{"id":5130,"date":"2023-05-22T08:08:54","date_gmt":"2023-05-22T06:08:54","guid":{"rendered":"https:\/\/www.msb365.blog\/?p=5130"},"modified":"2023-07-08T11:48:18","modified_gmt":"2023-07-08T09:48:18","slug":"powershell-script-azure-active-directory","status":"publish","type":"post","link":"https:\/\/www.msb365.blog\/?p=5130","title":{"rendered":"Add BULK Users from CSV to Azure AD Group"},"content":{"rendered":"

This script is for the following use case:<\/p>\n

An administrator needs to add multiple users from an organisation to an Azure AD group.<\/p>\n

This can be done in different ways. On the one hand in the Azure Admin Portal or via Powershell.<\/p>\n

\u00a0<\/p>\n

In my variant, I have created a script that can massively simplify and speed up this process.<\/p>\n

This article serves as documentation for my script, which you can find on my GitHub page.<\/p>\n

\u00a0<\/p>\n

Preparation<\/h3>\n

\u00a0<\/p>\n

My approach is that all users who are to be added to a group are recorded in a CSV. The CSV needs the following format: \u201cUserPrincipalName\u201d, \u201cDisplayName\u201d<\/strong>.<\/p>\n

The administrator can now create a corresponding CSF manually or export an extract from the current Azure Active Directory.<\/p>\n

To do this, he can use the following script:<\/p>\n

# Split path\r\n\r\n$Path = Split-Path -Parent \"C:\\MDM\\*.*\"\r\n\r\n# Create variable for the date stamp in log file\r\n\r\n$LogDate = Get-Date -f yyyyMMddhhmm\r\n\r\n\r\n# Define CSV and log file location variables\r\n\r\n# They have to be on the same location as the script\r\n\r\n$Csvfile = $Path + \"\\AllAzADUsers_$logDate.csv\"\r\n\r\n\r\n# Get all Azure AD users\r\n\r\n$AzADUsers = Get-AzureADUser -All $true | Select-Object -Property *\r\n\r\n# Display progress bar\r\n\r\n$progressCount = 0\r\n\r\nfor ($i = 0; $i -le $AzADUsers.Count; $i++) {\r\n\r\nWrite-Progress `\r\n\r\n-Id 0 `\r\n\r\n-Activity \"Retrieving User \" `\r\n\r\n-Status \"$progressCount of $($AzADUsers.Count)\" `\r\n\r\n-PercentComplete (($progressCount \/ $AzADUsers.Count) * 100)\r\n\r\n$progressCount++\r\n\r\n}\r\n\r\n# Create list\r\n\r\n$AzADUsers | Sort-Object GivenName | Select-Object `\r\n\r\n@{Label = \"DisplayName\"; Expression = { $_.DisplayName } },\r\n\r\n@{Label = \"UserPrincipalName\"; Expression = { $_.UserPrincipalName } }|\r\n\r\n\r\n# Export report to CSV file\r\n\r\nExport-Csv -Encoding UTF8 -Path $Csvfile -NoTypeInformation #-Delimiter \";\"<\/pre>\n
\u00a0<\/p>\n
After that, the actual script can be executed. The following is a step-by-step documentation:<\/p>\n
\u00a0<\/p>\n
AddUserToAADGroup<\/h3>\n
\u00a0<\/p>\n
It is important to note that this script currently only works with security groups!<\/p>\n\n\n\n\n\n\n\n\n\n\n\n
In the Azure AD portal, we first identify the group that is to receive several new members.<\/p>\n
In this example, it is the group \u201csg-HR\u201d.<\/p>\n
As we can see, this group currently has no members.<\/td>\n
\"\"<\/td>\n<\/tr>\n
Now we start the PowerShell console and connect to our tenant with the command \u201cConnect-AzureAD\u201d.<\/td>\n\"\"<\/td>\n<\/tr>\n
After we have started the script, we are asked to accept the EULA.<\/td>\n\"\"<\/td>\n<\/tr>\n
When the EULA has been accepted, a new pop-up window appears where we can enter the name (not UPN) of the desired group.<\/p>\n
\u00a0<\/p>\n
Please enter the corresponding entry here and confirm with OK.<\/td>\n
\"\"<\/td>\n<\/tr>\n
After we have defined and confirmed the group, a new window appears, now we can simply browse to the desired CSV file, select it and confirm with \u201cOpen\u201d.<\/td>\n\"\"<\/td>\n<\/tr>\n
The content of the imported CSV file is now displayed in the PowerShell window. Here we have the opportunity to check again whether we have selected the correct file.<\/p>\n
If this is not the case, simply continue with \u201cN\u201d and we can select another CSV file.<\/p>\n
\u00a0<\/p>\n
However, if it is the right file, we continue with \u201cY\u201d.<\/td>\n
\"\"<\/td>\n<\/tr>\n
Now all users from the CSV file are added to the group defined to begin.<\/td>\n\"\"<\/td>\n<\/tr>\n
After the process is complete, we see that the group has 28 new users and these are the users we had in our CSV.<\/td>\n\"\"<\/td>\n<\/tr>\n
Of course, we can also check this further.<\/p>\n
\u00a0<\/p>\n
Basically, the task is now completed.<\/td>\n
\"\"<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u00a0<\/p>\n
PowerShell Script on GitHub<\/h3>\n
\u00a0<\/p>\n
The script itself can be found on my GitHub repository under the following link<\/p>\n
\"\"<\/a><\/p>\n
\u00a0<\/p>\n
Conclusion<\/h3>\n
The script can be used free of charge as described in the licence conditions. Changes are also allowed. However, when distributing or using the individual modules, reference must be made to this article and the MSB365 blog.<\/p>\n
I strongly recommend testing the script in a LAB the first time you use it.<\/p>\n
Likewise, I assume no liability for possible damage that the script may cause.<\/p>\n
It is not allowed to pass on this script or single modules to third parties against payment. We follow the approach: From the community, for the community.<\/p>\n
\u00a0<\/p>\n
\u2764\ufe0f<\/p>\n","protected":false},"excerpt":{"rendered":"
This script is for the following use case: An administrator needs to add multiple users from an organisation to an Azure AD group. This can be done in different ways. On the one hand in the Azure Admin Portal or via Powershell. \u00a0 In my variant, I have created a script that can massively simplify […]<\/p>\n","protected":false},"author":1,"featured_media":5145,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[12,1923,3],"tags":[],"class_list":["post-5130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure","category-microsoft-365","category-powershell"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/5130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5130"}],"version-history":[{"count":4,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/5130\/revisions"}],"predecessor-version":[{"id":5144,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/5130\/revisions\/5144"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/media\/5145"}],"wp:attachment":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}