Answered

Graph API Request to Filter Active Members and Groups

(2) Share

Report

Posted on by David_MA

12,982 Super User 2025 Season 2

I need to make a call to the Graph API to get the members of a group with an active account and also return other groups within the group. I am using the following filter:

https://graph.microsoft.com/v1.0/groups/@{variables('Group ID')}/members?$count=true&$select=mail&$filter=endsWith(mail,'@mycompany.com') and accountEnabled eq true&$top=999

Note, the above query has ConsistencyLevel: eventual in the headers.
This works, but does not return any of the groups as it appears groups do not use the accountEnabled flag.
I searched the web and asked Copilot how to modify the query to include groups.
Copilot said to add or isOf('microsoft.graph.group') to the filter, but when I do it returns the error: "message": "Operator: 'IsOf' is not supported."
In this reference I cannot find anything related to filtering for groups: Advanced query capabilities on Microsoft Entra ID objects - Microsoft Graph | Microsoft Learn

Does anyone know how I can modify the query to include groups?

Thank you,

David

Categories:

Building flows

I have the same question (0)

All responses (2)

Answers (1)

Verified answer

Expiscornovus 33,195 Most Valuable Professional on at

Like (2)

Report

Afaik you can also use an $expand on members. That method does has some limitations but when you use an $expand it should also return details of the groups itself. Might be worth a shot?

Btw, there are also a Transitivemembers method to retrieve users and groups of a group:

https://learn.microsoft.com/en-us/graph/api/group-list-transitivemembers?view=graph-rest-1.0&tabs=http

Was this reply helpful? Yes No
Suggested answer

David_MA 12,982 Super User 2025 Season 2 on at

Like (2)

Report
Thank you Expiscornovus. The link you provided helped. In the end, the only thing I needed to change to include the groups was to change the accountEnabled flag from equaling true to not equaling false.

https://graph.microsoft.com/v1.0/groups/@{variables('Group ID')}/members?$count=true&$select=mail&$filter=endsWith(mail,'@mycompany.com') and accountEnabled ne false&$top=999

This still requires you to set the following in the header of the API request:

Was this reply helpful? Yes No