How to view a list of Microsoft 365 group owners
Last updated on:In this page
- How to get a list of group owners using the Microsoft 365 admin center
- How to get a list of group owners in Microsoft 365 using Microsoft Graph PowerShell
- How to view a list of group owners in Microsoft 365 with M365 Manager Plus
- Streamline Microsoft Entra ID user governance and group management
- Important tips
- Frequently asked questions
Microsoft 365 groups control access to security groups, shared mailboxes, Teams, SharePoint sites, Planner data, and more collaborative objects. If a group does not have an active owner, it becomes an unmanaged security boundary with no accountability for membership changes, data access, or life cycle decisions.
In large environments, tracking who owns which groups isn’t straightforward since you will have to manually check each group for its owner one by one. Listing group owners in one place is essential to identify orphaned groups, enforce governance, and ensure every group has a responsible owner.
This article explains how to view Microsoft 365 group owners using the Microsoft 365 admin center and Microsoft Graph PowerShell. It also covers how you can get a better experience with the convenience of a friendly UI coupled with the capabilities of PowerShell scripting with ManageEngine M365 Manager Plus.
- Entra admin center
- Graph PowerShell
- M365 Manager Plus
Method 1: How to get a list of group owners using the Microsoft 365 admin center
Prerequisites
You need the Global Administrator or Groups Administrator role for the account you use to sign in.
Steps
- Log in to the Microsoft Entra admin center and navigate to Groups > All groups.
- Select the Microsoft 365 tab to view all groups.
- Select a specific group from the list.
- Under the Manage section in the left pane, click Owners to view the full list of assigned owners for that group.
Limitation to consider
- The Microsoft Entra admin center does not provide a way to export the list of owners for all of your groups in Microsoft 365 at once. Even the Download groups feature, which provides a CSV of group objects and their details, does not show the owners associated with the groups.
- You will have to click through each group individually to get the list of users who are assigned as owners of said groups.
If you wish to get a single list of your Microsoft 365 group owners, you will have to either resort to Microsoft Graph PowerShell or use a reporting tool dedicated to present this data in just a few clicks, such as ManageEngine M365 Manager Plus.
Method 2: How to get a list of group owners in Microsoft 365 using Microsoft Graph PowerShell (Get-MgGroupOwner)
Prerequisites
Before using Microsoft Graph PowerShell, please verify that:
- The Groups Administrator or Global Administrator role is applied to the account you use to sign in to Microsoft Graph PowerShell.
- You are connected to the Microsoft Graph PowerShell module.
- To check if the Microsoft Graph PowerShell module is installed, use this script:
Get-Module Microsoft.Graph -ListAvailableIf it does not return a value, you will have to install the module.
- To install the Microsoft Graph PowerShell module, execute this script:
Install-Module Microsoft.Graph -Scope CurrentUser - To connect to Microsoft Graph, run this script:
Connect-MgGraph -Scopes "Group.Read.All","User.Read.All"
- To check if the Microsoft Graph PowerShell module is installed, use this script:
Using Get-MgGroupOwner to export a list of group owners in Microsoft 365
The Get-MgGroupOwner cmdlet is used to retrieve the owners of a specific group in Microsoft 365. To get a comprehensive list of all Microsoft 365 group owners across the tenant, use the following script:
# Get all groups in the organization
$AllGroups = Get-MgGroup -All
$GroupReport = foreach ($Group in $AllGroups) {
# Retrieve all owners for the current group
$Owners = Get-MgGroupOwner -GroupId $Group.Id
foreach ($Owner in $Owners) {
# Fetch owner details (as owners can be users or other service principals)
$OwnerDetails = Get-MgUser -UserId $Owner.Id -ErrorAction SilentlyContinue
[PSCustomObject]@{
GroupName = $Group.DisplayName
GroupType = $Group.GroupTypes -join ", "
MailEnabled = $Group.MailEnabled
SecurityEnabled = $Group.SecurityEnabled
OwnerName = $OwnerDetails.DisplayName
OwnerEmail = $OwnerDetails.Mail
}
}
}
# Export the consolidated list to CSV
$GroupReport | Export-Csv -Path "C:\Reports\All_Group_Owners_$(Get-Date -Format yyyyMMdd).csv" -NoTypeInformation -Encoding UTF8
Supported parameters
The following table contains some parameters that can be used with the Get-MgGroupOwner and Get-MgGroup cmdlets to export a list of group owners in Microsoft 365.
