🎉 Our Office 365 Reporting Tool is now available in Azure Marketplace 🚀
This website uses cookies to improve your experience. We'll assume you're ok with this. Know more.

How to Export Microsoft 365 Groups Report

Microsoft 365 groups facilitate collaboration between users and guests across organizations. Users can create, modify, and manage different types of groups and their memberships whenever needed. This guide focuses on exporting Microsoft 365 group reports within your organization. These reports are crucial to manage bulk groups, facilitate monitoring, and ensure seamless group management within Office 365.

Native Solution

Microsoft 365 Permission Required

High

Global Admin, Groups Admin or User Admin.

Option 1 Using Microsoft 365 Admin Center

  • Login to the Microsoft 365 admin center with an admin credentials.
  • Navigate to Active Teams & groups resided under 'Teams and groups' to view the groups created in the organization.
  • Click on the required group, and view the list of group members displayed on the 'Membership' page.
Using Microsoft 365 Admin Center

Option 2 Using Microsoft Entra Admin Center

  • Login to the Microsoft Entra admin center.
  • Navigate to the respective group residing under Identity» Groups»All groups.
  • To display the group members, click on the required group to view its members.
Using Microsoft Entra Admin Center

Option 3 Using Windows PowerShell

  • Connect to the Microsoft Graph in Administrator PowerShell.
  • #Run the below cmdlet to retrieve all groups list along with the group types.
    Connect-MgGraph
    Get-MgGroup
Using Windows PowerShell

Option 4 Using PowerShell Script

  • Retrieving both Microsoft 365 groups and their members with simple PowerShell cmdlets is challenging.
  • To address this, we have developed a PowerShell script that efficiently extracts the Microsoft 365 groups' details with their membership information.
  • Download and run the following script in the Administrator PowerShell.
Using PowerShell Script
AdminDroid Solution
This report and 150+ more reports are under free editionFREE

AdminDroid Permission Required

Any user with report access delegated by the Super Admin.

StepsUsing AdminDroid

ad
  • Login to the AdminDroid Office 365 portal.
  • Navigate to All Groups report resided under Reports» Azure AD»Group reports.
Using AdminDroid

Discover your Azure AD groups with an intuitive groups dashboard – a feature that is often lacking in native Microsoft 365 solutions.

ad-groups-dashboard
  • Enhance Microsoft 365 group administration with our group reports collection, providing insightful visualizations and highlighting top users across distribution lists, security groups, and other group types.

Bid farewell to complex Graph PowerShell scripts!

Admins often struggle to retrieve detailed group membership reports using admin centers and PowerShell. To simplify the process, AdminDroid offers a comprehensive guide to get the user group membership report in Microsoft 365.

  • A detailed walkthrough of your Azure AD users and their group memberships with practical tips and tricks.
  • It also provides clear steps for effective group management, such as implementing a Microsoft 365 group expiration policy and monitoring group-based license assignments.

Mastering Microsoft 365 Group Management!

Elevate your Microsoft 365 groups monitoring to new heights by taking an in-depth dive into AdminDroid's Microsoft 365 group reports.

Witness the report in action using the

Azure ADKeep an Eye on Groups Usage Reports in Microsoft 365

Showing 1 of 7

What are the different types of groups in Microsoft 365?

Microsoft 365 groups offers a centralized platform for team collaboration, enabling seamless information sharing and streamlined workflows. The different groups in Microsoft 365 include:

  • Microsoft 365 Groups: This type of group serves as a foundation for collaboration across Microsoft applications such as Teams, SharePoint, Outlook, etc. They provide a shared workspace where team members can easily access and work on common documents, calendars, and files.
  • Security Groups: These groups simplify access control by allowing admins to assign permissions to a group rather than individual users.
  • Distribution Groups: This type of group is primarily used for sending emails to multiple recipients at once. When an email is sent to a distribution group, it is delivered to all members of the group.
  • Mail-enabled Security Groups: These groups combine the features of security groups and distribution groups. They can be used for both access control and email distribution purposes.

Each group type serves a specific function and can be utilized based on the unique needs of your Microsoft 365 environment.

While Microsoft provides basic information about Microsoft 365 groups, its built-in tools fail to offer the comprehensive customization, and filtering capabilities required for effective group management.

