group resource type

Namespace: microsoft.graph

Important

APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported. To determine whether an API is available in v1.0, use the Version selector.

Represents a Microsoft Entra group, which can be a Microsoft 365 group, a team in Microsoft Teams, or a security group. This resource is an open type that allows other properties to be passed in.

Inherits from directoryObject.

For performance reasons, the create, get, and list operations return only a subset of more commonly used properties by default. These default properties are noted in the Properties section. To get any of the properties not returned by default, specify them in a $select OData query option.

This resource supports:

Microsoft Teams and Microsoft 365 groups support group collaboration. You can use most of the Microsoft 365 groups API with Microsoft Teams. To create a team, first create group and then add a team to it. For details, see the Microsoft Teams overview.

Methods

Method Return Type Description
List group collection Read properties and relationships of all group objects.
Create group Create a new group as specified. It can be a Microsoft 365 group, dynamic group, security group, or team.
Get group Read properties and relationships of group object.
Update None Update the properties of a group object.
Delete None Delete group object.
Get delta group collection Get incremental changes for groups.
Upsert group Create a new group if it doesn't exist, or update the properties of an existing group.
Group management
List members directoryObject collection Get the users and groups that are direct members of this group from the members navigation property.
Add member directoryObject Add a member to this group by posting to the members navigation property (supported for security groups and Microsoft 365 groups only).
Remove member None Remove a member from a Microsoft 365 group or a security group through the members navigation property.
List owners directoryObject collection Get the owners of the group from the owners navigation property.
Add owner directoryObject Add a new owner for the group by posting to the owners navigation property (supported for security groups and Microsoft 365 groups only).
Remove owner None Remove an owner from a Microsoft 365 group or a security group through the owners navigation property.
List endpoints endpoint collection Get an endpoint object collection.
Get endpoint endpoint Read properties and relationships of an endpoint object.
List member of directoryObject collection Get the groups and administrative units that this group is a direct member of from the memberOf navigation property.
List group lifecycle policies groupLifecyclePolicy collection List group lifecycle policies.
List transitive members directoryObject collection Get the users, groups, devices, and service principals that are members, including nested members of this group.
List transitive member of directoryObject collection List the groups and administrative units that this group is a member of. This operation is transitive and includes the groups that this group is a nested member of.
Assign license group Add or remove subscriptions for the group. You can also enable and disable specific plans associated with a subscription.
Evaluate dynamic membership evaluateDynamicMembershipResult Evaluate whether a user or device is or would be a member of a dynamic group.
Renew Boolean Renews a group's expiration. When a group is renewed, the group expiration is extended by the number of days defined in the policy.
Validate properties JSON Validate a Microsoft 365 group's display name or mail nickname that complies with naming policies.
App role assignments
List appRoleAssignment collection Get the apps and app roles to which this group has been assigned.
Add appRoleAssignment Assign an app role to this group.
Remove None. Remove an app role assignment from this group.
Calendar
Get calendar calendar Get the group's calendar.
Update calendar None Update the group's calendar.
List events event collection Get an event object collection.
Create event event Create a new event by posting to the events collection.
Get event event Read properties of an event object.
Update event None Update the properties of an event object.
Delete event None Delete event object.
List calendar view event collection Get a collection of events in a specified time window.
Cloud licensing
List usage rights microsoft.graph.cloudLicensing.usageRight collection Get a list of the usageRight objects granted to a group.
Get usage right microsoft.graph.cloudLicensing.usageRight Get the properties and relationships of a usageRight object granted to a group.
Conversations
List conversations conversation collection Get a conversation object collection.
Create conversation conversation Create a new conversation by posting to the conversations collection.
Get conversation conversation Read properties of a conversation object.
Delete conversation None Delete conversation object.
List threads conversationThread collection Get all the threads of a group.
