11_GroupOperations_tw.ps1

Clear-Host
Set-Location c:\

#Log into Azure
Connect-AzureAD

#Get all the groups in Azure AD Tenant
Get-AzureADGroup

#Get the Information Technology Group
$group = Get-AzureADGroup -SearchString "Information Technology"

#Get all members and the owner
Get-AzureADGroupMember -ObjectId $group.ObjectId

Get-AzureADGroupOwner -ObjectId $group.ObjectId

#Create a new group
$group = @{
    DisplayName = "Fred Group"
    MailEnabled = $false
    MailNickName = "FredGroup"
    SecurityEnabled = $true
}

$newGroup = New-AzureADGroup @group

#Update the group description
Set-AzureADGroup -ObjectId $newGroup.ObjectId -Description "Group for Fred to use."

#Set Ford as the owner
$fred = Get-AzureADUser -Filter "DisplayName eq 'Fred Prefect'"

Add-AzureADGroupOwner -ObjectId $newGroup.ObjectId -RefObjectId $fred.ObjectId

#Add users to the group
$users = Get-AzureADUser -Filter "State eq 'SO'"

foreach($user in $users){
    Add-AzureADGroupMember -ObjectId $newGroup.ObjectId -RefObjectId $user.ObjectId
}

$group = Get-AzureADGroup -SearchString "Fred Group"

#Get all members and the owner
Get-AzureADGroupMember -ObjectId $group.ObjectId


#AzureADPreview Only
$dynamicGroup = @{
    DisplayName = "Marketing Group"
    MailEnabled = $false
    MailNickName = "MarketingGroup"
    SecurityEnabled = $true
    Description = "Dynamic group for Marketing"
    GroupTypes = "DynamicMembership"
    MembershipRule = "(user.department -contains ""Marketing"")"
    MembershipRuleProcessingState = "On"
}

New-AzureADMSGroup @dynamicGroup