  • However, AdminDroid gives essential information about all types of Microsoft 365 groups, including empty groups, nested groups, group members details, group size, etc.
  • We recommend utilizing the 'Quick Schedule⏰' feature which periodically sends the report to your inbox. Set the schedule frequency and save the scheduler with a name right from the respective report.
allgroups-report​

You can also see the overview of created schedulers by navigating to the 'Schedule Reports' page in your AdminDroid portal.

How to view groups in Microsoft 365?

Understanding how to view and manage Microsoft 365 groups allows admins to enhance teamwork, streamline resource sharing, and ensure secure data management within groups.

To list all groups in Entra ID using PowerShell,

  • Connect to Azure AD using your administrative credentials.
    Connect-AzureAD
  • To view all Microsoft 365 groups in your organization, run the below cmdlet.
    Get-AzureADGroup -All $true
  • To view the ‘Security groups’ in your Microsoft 365 environment, run the below cmdlet.
    Get-AzureADGroup -All $true | Where-Object {$_.SecurityEnabled -eq $true} 
  • To view the ‘Distribution list’ in your Microsoft 365 environment, run the below cmdlet.
    Get-AzureADGroup -All $true | Where-Object {$_.MailEnabled -eq $true}

AdminDroid: The key to monitoring your Microsoft 365 groups at ease.

Stay on top of groups reporting with the help of Microsoft 365 groups dashboard. Manage Entra ID groups in a single place efficiently.

  • Gain unparalleled insights and simplify Entra ID group management with detailed reports on Microsoft 365 groups. These reports encompass various aspects such as group members, group activities, Azure AD cloud groups, empty groups, and the groups size.
groups-dashboard

How to upgrade distribution list to Microsoft 365 group?

Distribution lists in Microsoft 365 are designed for email communication, while Microsoft 365 groups offer a collaborative space with shared resources, including inbox, calendar, files library, and more. Upgrading distribution lists to Microsoft 365 groups provides flexible collaboration, offering enhanced data control, permissions, and management.

Upgrade your distribution list to a Microsoft 365 group easily by following the steps:

  • Login to your Exchange Online admin center and navigate to the Groups page located under the Recipients section.
  • Select the distribution list you want to upgrade from the Distribution list section and click on the Change group type option. You will then be able to send an upgrade request to the group owner.
  • Once the group owner accepts the request, the distribution group will be upgraded to a Microsoft 365 group.

As we all know, managing many Microsoft 365 groups poses challenges. Even, Entra ID audit logs fall short in retaining data beyond a month, monitoring groups reports becomes more complex.

AdminDroid Microsoft 365 Group auditing: Uplifting group governance and security.

AdminDroid Office 365 group auditing provides vital visibility into group operations, empowering organizations to enhance governance and security. Admins can closely monitor and analyze Microsoft 365 group activities, ensuring prompt detection and response to security threats.

With AdminDroid, admins can track all groups usage activities, such as group creations, modifications, deletions, group setting changes, and license adjustments.

groups-audit

Moreover, when AdminDroid is continuously running, it accumulates data every day. The collected data is stored indefinitely, so you can access the data anytime.

How to add users to a dynamic distribution group in Microsoft 365?

Dynamic distribution groups continuously monitor user properties and update their group membership automatically. This ensures that only authorized users have access to specific resources, eliminating the need for manual addition and enhancing security.

By setting up dynamic rules, you can ensure that users are automatically added or removed from groups, streamlining access control and simplifying group management.

  • In the Microsoft 365 Entra admin center, navigate to Identity portal»Groups»All groups.
  • Click New Group and choose Dynamic User in the Group type field.
  • Enter your group name, add a description, and click Add dynamic query in the Dynamic user members’ section.
  • In the Rule syntax field, specify the group membership criteria. For example, you could enter the following rule to add all users with the department 'Marketing' to the group:

    Department equals Marketing

  • Click Save.

Now, Microsoft 365 automatically assesses membership rules, adds users who meet criteria and removes users no longer qualify for Microsoft 365 dynamic distribution groups. This streamlines membership updates, simplifying access and permission management in your organization.

Simplify Microsoft 365 dynamic distribution groups auditing with AdminDroid.

Use the dedicated Dynamic Distribution Groups report resided under Reports» Exchange» Exchange Groups to get the list of all dynamic distribution groups.

With AdminDroid's simple filter option, effortlessly track member additions and removals from dynamic distribution groups.