Create thread conversationThread Create a new conversation thread.
Get thread conversationThread Read properties of a thread object.
Update thread None Update properties of a thread object.
Delete thread None Delete thread object
List accepted senders directoryObject collection Get a list of users or groups that are in the accepted-senders list for this group.
Add accepted sender directoryObject Add a User or Group to the acceptSenders collection.
Remove accepted sender directoryObject Remove a User or Group from the acceptedSenders collection.
List rejected senders directoryObject collection Get a list of users or groups that are in the rejected-senders list for this group.
Add rejected sender directoryObject Add a new User or Group to the rejectedSenders collection.
Remove rejected sender directoryObject Remove new User or Group from the rejectedSenders collection.
Directory objects
List deleted items directoryObject collection Retrieve the groups deleted in the tenant in the last 30 days.
Get deleted item directoryObject collection Retrieve a deleted group by ID.
Restore deleted item directoryObject collection Restore a group deleted in the tenant in the last 30 days.
Permanently delete item directoryObject collection Permanently delete a deleted group from the tenant.
List deleted items owned by user directoryObject collection Retrieve the groups deleted in the tenant in the last 30 days that are owned by a user.
Check member groups String collection Check for membership in a list of groups. The function is transitive.
Get member groups String collection Return all the groups the group is a member of. The function is transitive.
Check member objects String collection Check for membership in a list of group, directory role, or administrative unit objects. The function is transitive.
Get member objects String collection Return all of the groups and administrative units the group is a member of. The function is transitive.
Drive
Get drive drive Retrieve the properties and relationships of a Drive resource.
List children driveItem collection Return a collection of driveItem objects in the children relationship of a driveItem.
Group settings
List directorySetting collection List properties of all setting objects.
Create directorySetting Create a setting object based on a directorySettingTemplate. The POST request must provide settingValues for all the settings defined in the template. Only groups specific templates may be used for this operation.
Get directorySetting Read properties of a specific setting object.
Update None Update a setting object.
Delete None Delete a setting object.
List setting templates None List properties of all setting templates.
Get setting template None Read properties of a setting template.
Notes
List notebooks notebook collection Retrieve a list of notebook objects.
Create notebook notebook Create a new OneNote notebook.
Password-based single sign-on credentials
Get passwordSingleSignOnCredentialSet collection Get the list of password-based single sign-on credentials for this group. Passwords are never returned, and instead are always returned as null.
Delete None Delete password-based single sign-on credential for a given service principal that is associated to this group.
name.
Profile photo
Get profilePhoto Get the specified profilePhoto or its metadata (profilePhoto properties).
Update None Update the photo for any user in the tenant including the signed-in user, or the specified group or contact.
Delete None Delete the photo for any user in the tenant including the signed-in user or the specified group.
Planner
List plans plannerPlan collection Get plans assigned to the group.
Posts
List post collection Get posts in a conversation thread.
Get post Get a specific post.
Reply to post None Reply to a post.
Forward post None Forward a post.
Other group resources
List permission grants resourceSpecificPermissionGrant collection List permissions granted to apps to access the group.
User settings
Add favorite None Add the group to the list of the signed-in user's favorite groups. Supported for only Microsoft 365 groups.
Remove favorite None Remove the group from the list of the signed-in user's favorite groups. Supported for Microsoft 365 groups only.
List member of directoryObject collection Get the groups and administrative units that this user is a direct member of from the memberOf navigation property.
List joined teams group collection Get the Microsoft Teams that the user is a direct member of.
List associated teams associatedTeamInfo collection Get the list of associatedTeamInfo objects in Microsoft Teams that a user is associated with.
Subscribe by mail None Set the isSubscribedByMail property to true. Enabling the signed-in user to receive email conversations. Supported for Microsoft 365 groups only.
Unsubscribe by mail None Set the isSubscribedByMail property to false. Disabling the signed-in user from receiving email conversations. Supported for Microsoft 365 groups only.
Reset unseen count None Reset the unseenCount to 0 for all the posts the signed-in user hasn't seen since their last visit. Supported for Microsoft 365 groups only.

