Directory groups: list groups with owners, members, and find¶

orphaned groups (no owners or no members).

Also shows dynamic group creation for Entra ID.

Permissions

Requires delegated permission Group.Read.All, Group.ReadWrite.All.

Reference¶

import argparse

from office365.graph_client import GraphClient
from tests.settings import client_id, client_secret, tenant


def main():
    parser = argparse.ArgumentParser(description="List groups with owner/member info and find orphans")
    parser.add_argument("--top", type=int, default=20, help="max groups to scan (default: 20)")
    args = parser.parse_args()

    client = GraphClient(tenant=tenant).with_client_secret(client_id, client_secret)

    groups = client.groups.top(args.top).get().execute_query()
    print(f"Groups ({len(groups)}):")
    orphaned = []
    for g in groups:
        members = g.members.get().execute_query()
        owners = g.owners.get().execute_query()
        has_owners = len(owners) > 0
        has_members = len(members) > 0
        status = "✔" if has_owners and has_members else "⚠" if not has_owners else " "
        if not has_owners or not has_members:
            orphaned.append(g)
        print(f"  {status}  {g.display_name:35s}  owners: {len(owners):2d}  members: {len(members):3d}")

    if orphaned:
        print(f"\nOrphaned groups ({len(orphaned)}):")
        for g in orphaned:
            print(f"  ⚠ {g.display_name}")


if __name__ == "__main__":
    main()

← Back to Entra ID Groups