  • By using the All Group Operations report, you may find the group operations such as group license changes, group member changes, and more.
  • Set filter as ServicePrincipal to check dynamic group memberships using the steps followed in the screenshot.
  • Utilize the Quick Alert 🔔 feature at the top of the report to set up an alert and get instant notifications for dynamic user additions or removals.
group-operation-serviceprincipal

How to create nested groups in Microsoft Entra admin center?

Nesting groups in Azure Active Directory is a way to organize and manage users with similar access rights and permissions efficiently. By creating parent and child groups, you can establish a hierarchical structure that simplifies the administration of users and resources.

To nest groups through Entra ID:

  • Discover Group Management: Navigate to Microsoft Entra admin center»Identity portal»Groups»All Groups to list all groups or to create new groups and access permissions.
  • Identify Parent and Child Groups: Decide the group that will serve as the parent group and the child group based on their roles and permissions.
  • Configure Child Group Permissions: Set the necessary access and permissions for the child group, allowing it to perform specific tasks or access certain resources.
  • Set Parent Group Permissions: Assign permissions to the parent group, which will automatically be inherited by the child group, ensuring consistent access across both groups.
  • Add Members to Nested Groups: Include individual users or other groups as members to the groups.
  • Nest Child Group into Parent Group: By adding the child group as a member to the parent group, it acquires its own permissions while inheriting the privileges of the parent group.

By nesting groups in Azure Active Directory, you can create a structured and flexible permission model. When you assign permissions or access rights to the parent group, they automatically apply to all the members of the child groups, simplifying administration and maintaining uniform access control for multiple users and resources.

Strategic Group Management: Groups can inadvertently grant access if not thoughtfully managed!

  • AdminDroid simplifies the monitoring of nested groups in Microsoft 365 by providing comprehensive nested group details effortlessly and efficiently.
  • The dedicated nested group report displays the parent group name, nested group email address, group type along with the total members count.
nested-groups-report

What happens if the Microsoft 365 group owner left?

Orphaned Microsoft 365 groups often experience management issues, where no one is responsible to oversee the group's activities, resulting in unattended requests and unresolved issues. Also, if group permissions are not regularly updated or monitored, unauthorized actions may occur when attempting to access resources.

To avoid these challenges, it is crucial to assign a new owner to the ownerless Microsoft 365 group and periodically review group ownership to ensure effective management, proper access control, and seamless collaboration within the group.

How to manage ownerless Microsoft 365 groups?

  • Navigate to the Microsoft 365 admin center, click Settings»Org settings, and on the Services tab, select Microsoft 365 Groups.
  • Under Ownerless groups, select the ‘When there's no owner, email and ask active group members to become an owner’ check box. Now, configure the following settings:
  • Sender: The email address that will be used to send notifications to active group members.
  • Frequency: You can choose to send notifications weekly, biweekly, or monthly.
  • Number of notifications: The number of notifications that will be sent to each active group member.
  • Security group: If you want to limit owner invites from the specific Microsoft 365 group, you can select a security group.
native-ownerless-group-policy

With AdminDroid, effortlessly track ownerless groups across Microsoft 365.

Insufficiently managed orphaned Microsoft Teams can lead to inefficiency in organizational operation and making it difficult to maintain group governance.

Gain insights into unmanaged groups, allowing you to take timely actions and assign new owners to respective groups in Microsoft Teams.

  • AdminDroid helps to monitor ownerless Microsoft teams by navigating to the 'Teams Without Owners' report under Reports»Teams»Teams Membership when the group owner has left the organization.
ownerless-teams-report

How to optimize Microsoft 365 group management?

Microsoft 365 groups are a powerful tool for communication, but they can also be a security risk if they are not managed properly. Here are some tips for managing Microsoft 365 groups effectively.

  • Use Groups for Specific Purposes: Groups should be used for specific purposes, such as project teams, departments, or communities of interest. This will help to keep Microsoft 365 groups organized and manageable.
  • Set Clear Permissions for Groups: Make sure that users only have the necessary permissions to access the resources in a group. This will help to protect sensitive data and prevent unauthorized access.
  • Use Group Policies to Manage Groups: By utilizing Microsoft 365 group policy, you can control group settings, including who can create new groups, add user permissions, and check the group expiration dates.
  • Monitor Group Activity: It is important to monitor Microsoft 365 group activity to ensure that groups are being used appropriately. This includes monitoring group membership changes, tracking resource access, and observing activities within these groups.
  • Delete Inactive Groups: Delete inactive Microsoft 365 groups from your tenant regularly to ensure that your group list is up-to-date and efficient.