Properties

Important

Specific usage of $filter and the $search query parameter is supported only when you use the ConsistencyLevel header set to eventual and $count. For more information, see Advanced query capabilities on directory objects.

Property Type Description
accessType groupAccessType Indicates the type of access to the group. Possible values are none, private, secret, and public.
allowExternalSenders Boolean Indicates if people external to the organization can send messages to the group. The default value is false.

Returned only on $select. Supported only on the Get group API (GET /groups/{ID}).
assignedLabels assignedLabel collection The list of sensitivity label pairs (label ID, label name) associated with a Microsoft 365 group.

Returned only on $select. This property can be updated only in delegated scenarios where the caller requires both the Microsoft Graph permission and a supported administrator role.
assignedLicenses assignedLicense collection The licenses that are assigned to the group.

Returned only on $select. Supports $filter (eq). Read-only.
autoSubscribeNewMembers Boolean Indicates if new members added to the group are auto-subscribed to receive email notifications. You can set this property in a PATCH request for the group; don't set it in the initial POST request that creates the group. Default value is false.

Returned only on $select. Supported only on the Get group API (GET /groups/{ID}).
classification String Describes a classification for the group (such as low, medium or high business impact). Valid values for this property are defined by creating a ClassificationList setting value, based on the template definition.

Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith).
cloudLicensing microsoft.graph.cloudLicensing.groupCloudLicensing The relationships of a group to cloud licensing resources.
createdByAppId String App ID of the app used to create the group. Can be null for some groups.

Returned by default. Read-only. Supports $filter (eq, ne, not, in, startsWith).
createdDateTime DateTimeOffset Timestamp of when the group was created. The value can't be modified and is automatically populated when the group is created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.

Returned by default. Read-only.
deletedDateTime DateTimeOffset For some Microsoft Entra objects (user, group, application), if the object is deleted, it is first logically deleted, and this property is updated with the date and time when the object was deleted. Otherwise this property is null. If the object is restored, this property is updated to null. Inherited from directoryObject.
description String An optional description for the group.

Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith) and $search.
displayName String The display name for the group. Required. Maximum length is 256 characters.

Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values), $search, and $orderby.
expirationDateTime DateTimeOffset Timestamp of when the group is set to expire. It is null for security groups, but for Microsoft 365 groups, it represents when the group is set to expire as defined in the groupLifecyclePolicy. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.

Returned by default. Supports $filter (eq, ne, not, ge, le, in). Read-only.
groupTypes String collection Specifies the group type and its membership.

If the collection contains Unified, the group is a Microsoft 365 group; otherwise, it's either a security group or a distribution group. For details, see groups overview.

If the collection includes DynamicMembership, the group has dynamic membership; otherwise, membership is static.

Returned by default. Supports $filter (eq, not).
hasMembersWithLicenseErrors Boolean Indicates whether there are members in this group that have license errors from its group-based license assignment.

This property is never returned on a GET operation. You can use it as a $filter argument to get groups that have members with license errors (that is, filter for this property being true).

Supports $filter (eq).
hideFromAddressLists Boolean true if the group isn't displayed in certain parts of the Outlook user interface: in the Address Book, in address lists for selecting message recipients, and in the Browse Groups dialog for searching groups; false otherwise. The default value is false.

Returned only on $select. Supported only on the Get group API (GET /groups/{ID}).
hideFromOutlookClients Boolean true if the group isn't displayed in Outlook clients, such as Outlook for Windows and Outlook on the web, false otherwise. The default value is false.

Returned only on $select. Supported only on the Get group API (GET /groups/{ID}).
id String The unique identifier for the group.

Returned by default. Inherited from directoryObject. Key. Not nullable. Read-only.

Supports $filter (eq, ne, not, in).
isArchived Boolean When a group is associated with a team, this property determines whether the team is in read-only mode.
To read this property, use the /group/{groupId}/team endpoint or the Get team API. To update this property, use the archiveTeam and unarchiveTeam APIs.
isAssignableToRole Boolean Indicates whether this group can be assigned to a Microsoft Entra role. Optional.

This property can only be set while creating the group and is immutable. If set to true, the securityEnabled property must also be set to true, visibility must be Hidden, and the group cannot be a dynamic group (that is, groupTypes can't contain DynamicMembership).

Only callers with at least the Privileged Role Administrator role can set this property. The caller must also be assigned the RoleManagement.ReadWrite.Directory permission to set this property or update the membership of such groups. For more, see Using a group to manage Microsoft Entra role assignments

Using this feature requires a Microsoft Entra ID P1 license. Returned by default. Supports $filter (eq, ne, not).
isFavorite Boolean Indicates whether the user marked the group as favorite.
isManagementRestricted Boolean Indicates whether the group is a member of a restricted management administrative unit. The default value is false. Read-only.

To manage a group member of a restricted management administrative unit, the administrator or calling app must be assigned a Microsoft Entra role at the scope of the restricted management administrative unit.
infoCatalogs String collection Identifies the info segments assigned to the group. Returned by default. Supports $filter (eq, not, ge, le, startsWith).
isSubscribedByMail Boolean Indicates whether the signed-in user is subscribed to receive email conversations. The default value is true.

Returned only on $select. Supported only on the Get group API (GET /groups/{ID}).
licenseProcessingState String Indicates the status of the group license assignment to all group members. Possible values: QueuedForProcessing, ProcessingInProgress, and ProcessingComplete.

Returned only on $select. Read-only.
mail String The SMTP address for the group, for example, "serviceadmins@contoso.com".

