Microsoft Entra · Schema
Group
Represents a Microsoft Entra group. Groups can be Microsoft 365 groups, security groups, mail-enabled security groups, or distribution groups.
Access ManagementAuthenticationAzure ADEntraIdentityIdentity GovernanceMicrosoftNetwork SecuritySecurityZero Trust
Properties
| Name | Type | Description |
|---|---|---|
| id | string | Unique identifier for the group (GUID) |
| displayName | string | The display name for the group. Required on create. |
| description | ['string', 'null'] | An optional description for the group |
| mailEnabled | boolean | Specifies whether the group is mail-enabled. Required on create. Set to true for Microsoft 365 groups. |
| mailNickname | string | The mail alias for the group, unique for Microsoft 365 groups. Required on create. |
| securityEnabled | boolean | Specifies whether the group is a security group. Required on create. Set to false for Microsoft 365 groups. |
| groupTypes | array | Specifies the group type. Set to ["Unified"] for Microsoft 365 groups. Empty array or ["DynamicMembership"] for other types. |
| visibility | ['string', 'null'] | Specifies the group's join policy and content visibility for Microsoft 365 groups |
| membershipRule | ['string', 'null'] | The rule that determines members for this group if the group is a dynamic group. Example: user.department -eq "Marketing" |
| membershipRuleProcessingState | ['string', 'null'] | Indicates whether the dynamic membership processing is on or paused. Possible values are On or Paused. |
| ['string', 'null'] | The SMTP address for the group | |
| proxyAddresses | array | Email addresses for the group that direct to the same inbox |
| isAssignableToRole | ['boolean', 'null'] | Indicates whether this group can be assigned to a Microsoft Entra role. Can only be set at group creation time. |
| onPremisesSyncEnabled | ['boolean', 'null'] | true if this group is synced from an on-premises directory |
| createdDateTime | string | Timestamp of when the group was created |
| renewedDateTime | ['string', 'null'] | Timestamp of when the group was last renewed (activity that extends expiration) |
| members | array | Direct members of this group. Returned only with $expand. |
| owners | array | Owners of the group. Returned only with $expand. |