Adaxes

Get-AdmGroupMember distinguish different cloud user types?

0 votes

Is there a way to extend the Get-AdmGroupMember for easier cloud user management and better expressing the actual "user" object your working with?

https://www.adaxes.com/sdk/Get-AdmGroupMember/

Is there any extention available like -properties to extend the members with extra attributes to distinguish like "On-Premises Sync Enabled". Currently Azure groups can contain 4 types of "user" that can be member of a group:

  • a Service Principal this type isn't even returned as a member of the group by Get-AdmGroupMember.
    • Type: Service Principal
  • Office356 Guest account, invited external
    • Type: User
    • CreationType: Invitation
  • Hybrid account, hybrid sync
    • Type: User
    • onPremisesSyncEnabled: True
  • Cloud user, user created in Office365
    • Type: User

Get-AdmGroupMember everything looks the same.

DistinguishedName : CN=Guest\0AUID:141dd7c33dc0000000000000,OU=Users,DC=dummy,DC=onmicrosoft,DC=com

ObjectClass : user

Name : Guest

ObjectGUID : 4564644-3dc2-45f6-86f1-000000000000000

SID : S-1-15-00000000-337500099-1173765570-58978694-00000000

DistinguishedName : CN=Cloud User\0AUID:141dd7c33dc0000000000000,OU=Users,DC=dummy,DC=onmicrosoft,DC=com

ObjectClass : user

Name : cloud user

ObjectGUID : 141dd7c3-3dc2-45f6-86f1-000000000000000

SID : S-1-15-00000000-337500099-1173765570-58978694-00000000

DistinguishedName : CN=Hybrid User\0AUID:d7dc94fa60d849a000000000000,OU=Users,DC=dummy,DC=onmicrosoft,DC=com

ObjectClass : user

Name : Hybrid User

ObjectGUID : d7dc94fa-60d8-49a9-aebb-0000000000

SID : S-1-15-000000000000-3621557498-1235837144-3060644782-00000000000

by (40 points)

1 Answer

0 votes
by (294k points)

Hello Peter,

Unfortunately, there is no such possibility. However, thank you for the suggestion. We forwarded it to the corresponding department for consideration.

Related questions

0 votes
1 answer
On the built in Create User, how can I get the ability for the user to choose a different domain in the username field?

Using this built in function: There is no option to change the domain on the user account, however this is not the domain we use for UPN. However after creating a user, you can change it but trying to avoid going back into the object.

asked Apr 14, 2023 by mightycabal (1.0k points)
0 votes
1 answer
Custom Command for different object types?

I currently have a Custom Command that is configured for User objects, but I would like to perform actions against a Computer object in the same command. E.g. I have a ... Users, there's no Action Set to disable Computers. Is there a workaround here? Thanks!

asked Jul 28, 2020 by bavery (250 points)
0 votes
1 answer
Get-AdmGroupMember count

Hi Is there a method to read the amount of returned objects from Get-AdmGroupMember cmdlet (and other) ? .Count does not work, nor does .Length. For example: $MembersList = ... Maybe I'm just fooling around in this modern object.hell.world ? :lol: - Thanks

asked Mar 16, 2017 by Boxx.dk (2.6k points)
0 votes
1 answer
How can I add a new user to a cloud only Entra ID licensing group?

I'm currently writing an "After User Creation" rule and I have a PowerShell script that adds the newly created, on-premises synced user to a handful of cloud ... powershell cmdlet that fails. I need to use PowerShell for the additional condtional flexibility.

asked Dec 13 by smcfarland (60 points)
0 votes
1 answer
Cloud only user unable to manage other cloud only user?

I've created new Adaxes instance (23.2) in my test environment. I've added managed domain of "cloud domain" type and connected this tenant via Microsoft 365 cloud ... section. I've modified Forms and views according the tutorial too What am I missing?

asked Sep 24 by KIT (960 points)
3,589 questions
3,278 answers
8,303 comments
548,115 users