Returned by default. Read-only. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).
mailEnabled Boolean Specifies whether the group is mail-enabled. Required.

Returned by default. Supports $filter (eq, ne, not, and eq on null values).
mailNickname String The mail alias for the group, unique for Microsoft 365 groups in the organization. Maximum length is 64 characters. This property can contain only characters in the ASCII character set 0 - 127 except the following: @ () \ [] " ; : <> , SPACE.

Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith).
membershipRule String The rule that determines members for this group if the group is a dynamic group (groupTypes contains DynamicMembership). For more information about the syntax of the membership rule, see Membership Rules syntax.

Returned by default. Supports $filter (eq, ne, not, ge, le, startsWith).
membershipRuleProcessingState String Indicates whether the dynamic membership processing is on or paused. Possible values are On or Paused.

Returned by default. Supports $filter (eq, ne, not, in).
membershipRuleProcessingStatus membershipRuleProcessingStatus Describes the processing status for rules-based dynamic groups. The property is null for non-rule-based dynamic groups or if the dynamic group processing has been paused.

Returned only on $select. Supported only on the Get group API (GET /groups/{ID}). Read-only.
onPremisesDomainName String Contains the on-premises domain FQDN, also called dnsDomainName synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.

Returned by default. Read-only.
onPremisesLastSyncDateTime DateTimeOffset Indicates the last time at which the group was synced with the on-premises directory.The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.

Returned by default. Read-only. Supports $filter (eq, ne, not, ge, le, in).
onPremisesNetBiosName String Contains the on-premises netBios name synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.

Returned by default. Read-only.
onPremisesProvisioningErrors onPremisesProvisioningError collection Errors when using Microsoft synchronization product during provisioning.

Returned by default. Supports $filter (eq, not).
onPremisesSamAccountName String Contains the on-premises SAM account name synchronized from the on-premises directory. The property is only populated for customers synchronizing their on-premises directory to Microsoft Entra ID via Microsoft Entra Connect.

Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith). Read-only.
onPremisesSecurityIdentifier String Contains the on-premises security identifier (SID) for the group synchronized from on-premises to the cloud. Read-only.

Returned by default. Supports $filter (eq including on null values).
onPremisesSyncEnabled Boolean true if this group is synced from an on-premises directory; false if this group was originally synced from an on-premises directory but is no longer synced; null if this object has never been synced from an on-premises directory (default).

Returned by default. Read-only. Supports $filter (eq, ne, not, in, and eq on null values).
preferredDataLocation String The preferred data location for the Microsoft 365 group. By default, the group inherits the group creator's preferred data location. To set this property, the calling app must be granted the Directory.ReadWrite.All permission and the user be assigned at least one of the following Microsoft Entra roles:
  • User Account Administrator
  • Directory Writer
  • Exchange Administrator
  • SharePoint Administrator

For more information about this property, see OneDrive Online Multi-Geo and Create a Microsoft 365 group with a specific PDL.

Nullable. Returned by default.
preferredLanguage String The preferred language for a Microsoft 365 group. Should follow ISO 639-1 Code; for example, en-US.

Returned by default. Supports $filter (eq, ne, not, ge, le, in, startsWith, and eq on null values).
proxyAddresses String collection Email addresses for the group that direct to the same group mailbox. For example: ["SMTP: bob@contoso.com", "smtp: bob@sales.contoso.com"]. The any operator is required for filter expressions on multi-valued properties.

Returned by default. Read-only. Not nullable. Supports $filter (eq, not, ge, le, startsWith, endsWith, /$count eq 0, /$count ne 0).
renewedDateTime DateTimeOffset Timestamp of when the group was last renewed. This cannot be modified directly and is only updated via the renew service action. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z.

Returned by default. Supports $filter (eq, ne, not, ge, le, in). Read-only.
resourceBehaviorOptions String collection Specifies the group behaviors that can be set for a Microsoft 365 group during creation. This property can be set only as part of creation (POST). For the list of possible values, see Microsoft 365 group behaviors and provisioning options.
resourceProvisioningOptions String collection Specifies the group resources that are associated with the Microsoft 365 group. The possible value is Team. For more information, see Microsoft 365 group behaviors and provisioning options.

Returned by default. Supports $filter (eq, not, startsWith.
securityEnabled Boolean Specifies whether the group is a security group. Required.

Returned by default. Supports $filter (eq, ne, not, in).
securityIdentifier String Security identifier of the group, used in Windows scenarios. Read-only.

