdlet. However, they are available through the Microsoft Graph API.

The lastPasswordChangeDateTime attribute is part of the passwordProfile object which is not directly exposed via the Get-AzureADUser cmdlet. You can get this data through the Graph API by querying the /users endpoint.

The createdDateTime attribute is also not directly available via Get-AzureADUser. This data can also be accessed using Microsoft Graph API.

In order to access these data, you will need to have the necessary permissions granted to your application in Azure AD, and you will have to use an OAuth token when making requests to the Microsoft Graph API.

Here's an example of how you could get these properties for a user via the Graph API:

$userId = 'userId' # replace this with the user id you want to get info for $token = 'token' # replace this with your OAuth token $headers = @{ 'Authorization' = "Bearer $token" } # Get the user $response = Invoke-RestMethod -Uri "https://graph.microsoft.com/v1.0/users/$userId" -Headers $headers -Method Get # Output the attributes $response.createdDateTime $response.passwordProfile.lastPasswordChangeDateTime

Please be aware that you will need to replace 'userId' and 'token' with the actual User ID and OAuth token.

Keep in mind that managing and maintaining OAuth tokens can be tricky, so be sure to securely manage these credentials.

To your success

Peter
GuestGuivenchi 105 Reputation points

2023-07-28T22:10:37.07+00:00

Thanks Peter
I'll try Microsoft Graph.

Lastly, I require this data for the 732 users. Do you know if a .CSV can be generated?

regards.

Peter Kayode 506

@GuestGuivenchi

Yes my friend. it is possible to export the data you retrieve via Microsoft Graph to a .CSV file. You can create and fill a custom object with the information you need, and then export it. Here's a basic example that you would need to adjust to suit your specific needs:

$userIdList = 'listOfUserIds' # replace this with your list of user ids
$token = 'token' # replace this with your OAuth token
$headers = @{
    'Authorization' = "Bearer $token"
}

# Create an array to store user data
$userData = @()

# Loop through each user id
foreach ($userId in $userIdList) {
    # Get the user
    $response = Invoke-RestMethod -Uri "https://graph.microsoft.com/v1.0/users/$userId" -Headers $headers -Method Get

    # Create a custom object to store the user's info
    $userObject = New-Object PSObject -Property @{
        'UserPrincipalName' = $response.userPrincipalName
        'DisplayName'       = $response.displayName
        'Department'        = $response.department
        'JobTitle'          = $response.jobTitle
        'CreatedDateTime'   = $response.createdDateTime
        'LastPasswordChangeDateTime' = $response.passwordProfile.lastPasswordChangeDateTime
    }

    # Add the custom object to the array
    $userData += $userObject
}

# Export the array to a CSV file
$userData | Export-Csv -Path C:\temp\users.csv -NoTypeInformation

Please be aware that you will need to replace 'listOfUserIds' and 'token' with the actual User ID list and OAuth token.

This script will loop through each user id in the list, get the user's information via the Graph API, create a custom object with that information, add the custom object to an array, and then, after all users have been processed, export the array to a CSV file.

Be sure to manage the OAuth token securely and remember to update your user list accordingly.

Blessed

5 answers

Your answer

Peter Kayode 506 Reputation points

2023-07-28T20:49:11.08+00:00

@GuestGuivenchi

# Install the AzureAD module if you haven't already

Install-Module AzureAD

# Import the AzureAD module

Import-Module AzureAD

# Connect to Azure AD

$credential = Get-Credential
Connect-AzureAD -Credential $credential

# Get the users and select the properties you need

$users = Get-AzureADUser | Select-Object UserPrincipalName, DisplayName, Department, JobTitle

# Export the users to a CSV file

$users | Export-Csv -Path "C:\temp\AzureADUsers.csv" -NoTypeInformation

This script will prompt you for your Azure AD admin credentials, then retrieve all users and select their UserPrincipalName, DisplayName, Department, and JobTitle properties. Finally, it will export the data to a CSV file located at "C:\temp\AzureADUsers.csv".

You can replace 'UserPrincipalName', 'DisplayName', 'Department', 'JobTitle' with the properties you're interested in.

Remember to replace the "C:\temp\AzureADUsers.csv" path with the path where you want to save your CSV file.

Please ensure to run these commands on a machine where you have the necessary permissions, and remember to install the AzureAD module if you have not done so already.

Please let me know if you need further assistance or have other questions.
GuestGuivenchi 105 Reputation points

2023-07-28T21:07:54.3466667+00:00

Thanks for your answer

At that time make the connection successfully, I put the command $users = Get-AzureADUser | Select-Object UserPrincipalName, DisplayName, Department, JobTitle

But I don't get any result, I don't get any error message either.
Peter Kayode 506 Reputation points

2023-07-28T21:14:24.14+00:00

GuestGuivenchi From your screenshot, you're only creating a variable.
Peter Kayode 506 Reputation points

2023-07-28T21:15:13.5+00:00

GuestGuivenchi Try Get-AzureADUser command and see if you get any information.
GuestGuivenchi 105 Reputation points

2023-07-28T21:25:57.1266667+00:00

thanks for your answer.

Apparently I get the information, but in my tenant I have 732 users, but in the PowerShell file I only get 100 users.

Do you know why I only have 100 users?

Thanks.
Peter Kayode 506 Reputation points

2023-07-28T21:33:26.0966667+00:00

Azure AD PowerShell cmdlets such as Get-AzureADUser return only a default of 100 items per call due to the underlying REST API's paging behavior.

