How to get Microsoft Entra ID user-created objects using Get-MgUserCreatedObject

Getting Microsoft Entra ID user-created objects

IT admins are often tasked with generating user-created objects lists for compliance and audit purposes. While Graph PowerShell's Get-MgUserCreatedObject command, an alternative to the Get-AzureADUserAppCreatedObject command, can be used to obtain and export Microsoft Entra ID user-created objects and their details, its complexity and non-intuitive interface make it a challenging option. On the other hand, ADManager Plus, a Microsoft 365 management and reporting tool, simplifies the process, allowing admins to quickly generate and export user-created objects reports in just a few clicks.

  • ADManager Plus
  • PowerShell
 

List Microsoft Entra ID user-created objects using ADManager Plus

  1. Log in to ADManager Plus and navigate to Microsoft 365 > Reports > User Reports.
  2. Under General User Reports, click User Created Objects.
  3. Select the desired Microsoft 365 tenant from the Microsoft Tenant drop-down list.
  4. Select the desired groups or domains whose users you would like to fetch in the Filter By pop-up and click Generate.
Get Microsoft Entra ID user created objects using ADManager Plus' predefined reports
 
 

Export reports in multiple formats, including HTML, CSV, and PDF.

 
 

Schedule automatic report generation.

Get Microsoft Entra ID user-created objects using Microsoft Graph PowerShell

Prerequisites

Before using the Get-MgUserCreatedObject cmdlet, ensure the following:

  • The Microsoft Graph PowerShell module is installed. If not, install it using this script:
    Install-Module Microsoft.Graph -Scope CurrentUser
  • Connect to Microsoft Graph PowerShell with the required permissions to fetch Microsoft Entra ID user-created objects with this script:
    Connect-MgGraph -Scopes "User.Read.All"

Using the Get-MgUserCreatedObject command to get Microsoft Entra ID user-created objects

The Get-MgUserCreatedObject cmdlet can be used in Microsoft Graph PowerShell to fetch Microsoft Entra ID user-created objects. Here's the syntax:

Get-MgUserCreatedObject
-UserId <String>
[-ExpandProperty <String[]>]
[-Property <String[]>]
[-Filter <String>]
[-Search <String>]
[-Skip <Int32>]
[-Sort <String[]>]
[-Top <Int32>]
[-ResponseHeadersVariable <String>]
[-Headers <IDictionary>]
[-PageSize <Int32>]
[-All]
[-CountVariable <String>]
[-ProgressAction <ActionPreference>]
[<CommonParameters>]

An example use case using the Get-MgUserCreatedObject cmdlet

Listing all the directory objects created by particular user

Get-MgUserCreatedObject -UserId <'user_id'>

In this command, replace user_id with the user's ID for whom you would like to list all the user-created objects.

Supported parameters

The following table contains some parameters that can be used along with the Get-MgUserCreatedObject command to fetch Microsoft Entra ID user-created objects efficiently.

Parameters Description
-All This parameter retrieves all user-created objects without default pagination limits.
-Filter This parameter filters user-created objects based on attributes and values.
-UserId This parameter retrieves user-created objects based on their unique identifiers, such as user principal name or object ID.
-Property This parameter retrieves specific attributes of user-created objects.

Limitations of using Graph PowerShell scripts to get Microsoft Entra ID user-created objects

  • Graph PowerShell requires IT admins to upgrade from Azure AD PowerShell and have familiarity with PowerShell scripting.
  • The Microsoft Graph API imposes throttling limits, which may affect performance when fetching user-created objects in bulk.
  • The scripts may require extra effort to format and export data for reporting purposes.
  • Technical expertise is needed to troubleshoot errors.
  • The lack of an intuitive interface makes the overall experience less user-friendly, particularly for those new to scripting.

Highlights of using ADManager Plus to get Microsoft Entra ID user-created objects

  • Intuitive interface that streamlines the report generation process.
  • Comprehensive and customizable reports with options to schedule and automate report generation.
  • Supports on-the-fly management actions to manage users instantly.
  • Optimized for large-scale environments and does not require any scripts for bulk operations.
  • Delegate tasks to technicians without elevating their native privileges.
  • Keep a watchful eye on your IT environment with more than 200 pre-packaged reports.
  • Export reports in various formats, such as CSV or HTML, in a few clicks.

Get the Microsoft Entra ID user--created objects list effortlessly with ADManager Plus

 
  • Fetch Microsoft Entra ID user-created objects using ADManager Plus
  • Get Microsoft Entra ID user-created objects using Microsoft Graph PowerShell
  • Limitations of using Graph PowerShell scripts to get Microsoft Entra ID user-created objects
  • Highlights of using ADManager Plus to get Microsoft Entra ID user-created objects
The one-stop solution to Active Directory Management and Reporting
Email Download Link