Skip to content

Entra ID Groups Containing Guests

The question it answers: Which groups have guests among their direct members, and how many?

Where in the appEntra ID › Groups › Groups Containing Guest Users
WorkloadEntra ID
KindTable
DataBuilt from the tenant data IntensiveReports keeps in memory and refreshes in the background, so it opens at once.
LicenceNo extra licence needed.
Report id (API and MCP)entra.groups.with-guests
ColumnKeyType
Display NameDisplayNameText
DescriptionDescriptionText
Guest CountGuestCountNumber
Group IDObjectIdText

Licence: No extra licence needed.

Application permissions on the IntensiveReports app registration (all permissions):

PermissionAPIWhat it allowsNote
User.Read.AllMicrosoft GraphRead all users’ full profiles
User-LifeCycleInfo.Read.AllMicrosoft GraphRead all users’ lifecycle information
Group.Read.AllMicrosoft GraphRead all groups
Data sources it reads
  • GET /v1.0/users
  • GET /v1.0/groups?$expand=members
  • GET /v1.0/groups?$expand=owners
GET /ir-api/v1/reports/entra.groups.with-guests?size=100

An AI assistant reads it with the MCP tool get_report and the id entra.groups.with-guests. The client needs the Read grant for Entra ID. See Using the API.