Building off [krzydoug]'s excellent script Create a table of AD users and groups, is it possible to use az ad user list, rather than Get-ADUser? Get-ADUser fails to enumerate about all users in my small GCC High environment which has an on-premises AD sync enabled.
Issue I hit:
PS C:\Temp\Moi> $numusers1 = az ad user list | ConvertFrom-Json
PS C:\Temp\Moi> $numusers1.count
127
PS C:\Temp\Moi> $numusers2 = Get-ADUser -Filter *
PS C:\Temp\Moi> $numusers2 .count
100
Thank you!
Get-ADUser gives you Active Directory users.
az ad gives you Entra ID users.
The two are not the same
Thanks for clarifying. I can’t re-title the post, but my goal then would be - create a CSV which will have
all Entra ID users listed in the left column, all AD groups listed across the top row, and then show an X (or any other indicator) in each cell to map out which groups each user has
Do you mean AD groups or Entra ID groups, again they are different. If you’re in a hybrid environment then what that looks like will vary based on how your environment syncs between the two (Entra and AD)
AD groups: the results of Get-ADGroup -Filter *
Thanks!