Get-MgGroupMemberOfAsGroup Cmdlet

i) What is Get-MgGroupMemberOfAsGroup?

Get-MgGroupMemberOfAsGroup is a Microsoft Graph PowerShell cmdlet used to retrieve groups that a specific group is a member of.

In simple terms, it helps you identify nested group memberships where one group is part of another group.

ii) Why Use MgGroupMemberOfAsGroup?

• Identify nested group relationships
• Audit group-to-group access structure
• Troubleshoot permission inheritance issues
• Understand hierarchical group design in large environments

iii) Prerequisites

• Install Microsoft Graph PowerShell module:

Install-Module Microsoft.Graph -Scope CurrentUser

• Connect to Microsoft Graph:

Connect-MgGraph -Scopes "Group.Read.All"

iv) Required API Permissions

Permission Type	Permissions
Delegated	Group.Read.All
Application	Group.Read.All

Ensure admin consent is granted for application permissions.

v) How to use MgGroupMemberOfAsGroup?

Syntax

Get-MgGroupMemberOfAsGroup [-GroupId <String>]

• Security: Misconfigured permissions can expose sensitive data. Always follow least-privilege principles.
• Compliance: Ensure apps meet organizational and regulatory standards (GDPR, HIPAA).
• Maintenance: Tokens, secrets, and certificates must be rotated regularly.
• User Experience: Poorly designed redirect URIs or login flows can frustrate users.

vi) Usage Examples

1. Entering GroupID When Prompted by PS Console

Get-MgGroupMemberOfAsGroup

2. Passing GroupID Parameter Directly

Get-MgGroupMemberOfAsGroup -GroupId efba43ca-ff99-4f70-b2c5-a97e9dbb75d2

Retrieves all groups that the specified group is a member of (nested group memberships).

3. Selecting Only Specific Group Member Properties

Get-MgGroupMemberOfAsGroup -GroupId efba43ca-ff99-4f70-b2c5-a97e9dbb75d2 | Select DisplayName,Id

4. Exporting Group Membership Details to CSV

Get-MgGroupMemberOfAsGroup | Export-CSV "D:/groups_group_is_direct_member_of.csv"