Updates from: 09/11/2021 03:33:38
Service Microsoft Docs article Related commit history on GitHub Change details
v1.0 Directoryobject Checkmembergroups https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directoryobject-checkmembergroups.md
Title: "Check member groups"
+ Title: "directoryObject: checkMemberGroups"
description: "Check for membership in a specified list of groups, and returns from that list those groups" ms.localizationpriority: medium
ms.prod: "directory-management"
doc_type: apiPageType
-# Check member groups
+# directoryObject: checkMemberGroups
Namespace: microsoft.graph
Check for membership in a specified list of groups, and returns from that list t
of which the specified user, group, service principal or directory object is a member. This function is transitive. ## Permissions+ One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported. | |Application | User.Read.All, Directory.Read.All |
-Use the follow scenario guidance to help determine which permission types to use:
-- Use User.Read and GroupMember.Read.All or User.Read and Group.Read.All permissions to get group memberships for the signed-in user.-- Use User.ReadBasic.All and GroupMember.Read.All, User.Read.All and GroupMember.Read.All, User.ReadBasic.All and Group.Read.All or User.Read.All and Group.Read.All permissions to get group memberships for any user.-- Use GroupMember.Read.All or Group.Read.All permission to get group memberships for a group.-- Use Application.ReadWrite.All and GroupMember.Read.All or Application.ReadWrite.All and Group.Read.All permissions to get group memberships for a service principal.-- Use Directory.Read.All permission to get group memberships for a directory object.
+The following table lists the permission types to use for different scenarios.
+
+| Scenario | Permissions |
+|:-|:-|
+| To get group memberships for the signed-in user | Use one of the following sets of permissions: <br/> <li> **User.Read** and **GroupMember.Read.All** <li>**User.Read** and **Group.Read.All** |
+| To get group memberships for any user | Use one of the following sets of permissions: <br/> <li> **User.ReadBasic.All** and **GroupMember.Read.All** <li>**User.Read.All** and **GroupMember.Read.All** <li>**User.ReadBasic.All** and **Group.Read.All** <li>**User.Read.All** and **Group.Read.All** |
+| To get group memberships for a group | Use either the **GroupMember.Read.All** or **Group.Read.All** permission. |
+| To get group memberships for a service principal | Use one of the following sets of permissions <br/> <li>**Application.ReadWrite.All** and **GroupMember.Read.All** <li>**Application.ReadWrite.All** and **Group.Read.All** |
+| To get group memberships for a directory object | Use the **Directory.Read.All** permission. |
## HTTP request+ <!-- { "blockType": "ignored" } --> ```http POST /me/checkMemberGroups
POST /servicePrincipals/{id}/checkMemberGroups
POST /directoryObjects/{id}/checkMemberGroups ``` ## Request headers+ | Name | Type | Description| |:|:--|:-| | Authorization | string | Bearer {token}. Required. | | Content-Type | application/json | ## Request body+ In the request body, provide a JSON object with the following parameters. | