How to get all groups that multiple users belong to at once

As employees transfer departments, I need to identify the following MS365 groups they belong to:

• MS365 groups - Security groups - Email-enabled security groups

Nearly 100 employees transfer each month, so each time we need to do this, it increases the workload and time required for our team members. How can I bulk extract groups to which multiple users belong?

*This assumes the execution of PowerShell commands.

[Current Method]

• Log in to the entra Management Center and search for the target user.
• Select the group to which the user belongs from the screen and paste it into the work Excel file.
• After pasting, copy and paste the data into the Excel file for each management ledger for each group to identify the target user.

[Verification Status]

Based on desktop research, I executed the following command. Although multiple lines were returned, I was unable to obtain the target group name, associated ID, email address, etc.

====================

▼ 1. Graph Connection

Write-Host "Connecting to Microsoft Graph..."

Connect-MgGraph -Scopes "User.Read.All","Group.Read.All" | Out-Null

▼ 2. Input/Output Path Settings (Change as needed)

$inputPath = "C:\Users\kmorikawa\Desktop\Account Improvement Project\202510_Employee Permission Bulk Identification\Input\TransferList.csv"

$outputPath = "C:\Users\kmorikawa\Desktop\Account Improvement Project\202510_Employee Permission Bulk Identification\Output\GroupMembershipList.csv"

Initialize Output File

if (Test-Path $outputPath) { Remove-Item $outputPath }

New-Item -Path $outputPath -ItemType File | Out-Null

▼ 3. Load Transferee List

$users = Import-Csv $inputPath -Delimiter "," # If the separator is a tab, use "`t"

▼ 4. Get group information for each user

foreach ($user in $users) {

if (-not $user.Email -or [string]::IsNullOrWhiteSpace($user.Email)) {

Write-Warning "Emailが空の行をスキップしました: $($user.DisplayName)"

continue
```}

$email = $user.Email.Trim()

Write-Host "処理中: $($user.DisplayName) ($email)..."

try {

```powershell
# EmailをキーにuserPrincipalName/mail属性の両方で検索

$userObj = Get-MgUser -Filter "startswith(userPrincipalName,'$email')" -Property Id,DisplayName,Mail

if (-not $userObj) {

    $userObj = Get-MgUser -Filter "startswith(mail,'$email')" -Property Id,DisplayName,Mail

}

if ($userObj) {

    $groups = Get-MgUserMemberOf -UserId $userObj.Id -All

    foreach ($group in $groups) {

        # グループ種別分類

        $type = if ($group.GroupTypes -contains "Unified") {"M365 Group"}

                elseif ($group.MailEnabled -and $group.SecurityEnabled) {"Mail-enabled Security Group"}

                elseif ($group.SecurityEnabled) {"Security Group"}

                else {"Other"}

        # 結果出力

        [PSCustomObject]@{

            EmployeeID      = $user.EmployeeID

            DisplayName     = $user.DisplayName

            Email           = $email

            GroupName       = $group.DisplayName

            GroupType       = $type

            MailEnabled     = $group.MailEnabled

            SecurityEnabled = $group.SecurityEnabled

        } | Export-Csv -Path $outputPath -Append -NoTypeInformation -Encoding UTF8

    }

}

else {

    Write-Warning "ユーザー未検出: $email"

}
```}

catch {

```yaml
Write-Warning "エラー: $email - $_"
```}

}

▼ 5. Completion notification

Write-Host "`n処理完了しました。結果: $outputPath"

★★★★★★★★★★★★★★★★★★★★★★★★