You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
-2Lines changed: 0 additions & 2 deletions
Original file line number
Diff line number
Diff line change
@@ -4,8 +4,6 @@ Thank you for your interest in Microsoft Graph documentation! For the best exper
4
4
5
5
## Give us your feedback
6
6
7
-
**Coming soon:** In March 2024, we will be phasing out the current feedback mechanism for content (GitHub issues) described below and replacing it with a new feedback system. For more information, see https://aka.ms/ContentUserFeedback.
8
-
9
7
Your feedback is important to us.
10
8
11
9
- To let us know about any questions or issues you find in the documentation, [leave feedback using the standard experience](https://learn.microsoft.com/en-us/contribute/content/provide-feedback#use-the-standard-experience).
> Global Reader is the least privileged [administrator role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json) supported for this operation.
> In delegated scenarios with work or school accounts, the signed-in user must be assigned the *Global Administrator*[Microsoft Entra role](/entra/identity/role-based-access-control/permissions-reference?toc=%2Fgraph%2Ftoc.json).
Check for membership in a specified list of group IDs, and return from that list those groups (identified by IDs) of which the specified [user](../resources/user.md), [group](../resources/group.md), [service principal](../resources/serviceprincipal.md), [organizational contact](../resources/orgcontact.md), [device](../resources/device.md), or [directory object](../resources/directoryobject.md) is a member. This function is transitive.
17
+
Check for membership in a specified list of [group](../resources/group.md) IDs, and return from that list the IDs of groups where a specified object is a member. The specified object can be of one of the following types:
You can check up to a maximum of 20 groups per request. This function supports all groups provisioned in Microsoft Entra ID. Because Microsoft 365 groups cannot contain other groups, membership in a Microsoft 365 group is always direct.
20
28
@@ -26,47 +34,68 @@ One of the following permissions is required to call this API. To learn more, in
26
34
27
35
### Group memberships for a directory object
28
36
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
29
-
| Permission type | Permissions (from least to most privileged) |
> The *Directory.\** permissions allow you to retrieve any supported directory object type via this API. To retrieve only a specific type, you can use permissions specific to the resource.
34
45
35
46
### Group memberships for the signed-in user
47
+
36
48
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
37
-
|Permission type| Permissions (from least to most privileged) |
38
-
|:-|:-|
39
-
|Delegated (work or school account)|User.Read, User.ReadBasic.All, User.Read.All, Directory.Read.All, User.ReadWrite.All, Directory.ReadWrite.All |
40
-
|Delegated (personal Microsoft account)|Not supported.|
|Delegated (work or school account)|User.Read|User.ReadBasic.All and GroupMember.Read.All, User.Read.All and GroupMember.Read.All, User.ReadBasic.All and Group.Read.All, User.Read.All and Group.Read.All, Directory.Read.All |
52
+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
53
+
|Application|Not supported.|Not supported.|
42
54
43
55
### Group memberships for other users
56
+
44
57
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
45
-
|Permission type| Permissions (from least to most privileged) |
46
-
|:-|:-|
47
-
|Delegated (work or school account)|User.ReadBasic.All, User.Read.All, Directory.Read.All, User.ReadWrite.All, Directory.ReadWrite.All |
48
-
|Delegated (personal Microsoft account)|Not supported.|
|Delegated (work or school account)|User.ReadBasic.All and GroupMember.Read.All|User.Read.All and GroupMember.Read.All, User.ReadBasic.All and Group.Read.All, User.Read.All and Group.Read.All, Directory.Read.All |
61
+
|Delegated (personal Microsoft account)|Not supported.|Not supported.|
62
+
|Application|User.ReadBasic.All and GroupMember.Read.All|User.Read.All and GroupMember.Read.All, User.Read.All and Group.Read.All, Directory.Read.All|
50
63
51
64
### Group memberships for a group
65
+
52
66
<!-- { "blockType": "ignored" } // Note: Removing this line will result in the permissions autogeneration tool overwriting the table. -->
53
-
|Permission type| Permissions (from least to most privileged) |
54
-
|:-|:-|
55
-
|Delegated (work or school account)|GroupMember.Read.All, Group.Read.All, Directory.Read.All, Group.ReadWrite.All, Directory.ReadWrite.All |
56
-
|Delegated (personal Microsoft account)|Not supported.|
0 commit comments