Returned by default.
serviceProvisioningErrors serviceProvisioningError collection Errors published by a federated service describing a non-transient, service-specific error regarding the properties or link from a group object.
theme String Specifies a Microsoft 365 group's color theme. Possible values are Teal, Purple, Green, Blue, Pink, Orange or Red.

Returned by default.
uniqueName String The unique identifier that can be assigned to a group and used as an alternate key. Immutable. Read-only.
unseenConversationsCount Int32 Count of conversations delivered one or more new posts since the signed-in user's last visit to the group. This property is the same as unseenCount.

Returned only on $select.
unseenCount Int32 Count of conversations that have received new posts since the signed-in user last visited the group. This property is the same as unseenConversationsCount.

Returned only on $select. Supported only on the Get group API (GET /groups/{ID}).
unseenMessagesCount Int32 Count of new posts that have been delivered to the group's conversations since the signed-in user's last visit to the group.

Returned only on $select.
visibility String Specifies the group join policy and group content visibility for groups. Possible values are: Private, Public, or HiddenMembership. HiddenMembership can be set only for Microsoft 365 groups when the groups are created. It can't be updated later. Other values of visibility can be updated after group creation.
If visibility value isn't specified during group creation on Microsoft Graph, a security group is created as Private by default, and Microsoft 365 group is Public. Groups assignable to roles are always Private. To learn more, see group visibility options.

Returned by default. Nullable.
writebackConfiguration groupWritebackConfiguration Specifies whether or not a group is configured to write back group object properties to on-premises Active Directory. These properties are used when group writeback is configured in the Microsoft Entra Connect sync client.

Group visibility options

Value Description
Public Anyone can join the group without the owner's permission.
Anyone can view the group's contents.
Private Owner permission is needed to join the group.
Non-members cannot view the contents of the group.
HiddenMembership Owner permission is needed to join the group.
Non-members cannot view the contents of the group.
Non-members cannot see the members of the group.
Administrators (global, company, user, and helpdesk) can view the membership of the group.
The group appears in the global address book (GAL).

Relationships

Relationship Type Description
acceptedSenders directoryObject collection The list of users or groups allowed to create posts or calendar events in this group. If this list is non-empty, then only users or groups listed here can post.
appRoleAssignments appRoleAssignment collection Represents the app roles a group has been granted for an application. Supports $expand.
calendar calendar The group's calendar. Read-only.
calendarView event collection The calendar view for the calendar. Read-only.
conversations conversation collection The group's conversations.
createdOnBehalfOf directoryObject The user (or application) that created the group. Note: This isn't set if the user is an administrator. Read-only.
drive drive The group's default drive. Read-only.
drives drive collection The group's drives. Read-only.
endpoints Endpoint collection Endpoints for the group. Read-only. Nullable.
events event collection The group's events.
extensions extension collection The collection of open extensions defined for the group. Read-only. Nullable.
groupLifecyclePolicies groupLifecyclePolicy collection The collection of lifecycle policies for this group. Read-only. Nullable.
memberOf directoryObject collection Groups and administrative units that this group is a member of. HTTP Methods: GET (supported for all groups). Read-only. Nullable. Supports $expand.
members directoryObject collection Direct group members, who can be users, devices, other groups, or service principals. Supports the List members, Add member, and Remove member operations. Nullable.
Supports $expand including nested $select. For example, /groups?$filter=startsWith(displayName,'Role')&$select=id,displayName&$expand=members($select=id,userPrincipalName,displayName).
membersWithLicenseErrors user collection A list of group members with license errors from this group-based license assignment. Read-only.
onenote onenote Read-only.
owners directoryObject collection The owners of the group who can be users or service principals. Limited to 100 owners. Nullable.
  • If this property isn't specified when creating a Microsoft 365 group the calling user (admin or non-admin) is automatically assigned as the group owner.
  • A non-admin user can't explicitly add themselves to this collection when they're creating the group. For more information, see the related known issue.
  • For security groups, the admin user isn't automatically added to this collection. For more information, see the related known issue.

