如何查找一个用户拥有的所有 Azure AAD 组？

Question

I need to find all the groups owned by an user. I can see all the groups the user is member of, but to find the owner I have to go one by one. On the MS doc, it seems it's possible to filter by "User type" but I don't have that option in the search box. Maybe I miss a permission myself? Or there is another way of doing it?

Answer 1

To find all the Azure AD groups owned by a specific user, you can make use of below PowerShell cmdlet:

Get-AzureADUserOwnedObject -ObjectId xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx | Select-Object ObjectID, ObjectType, DisplayName

I tried to reproduce the same in my environment and got the groups owned by that user successfully like below:

Alternatively , you can also make use of Microsoft Graph Explorer .

Query:

GET https://graph.microsoft.com/v1.0/users/user_object_id/ownedObjects?$select=displayName,ID

Response:

Reference:

Get-AzureADUserOwnedObject (AzureAD) | Microsoft Docs

List ownedObjects - Microsoft Graph v1.0 | Microsoft Docs