List groups that a M365 group is a member of

linnkubler · 2021-08-10T21:25:02.000Z

Hi,

We sometimes have groups that have groups as members. I am trying to figure out how to determine all groups a given group is a member of, if any.

Searching around I found some suggestions on how to determine the groups a user belongs to but not groups.

One thing that is confusing me is that one example I found uses the cmdlet, Get_UnifiedGroup and Get-UnifiedGroupLinks. But I can’t find them on my system, what I find is Get-PNPUnifiedGroup but no Get-PNPUnifiedGroupLinks. So what module do I have to install to pick these up?

We are using Exchange Online.

Any suggestions are greatly appreciated.

Neally · 2021-08-10T21:34:48.000Z

When you connect to Exchange online, you can not use ‘Get-UnifiedGroup’ ?

learn.microsoft.com

Get-UnifiedGroup (ExchangePowerShell)

Microsoft 365 Groups are group objects that are available across Microsoft 365 services. You need to be assigned permissions before you can run this cmdlet. Although this topic lists all parameters for the cmdlet, you may not have access to some...

How do you connect to Exchange online? Which version of the modules are you using?

If you post code, please use the ‘Insert Code’ button. Please and thank you!

PLEASE READ BEFORE POSTING! Read if you're new to the PowerShell forum! Programming & Development

Hi, and welcome to the PowerShell forum! Don’t apologize for being a “noob” or “newbie” or “n00b.” There’s just no need – nobody will think you’re stupid, and the forums are all about asking questions. Just ask! Use a descriptive subject. Don’t say “Need help” or “PowerShell Help”, actually summarize what the problem is. It helps the rest of us keep track of which problem is which. Don’t post massive scripts. We’re all volunteers and we don’t have time to read all that, nor will we copy…

linnkubler · 2021-08-10T22:06:23.000Z

Hi Neally,

Thanks for the response. I’m doing all of this inside the ISE, building a script file. When I type ‘Get-UnifiedGroup’ intellisense takes me straight to ‘Get-PNPUnifiedGroup’. It is like ‘Get-UnifiedGroup’ isn’t installed on my system.

That is all before I’ve even tried running the script. To connect to Exchange Online I’ve been using either ‘Connect-ExchangeOnline’ or ‘New-PSSession’ and ‘Import-Session’. Depending my needs and what approach I’ve gleaned from Google searches.

I’m running PowerShell 5.1.19041.1023 and running EXO V2. Anything I’m missing?

So at this point I’m still a bit of a blank slate as I haven’t got enough code to even bother trying to run it, so I won’t bother posting anything here now.

I’ll continue the search in the morning, but if you have any other thoughts that could point me in the right direction I’d appreciate it.

Thanks!

Neally · 2021-08-10T22:57:24.000Z

Have you tried the cmdlet AFTER you connect to Exchange?

afaik those cmdlets are only available when you are connected to exchange online.

So connect to Exchange

$Session = 
New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $Cred -Authentication Basic -AllowRedirection
Import-PSSession $Session

once you import the session, the imported module should hold the cmdlet.

03e8b25b-164e-4b1a-acd2-7f8a5dcbf22d-2021-08-10_17-55-37.png800×333 150 KB

linnkubler · 2021-08-11T11:13:12.000Z

No, I had not tried it after connecting, but yes that does do the trick. Now that I have that working I realize I was looking for the wrong thing. I was looking for groups but what I am actually interested in are distribution lists. But that was easy enough to decipher with a quick search.

So I have some code that I think works but it throws an error. Here’s the line of code I’m using:

Get-DistributionGroup | where { (Get-DistributionGroupMember $_.Name | foreach {$_.PrimarySmtpAddress}) -contains "distributionlist@mydomain.com"}

It ran and returned one hit before throwing an error:

“The operation couldn’t be performed because ‘Enteral’ matches multiple entries.”

We only have one list called ‘Enteral’ so I’m not certain what it is looking at and I’m not sure if this error stopped the code from processing any more groups or if it just reported the error and moved on to the remainder of the groups? Only thing I can think of is that there is also a unified group (security group?) with a display name of ‘Enteral’. Not sure if that is causing confusion or not.

Thanks for the tip though!