| Parameter | Description |
|---|---|
| DisplayName | The friendly name of the group as shown in the admin center. |
| GroupTypes | Identifies the type of group (Unified for Microsoft 365 groups, DynamicMembership for dynamic Microsoft 365 groups, MailEnabled for mail-enabled security groups, and SecurityEnabled for security groups ). |
| MailEnabled | Boolean value indicating if the group can receive email. |
| SecurityEnabled | Boolean value indicating if the group is a security group. |
Method 3: How to view a list of group owners in Microsoft 365 with M365 Manager Plus
Steps
- Log in to M365 Manager Plus and navigate to the Reports tab > Azure Active Directory > Group Reports and select the Groups with Owner report.
- Select the Microsoft 365 tenant you wish to generate the report for and click Generate Now.
- You can now see the list of groups with their owners displayed in the Managed By column. You can also export the list of group owners in Microsoft 365 by clicking Export As and selecting your desired format.
Streamline Microsoft Entra ID user governance and group management
M365 Manager Plus provides a unified command center for managing the entire life cycle of your Microsoft Entra ID users and groups. Gain instant visibility into group memberships, ownership gaps, and orphaned objects across your tenant. View, manage, and track identity objects across your Microsoft 365 tenant from a single console—without switching between multiple admin portals.
Review and manage Microsoft Entra ID users and group ownership
Easily identify users without managers, groups without owners, inactive accounts, and stale memberships. Assign or update group owners, modify user properties, and clean up unused or risky identities directly from the same interface to maintain accountability and ownership across your directory.
Built-in reports for Microsoft Entra ID users and groups
Access ready-made reports covering user status, sign-in activity, license assignments, group memberships, orphaned groups, and privileged accounts. These reports help you quickly spot inactive users, over-licensed accounts, and groups that lack proper ownership, without manual data collection.
Audit Microsoft Entra ID user and group changes
Track changes made to users and groups, including membership updates, role assignments, license changes, and account status modifications. Audit trails provide clear visibility into who changed what and when, helping you meet security and compliance requirements.
Real-time alerts for critical Microsoft Entra ID events
Configure instant alerts for events such as new admin role assignments, group owner changes, user creation or deletion, and license updates. Stay informed the moment high-impact identity changes occur instead of discovering them during audits.
Automate routine user and group management tasks
Automate common identity operations, such as assigning licenses, updating group memberships, disabling inactive users, or enforcing ownership rules, using policy-based automation. Reduce manual effort while keeping your Microsoft Entra ID environment clean and controlled.
Act without PowerShell dependency
Perform reporting, audits, bulk updates, and corrective actions through a GUI-driven interface—without relying on Microsoft Graph PowerShell scripts. This reduces operational complexity, minimizes errors, and speeds up Microsoft Entra ID administration in just a few clicks.
Important tips
Track group owner changes early: Monitor group membership changes regularly to ensure your groups are not left orphaned without any users or that suspicious users are not made group owners.
Schedule periodic ownership reviews: Automate quarterly or biannual reviews of Microsoft 365 group owners to ensure alignment with current business requirements.
Remove group ownerships during offboarding: Ensure group ownership is reviewed as part of the user offboarding process to prevent former employees from retaining access. You can automate group membership changes as a standard offboarding process with M365 Manager Plus' no-code automation workflows.
Frequently asked questions
Group owners are users who have administrative control over a Microsoft 365 group. They can manage group settings; add or remove members; assign additional owners; and control access to shared resources such as Outlook conversations, SharePoint sites, Teams, and Planner plans.
Yes. Every Microsoft 365 group must have at least one owner. If all owners are removed or leave the organization, the group becomes orphaned and unmanaged until a new owner is assigned.
Yes. A Microsoft 365 group can have multiple group owners, and it is recommended to assign at least two owners to prevent management issues if one owner becomes unavailable.
