Get-AzAdGroupMember -select doesn't return user properties

[plmcgrn]

Description

When using Get-AzAdGroupMember with the -select parameter, the returned results do not contain the user properties requested. When I test this using the beta API directly, it does return the fields properly.

This is the same as Issue #17503 , which was auto-closed without a fix. The MS Graph API being used is a beta API that includes all this data, so it should be supported. Also, I noted that the comment linking to the supported properties isn't accurate. If I do -Select mail, I get no data from the cmdlet even though that property is in the raw API response.

Issue script & Debug output

$id = 'redacted'
$userProps = "id", "displayName", "mail"
$users = Get-AzADGroupMember -GroupObjectId $id -Select $userProps

Can't provide output without redacting to the point of irrelevance.  I confirmed that all 3 properties were part of the response from the Graph API.

Environment data

Name                           Value
----                           -----
PSVersion                      7.2.0
PSEdition                      Core
GitCommitId                    7.2.0
OS                             Darwin 21.6.0 Darwin Kernel Version 21.6.0: Mon Aug 22 20:20:05 PDT 2022; root:xnu-8020.140.49~2/RELEASE_ARM64_T8…
Platform                       Unix
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Module versions

ModuleType Version    PreRelease Name                                ExportedCommands
---------- -------    ---------- ----                                ----------------
Script     2.10.1                Az.Accounts                         
Script     6.2.0                 Az.Resources

Error output

No relevant errors returned

[dingmeng-xue]

@VeryEarly ， please help to look into it.

[RakeshMohanMSFT]

@plmcgrn Can you please trying upgrading the modules as shown below?

[ghost]

Thank you for your feedback. This has been routed to the support team for assistance.

[plmcgrn]

@plmcgrn Can you please trying upgrading the modules as shown below?

Az.Account updates to 2.10.2 but Az.Resources updates to 6.2.0 not 6.3.0, for me.

redacted> get-module Az*                                                 

ModuleType Version    PreRelease Name                                ExportedCommands
---------- -------    ---------- ----                                ----------------
Script     2.10.2                Az.Accounts                         {Add-AzEnvironment, Clear-AzConfig, Clear-AzContext, Clear-AzDefault…}
Script     6.2.0                 Az.Resources                        {Export-AzResourceGroup, Export-AzTemplateSpec, Get-AzDenyAssignment, Get-A…

Regardless, retrying gives same results.

$userProps = "id", "displayName", "givenName", "country"
$id = 'redacted'
$gm = Get-AzAdGroupMember -GroupObjectId $id -Select $userProps

The results do not contain givenName or country.

[RakeshMohanMSFT]

@plmcgrn Its actually as designed. You can use this command as a work around to get the GivenName and country
Get-AzADGroupMember -ObjectId a5819190-0f06-45c6-bcf2-434a119225ed | where-object {$_.OdataType.Contains("user")} | foreach-object {Get-AzADUser -ObjectId $_.Id -Select Id,displayName,userPrincipalName}

[ghost]

Hi @plmcgrn. Thank you for opening this issue and giving us the opportunity to assist. We believe that this has been addressed. If you feel that further discussion is needed, please add a comment with the text “/unresolve” to remove the “issue-addressed” label and continue the conversation.

[ghost]

Hi @plmcgrn, since you haven’t asked that we “/unresolve” the issue, we’ll close this out. If you believe further discussion is needed, please add a comment “/unresolve” to reopen the issue.

[PSdasAndi]

@RakeshMohanMSFT I don't understand this. If this is as designed, then why does Get-AzGroupMember have "-Select" as a parameter? Will the parameter be removed from the cmdlet? /unresolve

Also, your example is Get-AzADGroupMember -ObjectId, the documentation only has -GroupObjectId.
Will that change in the future?

[plmcgrn]

/unresolve
"As designed" is s cop-out. Either -select is supported, or it's not. If not, remove it from the cmdlet.

[RakeshMohanMSFT]

@PSdasAndi @plmcgrn Let me involve the service team to address this concern.

[ghost]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @adamedx.

Issue Details

---

Description

When using Get-AzAdGroupMember with the -select parameter, the returned results do not contain the user properties requested. When I test this using the beta API directly, it does return the fields properly.

This is the same as Issue #17503 , which was auto-closed without a fix. The MS Graph API being used is a beta API that includes all this data, so it should be supported. Also, I noted that the comment linking to the supported properties isn't accurate. If I do -Select mail, I get no data from the cmdlet even though that property is in the raw API response.

Issue script & Debug output

$id = 'redacted'
$userProps = "id", "displayName", "mail"
$users = Get-AzADGroupMember -GroupObjectId $id -Select $userProps

Can't provide output without redacting to the point of irrelevance.  I confirmed that all 3 properties were part of the response from the Graph API.

Environment data

Name                           Value
----                           -----
PSVersion                      7.2.0
PSEdition                      Core
GitCommitId                    7.2.0
OS                             Darwin 21.6.0 Darwin Kernel Version 21.6.0: Mon Aug 22 20:20:05 PDT 2022; root:xnu-8020.140.49~2/RELEASE_ARM64_T8…
Platform                       Unix
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Module versions

ModuleType Version    PreRelease Name                                ExportedCommands
---------- -------    ---------- ----                                ----------------
Script     2.10.1                Az.Accounts                         
Script     6.2.0                 Az.Resources

Error output

No relevant errors returned

Author:	plmcgrn
Assignees:	-
Labels:	AAD, Service Attention, bug, customer-reported, needs-team-attention, CXP Attention
Milestone:	-

[adamedx]

@RakeshMohanMSFT , not sure how I can help. Do you know who owns this command? I can certainly give advice as to how to debug the request being made to the API, but I have not made contributions to this or any Azure modules. Feel free to ping me out of badn @RakeshMohanMSFT .