Microsoft Active Directory · Schema
Group
A Microsoft Entra security group or Microsoft 365 group managed via Microsoft Graph
Active DirectoryAuthenticationAuthorizationDirectory ServicesIdentity ManagementMicrosoft EntraZero Trust
Properties
| Name | Type | Description |
|---|---|---|
| id | string | Unique identifier for the group object (read-only) |
| displayName | string | Display name for the group |
| description | stringnull | Optional description for the group |
| stringnull | SMTP address for the group | |
| mailNickname | string | Mail alias for the group (without domain suffix) |
| mailEnabled | boolean | Specifies whether the group is mail-enabled |
| securityEnabled | boolean | Specifies whether the group is a security group |
| groupTypes | array | Collection specifying the group type and dynamic membership. Unified = Microsoft 365 group. |
| visibility | stringnull | Visibility of a Microsoft 365 group content and members list |
| membershipRule | stringnull | Rule defining dynamic group membership (requires DynamicMembership in groupTypes) |
| membershipRuleProcessingState | stringnull | Indicates whether dynamic membership processing is on or paused |
| onPremisesSyncEnabled | booleannull | True if the group is synced from on-premises Active Directory |
| onPremisesDistinguishedName | stringnull | Distinguished name from on-premises AD |
| createdDateTime | stringnull | Timestamp when the group was created |
| renewedDateTime | stringnull | Timestamp when the Microsoft 365 group was last renewed |
| expirationDateTime | stringnull | Timestamp when the group expires (requires an expiration policy) |
| preferredDataLocation | stringnull | Preferred data location for multi-geo tenant (e.g. CAN, EUR) |
| resourceProvisioningOptions | array | Resources provisioned (e.g. Team for Microsoft Teams-enabled groups) |