Retrieve users from nested AAD Groups

It is possible to nest Azure Active Directory Security Groups. In this blog I will you how to retrieve all users from these nested groups via the Graph API in Power Automate.

Inspiration

This question from IDonknowwhay:

Is there a way in Power Automate / Power Flow where I can get all the users which belongs to a AAD security group (All_of_IT) and nested groups within the group?

Power Users Community thread: PowerAutomate Loop through an AAD Security Group to find all Users.

List group transitive members

The challenge with this is that an action like the Get Group members only lists a first level of members of an Azure Active Directory Group. That means you would have to include several loops in your flow to get all members. An approach I wanted to avoid. Luckily, Graph API has the List group transitive members method. This method is transitive and returns a flat list of all nested members. Exactly what I wanted 🙂

Flow setup

Update 10-09-22: Shortly after publishing this post I figured out that you could also use a microsoft.graph.user OData cast to filter for the users directly in the Send an HTTP request action, making the Filter Array action unneccessary/optional 😉. 1. Add a Manually trigger a flow action. 2. Add a Initialize variable action (optional). This action is not necessary. You could also directly insert the Group ID as text in the other actions. a. Provide a Name, I used Object_Id b. Select String as type c. Provide a value, the Group Id, which is a GUID. 3. Add a Send an HTTP request action. a. Use the URI from the code snippet below b. Use the GET method c. Add the ConsistencyLevel: eventual text to the CustomHeader1 field 4. Add a Create CSV table action. a. Use the expression from the code snippet below in the From. 5. Add a Create File action. a. Select your preferred site in the Site Address b. Select a Folder Path c. In File Name provide a preferred name for you new file. I used a file name with an expression like in the code snippet below: d. In File Content use the Output of the CSV table action Happy testing!