    Supports $filter (/$count eq 0, /$count ne 0, /$count eq 1, /$count ne 1); Supports $expand including nested $select. For example, /groups?$filter=startsWith(displayName,'Role')&$select=id,displayName&$expand=owners($select=id,userPrincipalName,displayName).
  • permissionGrants resourceSpecificPermissionGrant The permissions granted for a group to a specific application. Supports $expand.
    photo profilePhoto The group's profile photo.
    photos profilePhoto collection The profile photos owned by the group. Read-only. Nullable.
    planner plannerGroup Selective Planner services available to the group. Read-only. Nullable.
    rejectedSenders directoryObject collection The list of users or groups not allowed to create posts or calendar events in this group. Nullable
    settings directorySetting collection Settings that can govern this group's behavior, like whether members can invite guest users to the group. Nullable.
    sites site collection The list of SharePoint sites in this group. Access the default site with /sites/root.
    team channel collection The team associated with this group.
    threads conversationThread collection The group's conversation threads. Nullable.
    transitiveMemberOf directoryObject collection The groups a group is a member of, either directly or through nested membership. Nullable.
    transitiveMembers directoryObject collection The direct and transitive members of a group. Nullable.

    JSON representation

    The following JSON representation shows the resource type.

    {
      "accessType": "String",
      "assignedLabels": [{ "@odata.type": "microsoft.graph.assignedLabel" }],
      "assignedLicenses": [{ "@odata.type": "microsoft.graph.assignedLicense" }],
      "allowExternalSenders": false,
      "autoSubscribeNewMembers": true,
      "cloudLicensing": { "@odata.type": "microsoft.graph.cloudLicensing.groupCloudLicensing" },
      "createdByAppId": "String",
      "createdDateTime": "String (timestamp)",
      "deletedDateTime": "String (timestamp)",
      "description": "String",
      "displayName": "String",
      "expirationDateTime": "String (timestamp)",
      "groupTypes": ["String"],
      "hideFromAddressLists": false,
      "hideFromOutlookClients": false,
      "id": "String (identifier)",
      "isFavorite": true,
      "isArchived": false,
      "isAssignableToRole": false,
      "isSubscribedByMail": true,
      "licenseProcessingState": "String",
      "mail": "String",
      "mailEnabled": true,
      "mailNickname": "String",
      "onPremisesDomainName": "String",
      "onPremisesLastSyncDateTime": "String (timestamp)",
      "onPremisesNetBiosName": "String",
      "onPremisesProvisioningErrors": [
        { "@odata.type": "microsoft.graph.onPremisesProvisioningError" }
      ],
      "onPremisesSamAccountName": "String",
      "onPremisesSecurityIdentifier": "String",
      "onPremisesSyncEnabled": true,
      "preferredDataLocation": "String",
      "proxyAddresses": ["String"],
      "renewedDateTime": "String (timestamp)",
      "resourceBehaviorOptions": ["String"],
      "resourceProvisioningOptions": ["String"],
      "securityEnabled": true,
      "securityIdentifier": "String",
      "serviceProvisioningErrors": [
        { "@odata.type": "microsoft.graph.serviceProvisioningXmlError" }
      ],
      "uniqueName": "String",
      "unseenConversationsCount": 1024,
      "unseenCount": 1024,
      "unseenMessagesCount": 1024,
      "visibility": "String",
      "acceptedSenders": [{ "@odata.type": "microsoft.graph.directoryObject" }],
      "calendar": { "@odata.type": "microsoft.graph.calendar" },
      "calendarView": [{ "@odata.type": "microsoft.graph.event" }],
      "conversations": [{ "@odata.type": "microsoft.graph.conversation" }],
      "createdOnBehalfOf": { "@odata.type": "microsoft.graph.directoryObject" },
      "drive": { "@odata.type": "microsoft.graph.drive" },
      "events": [{ "@odata.type": "microsoft.graph.event" }],
      "memberOf": [{ "@odata.type": "microsoft.graph.directoryObject" }],
      "members": [{ "@odata.type": "microsoft.graph.directoryObject" }],
      "membersWithLicenseErrors": [{ "@odata.type": "microsoft.graph.user" }],
      "owners": [{ "@odata.type": "microsoft.graph.directoryObject" }],
      "photo": { "@odata.type": "microsoft.graph.profilePhoto" },
      "photos": [{ "@odata.type": "microsoft.graph.profilePhoto" }],
      "rejectedSenders": [{ "@odata.type": "microsoft.graph.directoryObject" }],
      "sites": [{ "@odata.type": "microsoft.graph.site" }],
      "threads": [{ "@odata.type": "microsoft.graph.conversationThread" }],
      "classification": "String",
      "hasMembersWithLicenseErrors": true,
      "membershipRule": "String",
      "membershipRuleProcessingState": "String",
      "membershipRuleProcessingStatus": {
        "@odata.type": "microsoft.graph.membershipRuleProcessingStatus"
      },
      "preferredLanguage": "String",
      "theme": "String"
    }