Find Group Membership for Device from Intune MEM Portal

Let’s find Group Membership for Device from Intune MEM Portal. The Group membership report provides the group membership of all AAD groups for a specific managed device. You can easily validate the group membership and be useful while performing troubleshooting.

Starting with Intune Service Release 2206 brings the much-awaited addition to view a managed device group membership addition from Microsoft Intune Portal. The details are published by Scott Breen (MS Senior Program Manager) from Intune Team on Twitter.

The added feature will help you find the device parts of groups, easily get the list of groups a managed device is a member of, and view a device’s direct and transitive group membership from within Intune. Transitive membership shows direct and parent group membership, which can help identify where policies and apps are coming from.

Patch My PC

This report supports all device platforms and management types. The Device group membership report provides filtering, searching, paging, and sorting capabilities.

In the monitor section of the Devices workload of Intune, you can view the group membership of all AAD groups for a managed device.

Find Group Membership For Device from Intune MEM Portal

To view the group membership for the managed device, you can use the following steps:

  • Choose Devices > All devices and select the device from the list. For Example, I selected the device CPC-jitesh53-DE

Note: You can also select the Devices by choosing the By platform and Select Windows.

Select Device - Find Group Membership For Device from Intune MEM Portal 1
Select Device – Find Group Membership For Device from Intune MEM Portal 1

To view the device membership of the group, select Group membership in the Monitor section.

Select Monitor > Group Membership - Find Group Membership For Device from Intune MEM Portal 2
Select Monitor > Group Membership – Find Group Membership For Device from Intune MEM Portal 2

When you click on a group, you can see the AAD pane for the group. Here you can see the details of the Group, the selected device part of the all listed group.

The Group membership report provides the group membership of all AAD groups for a specific managed device. The report provides the following columns:

  • Name
  • Object Id
  • Membership Type
  • Direct or Transitive
Group Membership for Selected Device - Find Group Membership For Device from Intune MEM Portal 3
Group Membership for Selected Device – Find Group Membership For Device from Intune MEM Portal 3

PowerShell Method to Get Group Membership of Intune Managed Devices

Let’s also quickly check the PowerShell Method to Get Group Membership of Intune Managed Devices. You can get these details easily using the Edge extension as mentioned in the Intune Graph API post.

Import-Module Microsoft.Graph.Identity.DirectoryManagement 
Get-MgDeviceTransitiveMemberOf -DeviceId $deviceId
Import-Module Microsoft.Graph.Identity.DirectoryManagement 
Get-MgDeviceMemberOf -DeviceId $deviceId

Filter Device Group Membership Report

The group membership filter allows Intune admin to use filter settings to narrow down the search based on the Membership type and whether the device is a direct member or a transitive member.

Transitive membership shows direct and parent group membership, which can help identify where policies and apps are coming from.

Add Filters - Filter Device Group Membership Report 4
Add Filters – Filter Device Group Membership Report 4

When you select membership type, you can see the option to identify whether the device’s membership is assigned or dynamic. Also you can easily refer to the membership type column.

Filtered Membership Type - Find Group Membership For Device from Intune MEM Portal 5
Filtered Membership Type – Find Group Membership For Device from Intune MEM Portal 5

Export Intune Device Group Membership Report

You can export the list of groups for the managed devices to a .csv file by selecting Export from the Group Membership. Click on Download to export the listed groups of managed devices.

Click on Download - Export Intune Device Group Membership Report 6
Click on Download – Export Intune Device Group Membership Report 6

A notification will appear automatically in the top right-hand corner with the message Export is in progress. All exported data will be automatically downloaded to your browsers in a .csv file format, and a notification message will appear Export completed.

You can now open the exported discovered applications list, and The Group membership report provides the group membership of all AAD groups for a specific managed device.

Export Intune Device Group Membership Report 7
Export Intune Device Group Membership Report 7

Author

About Author – Jitesh, Microsoft MVP, has over five years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus is Windows 10 Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.

Leave a Comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.