Skip to content

Entra ID Groups

The question it answers: Which groups exist in the directory, how many members do they have and are they synchronised or licensed?

Where in the appEntra ID › Groups › All Groups
WorkloadEntra ID
KindTable
DataBuilt from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once.
LicenceNo extra licence needed.
Report id (API and MCP)entra.groups.all
ColumnKeyType
Display NameDisplayNameLink
DescriptionDescriptionText
MembersMembersCountNumber
Expiration Date TimeExpirationDateTimeDateTime
Security GroupSecurityEnabledYesNo
SynchronisedOnPremisesSyncEnabledYesNo
Assigned LicencesAssignedLicensesStringText
Membership RuleMembershipRuleText

Licence: No extra licence needed.

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
Group.Read.AllMicrosoft GraphRead all groups
Data sources it reads
  • GET /v1.0/groups?$expand=members
  • GET /v1.0/groups?$expand=owners
GET /ir-api/v1/reports/entra.groups.all?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.groups.all. The client needs the Read grant for Entra ID. See Using the API.