Azure AD Export AD groups

Question

When i go to Azure Active Directory

Home-->Contoso-->users-->Ben
under groups(Preview) i can see all groups for user Ben i.e mail enabled security, security, Distribution,Microsoft 365.
i want to export Group Names, Group Types, Email to csv file for this user. how do i do it.

2. If i just need to export Distribution groups how do i do.
3. if i have users in csv file how can i import the csv file and export the output(groups) to csv file from Azure AD powershell

users
******@mydomain.com
******@mydomain.com

Answer 1

Please give it a try:

$users = Get-Content -Path "$userFile" 
 ForEach ($user in $users)
        {
            $memberships = Get-AzureADUserMembership -ObjectId $user | Where-Object {$_.MailEnabled -eq $true}
            foreach ($membership in $memberships)
                {
                $membershipDisplayName =  $membership.Displayname
                $membershipMailEnabled = $membership.MailEnabled
                $membershipObjectType = $membership.ObjectType
                $membershipSecurityEnabled = $membership.SecurityEnabled
                $membershipMail = $membership.Mail

                $out = "$user,$membershipDisplayName,$membershipMailEnabled,$membershipObjectType,$membershipSecurityEnabled,$membershipMail"
                $out | Out-File -FilePath $outputFile -Append
                }
        }

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 2

Via Azure Portal:
Export AAD groups works the same like export AAD users:
https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/users-bulk-download
You can use the filter before export if required.

Import AAD users from CSV:
https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/users-bulk-add

Via PowerShell:
Import users
https://learn.microsoft.com/en-us/powershell/azure/active-directory/importing-data?view=azureadps-2.0

Export groups:
https://learn.microsoft.com/de-de/azure/active-directory/enterprise-users/groups-settings-v2-cmdlets

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 3

If i have users in csv file will the below syntax work for me

Names
******@mydomain.com
******@mydomain.com

how can i add mail enabled set to true in this synax so that i can pull only distribution groups, unified groups and mail enabled security group.

import-csv c:\temp\users.csv | % {Get-AzureADUserMembership -ObjectID -identity $_.Names | Select-Object DisplayName, MailEnabled, ObjectType, SecurityEnabled, Mail | Export-Csv -Path C:\Temp\Data.CSV -NoTypeInformation}

Answer 4

You can use Where-Object for filtering the Get-AzureADUserMembership output.

Just an example (not tested):

Get-AzureADUserMembership -ObjectID -identity $_.Names | Where {$_.MailEnabled -eq 'true'} # Where MailEnabled is "true"

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 5

when i use the below syntax i am getting error

Names
******@mydomain.com
******@mydomain.com

import-csv C:\Temp\users.csv | % {Get-AzureADUserMembership -ObjectID -identity $.Names | Where {$.MailEnabled -eq 'true'}| Select-Object DisplayName, MailEnabled, ObjectType, SecurityEnabled, Mail | Export-Csv -Path C:\Temp\Data.csv -NoTypeInformation}

Get-AzureADUserMembership : A positional parameter cannot be found that accepts argument
'******@mydomain.com'.
At line:1 char:59

• import-csv C:\Temp\users.csv | % {Get-AzureADUserMembers ...
• ~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : InvalidArgument: (:) [Get-AzureADUserMembership], ParameterBindingException
• FullyQualifiedErrorId : PositionalParameterNotFound,Microsoft.Open.AzureAD16.PowerShell.GetUserMemberships