Using Remove-MgGroup in Graph PowerShell

This guide demonstrates how to use the Remove-MgGroup cmdlet in Microsoft Graph PowerShell to delete Microsoft 365 groups. Learn how to delete single or multiple groups with practical examples.

Managing Microsoft 365 Groups efficiently is crucial for maintaining a streamlined and secure organizational structure. The Remove-MgGroup cmdlet in Graph PowerShell allows administrators to delete Microsoft 365 groups. This article will guide you through the prerequisites, syntax, usage examples, tips, and common errors associated with the Remove-MgGroup cmdlet.

Prerequisites

• Install Graph PowerShell Module by running the following command:

  Install-Module Microsoft.Graph -Scope CurrentUser

• Microsoft 365 Global Admin or Groups Admin Role: You should also possess the global admin or groups admin role.
• Group.ReadWrite.All Graph API Permission: You need Group.ReadWrite.All Graph API permission to use this cmdlet.
• Connect to Microsoft Graph by running the following command:

  Connect-MgGraph -Scopes "Group.ReadWrite.All"

Cmdlet Syntax

Remove-MgGroup -GroupId <String> [-WhatIf] [-Confirm] []

• -GroupId <String>: Specifies the ID of the group you want to remove.
• -WhatIf: Shows what would happen if the cmdlet runs. The cmdlet is not executed.
• -Confirm: Prompts for confirmation before running the cmdlet.

Usage Examples

Example 1: Remove a Group by ID

Removing a group by passing the Group ID.

Remove-MgGroup -GroupId "12345678-90ab-cdef-1234-567890abcdef"

Example 2: Remove a Group with Confirmation

Removing a group with a confirmation message.

Remove-MgGroup -GroupId "12345678-90ab-cdef-1234-567890abcdef" -Confirm

Example 3: Check What If Without Removing

Checking what happens if the Remove-MgGroup is used using -Whatif parameter.

Remove-MgGroup -GroupId "12345678-90ab-cdef-1234-567890abcdef" -WhatIf

Example 4: Bulk Remove Groups from a CSV File

Deleting multiple groups by reading Group IDs from a CSV file. The CSV file should contain a GroupID header with corresponding Group ID values.

$groups = Import-Csv -Path "C:\path\to\groups.csv"
foreach ($group in $groups) {
    Remove-MgGroup -GroupId $group.GroupId -Confirm:$false
}

Example 5: Removing Groups with Specific Criteria

Removing groups based on specific criteria passed through -Filter parameter.

$groups = Get-MgGroup -Filter "members/$count eq 0"
foreach ($group in $groups) {
    Remove-MgGroup -GroupId $group.Id -Confirm:$false
}

Cmdlet Tips

• Use -WhatIf to Avoid Mistakes: Always use the -WhatIf parameter to simulate the execution of the cmdlet and avoid accidental deletion of important groups.
• Combine with Get-MgGroup: Combine Remove-MgGroup with Get-MgGroup to find and delete groups based on specific criteria.
• Automate Bulk Operations: Use CSV files and loops to automate the deletion of multiple groups.

Common Errors and Solutions

Connect-MgGraph -Scopes "Group.ReadWrite.All"

Get-MgGroup -GroupId "12345678-90ab-cdef-1234-567890abcdef"

Remove-MgGroup -GroupId "12345678-90ab-cdef-1234-567890abcdef" -Confirm:$false

Frequently Asked Questions

1. What is Remove-MgGroup used for?

Remove-MgGroup is a Microsoft Graph PowerShell cmdlet used to delete Microsoft 365 groups from your tenant.

2. Can I confirm the deletion of a group?

To verify if a group has been deleted, attempt to retrieve it using its ID. If it does not exist, an error will occur:

Get-MgGroup -GroupId "<GroupId>"

3. What permissions are required to delete groups?

You need the Group.ReadWrite.All or Directory.ReadWrite.All permission in Microsoft Graph PowerShell. Ensure these permissions are granted in Azure AD.

Conclusion

The Remove-MgGroup cmdlet is a powerful tool for managing Microsoft 365 groups. By understanding its syntax, parameters, and usage scenarios, you can efficiently delete groups while avoiding common pitfalls. Always ensure you have the necessary permissions and use the -WhatIf parameter to prevent accidental deletions.

If you found this guide helpful, be sure to check out more Graph PowerShell articles on our website M365Corner.com for comprehensive tutorials and scripts to streamline your Microsoft 365 management tasks.

If You Prefer the Graph API Way

Note: Deleting a group using Graph API requires a DELETE request to /groups/{group-id}. This permanently deletes Microsoft 365 groups or security groups from the directory.

Remove a Single Group

# Replace with the actual group ID (GUID)
$groupId = "3f61f1e6-4568-4bfa-89b6-0bbbc5d945a7"
                                
# Send the DELETE request
Invoke-MgGraphRequest -Method DELETE -Uri "https://graph.microsoft.com/v1.0/groups/$groupId"
                            

Remove Multiple Groups from CSV

# Sample CSV headers: groupId
$csvPath = "C:\Users\admin\Documents\remove-groups.csv"
$groups = Import-Csv -Path $csvPath
                                
foreach ($group in $groups) {
    $uri = "https://graph.microsoft.com/v1.0/groups/$($group.groupId)"
    Invoke-MgGraphRequest -Method DELETE -Uri $uri
}
                            

CSV Format Example

groupId
3f61f1e6-4568-4bfa-89b6-0bbbc5d945a7
bfaab71e-1d9b-4c17-85a6-52a13d822b1a
c65dca2d-f9f1-45f2-a6de-eef8d5f37c48
                            

💡 You can get group IDs using Get-MgGroup | Select DisplayName, Id.

Required Permissions

One of the following Graph API permissions is required:

• Group.ReadWrite.All
• Directory.ReadWrite.All

Graph API Documentation

👉 DELETE /groups/{id} - Microsoft Graph v1.0