1

Okay kind of going insane here.

I’m trying to get devices from a security group of users into a new security group for devices.

Seems easy. Use mg-graph Powershell commandlet to pull the group members down, query the devices for each member. Easy.

Now how to add them to the group? First thought even though it’s more work was just to use the bulk import method in the GUI. Add the exported AzureADDeviceID property to the spreadsheet, upload… failed. What? Oh right, every object has two different IDs and that’s the wrong one. Add the exported object ID to the spreadsheet instead, fail. Oh yeah there’s three different IDs…

How to get the actual Object ID, which is what everything needs to manipulate objects in Azure? Oh that’s just not accessible via the graph cmdlets. But it’s also the only way accepted to do bulk actions to devices, including the new-mggroupmember cmdlet.

What the hell is Microsoft smoking… anyone have an obvious solution here that I’m missing?

2

You definitely want the objectID. Not sure off the top of my head how to get it with graph, I can test tomorrow, but the older method would be to connect to azuread and run

(Get-AzureADDevice -searchstring “Computername”).objectid

You could do that against a computer, and compare the value to what’s returned by graph to see which property you need.

1 Spice up