Keep your group environment organized and purposeful by regularly deleting inactive Microsoft 365 groups.

Uncover Microsoft 365 group details with unprecedented precision!

  • Retrieve granular insights into all Microsoft 365 groups, encompassing usage patterns, storage consumption, and hidden membership details.
  • Get to know more about your Microsoft 365 groups by navigating to Reports» General»Office 365 Groups.
office365-groups

By leveraging AdminDroid, you can easily monitor groups and their memberships to maximize the effectiveness of your Microsoft 365 environment.

AdminDroid Azure AD AuditingElevate your Microsoft 365 groups to new heights!

AdminDroid's Microsoft 365 group auditing tool simplifies the work of admins by providing an easy-to-use interface that enables to view group membership & group operations and enhance monitoring with minimal navigation.

Why should you utilize AdminDroid Microsoft 365 reporter for Entra ID group management?

The All Groups report located within Reports»Azure AD»Group reports, presents a comprehensive overview of all Microsoft 365 groups, including group membership details for streamlined analysis and management. Conversely, the All Users Group Membership report, resided under Reports»Azure AD»User Reports, retrieves the groups to which users belong.

A Quick Summary

Monitoring Exchange Online Groups with Ease

Simplify monitoring dynamic distribution groups by setting up a quick schedule that keeps you informed at any time.

Efficient Microsoft Groups Management

Explore overall storage used by groups, identify groups with hidden membership, and monitor Office 365 groups' usage trends for effective management and coordination.

Simplifying Microsoft 365 Groups

Explore your groups' activities with Microsoft 365 Groups dashboard, revealing valuable insights into day-to-day group operations in your organization.

Get Alerted on Group License Changes

Effortlessly export and create alerts for Microsoft 365 group license changes. Receive alerts whenever a user is added or removed from the licensed groups.

Effortless Distribution Lists Monitoring

Enhance efficiency by seamlessly tracking and receiving updates on new users added to distribution lists.

Group Audit Updates in Simple Clicks

Stay updated on Microsoft 365 group operations to proactively address potential risks and ensure a robust security.

AdminDroid empowers Microsoft 365 admins to effectively manage groups, providing comprehensive oversight of group setting changes, policy adjustments, and license changes. This granular control ensures that admins maintain a firm grip on group management within their Microsoft 365 environment.

Kickstart Your Journey with AdminDroid

Your Microsoft 365 Companion with Enormous Reporting Capabilities!

Common Errors and Resolution Steps in Monitoring and Managing Microsoft 365 Groups

The following are possible errors and troubleshooting hints while dealing with Microsoft 365 group management.

Error: Some groups require your attention.

This error appears when trying to assign or retrieve group licensing through the Microsoft Entra ID portal.

Troubleshooting hint :To address this error, attempt to sign-in again to your Azure AD portal.

Error: The distribution list <group name> is not eligible for an upgrade.

This error occurs when an admin is trying to upgrade the distribution group to a Microsoft 365 group.

Troubleshooting hint :To resolve this error, verify that the distribution list is a cloud-managed, simple, non-nested distribution list.

Get-EligibleDistributionGroupForMigration

Error: Resource <ObjectID> does not exist or one of its queried reference-property objects are not present.

An error message is encountered when retrieving group members using the 'Get-MgGroupMember' cmdlet.

Troubleshooting hint :To resolve this error, check whether the object ID of the group is correct. Get the ObjectID of using the below cmdlet.

Get-MgGroup

Error: The Microsoft Graph Beta module is unavailable. It is mandatory to have this module installed in the system to run the script successfully.

An error message will appear if you attempt to execute the PowerShell script without first installing the Microsoft Graph Beta module.

Troubleshooting hint :To resolve this error, you must install the Microsoft Graph Beta module of PowerShell.

Install-Module Microsoft.Graph.Beta -Scope CurrentUser –AllowClobber

Error: .\M365GroupReport.ps1 cannot be loaded because running scripts is disabled on this system.

This error occurs when trying to run the script. The execution policy is set to "strict" by default to prevent scripts from running.

Troubleshooting hint :To resolve this error, you can set the execution policy to run the script.

Set-ExecutionPolicy -ExecutionPolicy RemoteSigned
or
Set-ExecutionPolicy -ExecutionPolicy Unrestricted