How do assign multiple users to different groups in Azure via Azure cli/Bash

Question

How do assign multiple users to different groups in Azure via Azure cli/Bash

Emran Hossain 195

Hi ,

I am facing some problem to do a task regarding "How do assign multiple users to different groups in Azure via Azure cli/Bash".

I am not working too much on Azure Cli.

I have a 4 Group & 10 users to assign different groups by Azure cli via create script will be the best .

But i have no idea where to start .

Someone has a good idea how to fix it, will be really appreciated .

BR,

Emmi

Answer accepted by question author

1 additional answer

Your answer

Answer 1

Tushar Kumar 3,386 MVP

group_name="YourGroupName"  # Replace with the name of the Azure AD group

# Define an array of UPNs of users to add to the group
user_upns=("user1@example.com" "user2@example.com" "user3@example.com")

# Loop through the array and add each user to the Azure AD group
for upn in "${user_upns[@]}"; do
  # Get the object ID of the user
  user_object_id=$(az ad user show --upn "$upn" --query objectId --output tsv)
 
  # Add the user to the Azure AD group
  az ad group member add --group "$group_name" --members "$user_object_id"
done

You can use the above script to add multiple users to a group, You can use the same priniciple to tweak it for your requirements

Please click "Accept as answer" if it helps.

Francisco Ferreira 5 MVP

Connect-AzureAD

$Users = "******@contoso.com","******@contoso.com","******@contoso.com"

$Group = "G-StarWars"

foreach($user in $Users) {
    $AzureADUser = Get-AzureADUser -Filter "UserPrincipalName eq '$($user)'"
    if($AzureADUser -ne $null) {
        try {
            $AzureADGroup = Get-AzureADGroup -Filter "DisplayName eq '$Group'" -ErrorAction Stop
            $isUserMemberOfGroup = Get-AzureADGroupMember -ObjectId $AzureADGroup.ObjectId -All $true | Where-Object {$_.UserPrincipalName -like "*$($AzureADUser.UserPrincipalName)*"}
            if($isUserMemberOfGroup -eq $null) {
                Add-AzureADGroupMember -ObjectId $AzureADGroup.ObjectId -RefObjectId $AzureADUser.ObjectId -ErrorAction Stop
            }Write-Output $User" added sucessfully to Azure AD Group "$Group
        }
        catch {
            Write-Output "Azure AD Group does not exist or insufficient right"
        }
    }
    else {
        Write-Output $User" does not exist"
    }
}

Francisco Ferreira 5 Reputation points MVP

2023-09-20T16:46:05.3933333+00:00

I was'nt successful with this script
Tushar Kumar 3,386 Reputation points MVP

2023-09-20T19:56:42.3266667+00:00

Did you received any errors? The script you have posted is PowerShell below, you were looking for Azure CLI.
Francisco Ferreira 5 Reputation points MVP

2023-09-20T21:02:55.6066667+00:00

Its not allow --members in the last line. I tested on Az Cli.
Emran Hossain 195 Reputation points

2023-09-21T08:27:19.0266667+00:00

Thanks you guys for your help !

As soon as possible i will test the code @Tushar
Emran Hossain 195 Reputation points

2023-09-21T08:29:02.5433333+00:00

Thank you @Francisco Ferreira , I also try your code maybe for my Improvement

Tushar Kumar 3,386 MVP

Hi Emran Hossain,

I have updated the code not sure why it's not reflecting Here is the updated code

group_name="YourGroupName"  # Replace with the name of the Azure AD group

# Define an array of UPNs of users to add to the group
user_upns=("user1@example.com" "user2@example.com" "user3@example.com")

for upn in "${user_upns[@]}"; do
  user_object_id=$(az ad user show --id "$upn" | jq -r .id)
  az ad group member add --group "$group_name" --member-id "$user_object_id"
done

Emran Hossain 195 Reputation points

2023-09-21T09:42:50.3766667+00:00

Thats Work fine :)
Tushar Kumar 3,386 Reputation points MVP

2023-09-21T09:45:09.2433333+00:00

Glad that it helped!

Please Click "Accept as Answer" on this post for future help for the community.

Answer 2

Emran Hossain 195



group_name="ManagementGroupB"

 

user_upns=("******@emraank2gmailcom.onmicrosoft.com" "******@emraank2gmailcom.onmicrosoft.com" "******@emraank2gmailcom.onmicrosoft.com")

 

for upn in "${user_upns[@]}"; do

    user_object_id=$(az ad user show --upn "$upn" --query objectId --output tsv)

    az ad group member add --group "$group_name" --members "$user_object_id"

done

Emran Hossain 195 Reputation points

2023-09-21T09:29:53.4066667+00:00

Can you edit this code because there is coming up an error regarding --member id but i tried to edit to --member-id to add a user to group but still now have a error . Do you have any advice ??
Francisco Ferreira 5 Reputation points MVP

2023-09-21T11:52:12.83+00:00

ERROR: the following arguments are required: --id

Examples from AI knowledge base:

az ad user show --id 00000000-0000-0000-0000-00000000000000000

Gets user information from the directory. (autogenerated)

az ad user list

List Azure Active Directory users. (autogenerated)

az ad signed-in-user show

Gets the details for the currently logged-in user. (autogenerated)

https://docs.microsoft.com/en-US/cli/azure/ad/user#az_ad_user_show

Read more about the command in reference docs

the following arguments are required: --member-id

Share via

How do assign multiple users to different groups in Azure via Azure cli/Bash

1 additional answer

Your answer