In order to retrieve all the users, you can use the -All parameter. Here is an example:

$users = Get-AzureADUser -All $true | Select-Object UserPrincipalName, DisplayName, Department, JobTitle

This -All $true option tells the cmdlet to keep making requests until all pages of the result have been retrieved, hence returning all users in your tenant.
GuestGuivenchi 105 Reputation points

2023-07-28T21:50:39.38+00:00

Thanks for your help Peter.

I already have 732 users, now I will only investigate why the columns are empty for example: lastPasswordChangeDateTime, createdDateTime

Thanks for your help and sorry for the inconvenience.
Peter Kayode 506 Reputation points

2023-07-28T21:58:06.43+00:00

No inconvenience at all, I'm here to help!

For "lastPasswordChangeDateTime" and "createdDateTime", these properties are not directly available from the Get-AzureADUser cmdlet. However, they are available through the Microsoft Graph API.

The lastPasswordChangeDateTime attribute is part of the passwordProfile object which is not directly exposed via the Get-AzureADUser cmdlet. You can get this data through the Graph API by querying the /users endpoint.

The createdDateTime attribute is also not directly available via Get-AzureADUser. This data can also be accessed using Microsoft Graph API.

In order to access these data, you will need to have the necessary permissions granted to your application in Azure AD, and you will have to use an OAuth token when making requests to the Microsoft Graph API.

Here's an example of how you could get these properties for a user via the Graph API:

$userId = 'userId' # replace this with the user id you want to get info for $token = 'token' # replace this with your OAuth token $headers = @{ 'Authorization' = "Bearer $token" } # Get the user $response = Invoke-RestMethod -Uri "https://graph.microsoft.com/v1.0/users/$userId" -Headers $headers -Method Get # Output the attributes $response.createdDateTime $response.passwordProfile.lastPasswordChangeDateTime

Please be aware that you will need to replace 'userId' and 'token' with the actual User ID and OAuth token.

Keep in mind that managing and maintaining OAuth tokens can be tricky, so be sure to securely manage these credentials.

To your success

Peter
GuestGuivenchi 105 Reputation points

2023-07-28T22:10:37.07+00:00

Thanks Peter
I'll try Microsoft Graph.

Lastly, I require this data for the 732 users. Do you know if a .CSV can be generated?

regards.
Peter Kayode 506 Reputation points

2023-07-28T22:21:04.53+00:00

@GuestGuivenchi

Yes my friend. it is possible to export the data you retrieve via Microsoft Graph to a .CSV file. You can create and fill a custom object with the information you need, and then export it. Here's a basic example that you would need to adjust to suit your specific needs:

$userIdList = 'listOfUserIds' # replace this with your list of user ids $token = 'token' # replace this with your OAuth token $headers = @{ 'Authorization' = "Bearer $token" } # Create an array to store user data $userData = @() # Loop through each user id foreach ($userId in $userIdList) { # Get the user $response = Invoke-RestMethod -Uri "https://graph.microsoft.com/v1.0/users/$userId" -Headers $headers -Method Get # Create a custom object to store the user's info $userObject = New-Object PSObject -Property @{ 'UserPrincipalName' = $response.userPrincipalName 'DisplayName' = $response.displayName 'Department' = $response.department 'JobTitle' = $response.jobTitle 'CreatedDateTime' = $response.createdDateTime 'LastPasswordChangeDateTime' = $response.passwordProfile.lastPasswordChangeDateTime } # Add the custom object to the array $userData += $userObject } # Export the array to a CSV file $userData | Export-Csv -Path C:\temp\users.csv -NoTypeInformation

Please be aware that you will need to replace 'listOfUserIds' and 'token' with the actual User ID list and OAuth token.

This script will loop through each user id in the list, get the user's information via the Graph API, create a custom object with that information, add the custom object to an array, and then, after all users have been processed, export the array to a CSV file.

Be sure to manage the OAuth token securely and remember to update your user list accordingly.

Blessed

Answer 1

Anonymous

Just encountered this. Get-AzureADUser only returned first 100 accounts out of just shy of 800.

Referenced:
https://learn.microsoft.com/en-us/powershell/module/azuread/get-azureaduser?view=azureadps-2.0

Found including the -All Parameter resolved.

Try:

Get-AzureADUser -All:$true

Answer 2

Rohit Kumar Sinha 1,346

Hi ,

You can also directly download from the portal and manage the columns directly from there

If this is useful , please mark as Accept Answer

User's image

Answer 3

Sandeep G-MSFT 21,131 Microsoft Employee Moderator

@GuestGuivenchi

Use below steps to pull the list of all users with the properties that you are looking for,

Open Windows PowerShell as administrator.
Run below commands
Install-Module AzureAD
Import-Module AzureAD
Connect-AzureAD (Enter the global admin credentials when it prompts for credentials)
Run the command "Get-AzureADUser -All $true | select UserPrincipalName, usertype | Export-Csv c:\Users.csv"

Note: In the last command you can change the properties as per your requirement. This command will pull list of all users from Azure AD you are connected to.

Let me know if you have any further questions on this.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Sandeep G-MSFT 21,131 Reputation points Microsoft Employee Moderator

2023-08-01T11:59:37.8333333+00:00

@GuestGuivenchi

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.

Answer 4

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Answer 5

Gérald Döserich 765

You can try use the Azure PowerShell Module and see if the fields are avaialble there.

Peter Kayode 506 Reputation points

2023-07-28T22:16:04.11+00:00

Sure, I agree with you GuestGuivenchi is doing that.

Share via

List of users in Azure AD

5 answers

Your answer