How to get Microsoft Entra ID group members using Get-MgGroupMember

Getting Microsoft Entra ID group members

Keeping an eye on group memberships in Microsoft Entra ID is essential for ensuring that the right users and devices have the appropriate permissions to resources. IT teams often need to retrieve group members to audit permissions, enforce access control, or manage access rights within the organization. Microsoft Graph PowerShell commands like Get-MgGroupMember allow administrators to list group members, but this process requires complex scripts and manual effort.

On the other hand, ManageEngine ADManager Plus offers a streamlined, script-free solution for retrieving and managing group memberships. With several built-in reports and management actions, you can easily view, modify, and track Microsoft Entra ID group members without the need for scripting.

Get members of Microsoft Entra ID groups using Microsoft Graph PowerShell

Prerequisites

Before running the Get-MgGroupMember cmdlet, ensure the following requirements are met:

• The Microsoft Graph PowerShell module is installed. If it’s not installed, use the following command:
  Copy Install-Module Microsoft.Graph -Scope CurrentUser
• Connect to Microsoft Graph PowerShell with the required permissions to retrieve Microsoft Entra ID group members:
  Copy Connect-MgGraph -Scopes "GroupMember.Read.All", "Group.Read.All"

Using the Get-MgGroupMember cmdlet to get Microsoft Entra ID group members

Use the Get-MgGroupMember cmdlet in Microsoft Graph PowerShell to get a list of Microsoft Entra ID group members. The syntax is as follows:

Example use case and script using the Get-MgGroupMember cmdlet

Example: Get members of a group

Supported parameters

The table below lists key parameters that can be used with the Get-MgGroupMember cmdlet to get Microsoft Entra ID group members.

Note: Microsoft has announced the deprecation of Azure AD PowerShell and its transition to Microsoft Graph PowerShell.

Challenges of using Graph PowerShell scripts to retrieve Microsoft Entra ID group members

• Formatting and exporting data for reporting and auditing often require additional scripting efforts, increasing complexity.
• The lack of a graphical user interface makes it less accessible, especially for those unfamiliar with PowerShell scripting.
• IT administrators must transition from Azure AD PowerShell and develop proficiency in PowerShell scripting to effectively use Microsoft Graph PowerShell.
• Limited built-in error handling can make troubleshooting issues more difficult, often requiring manual intervention to diagnose and resolve failures.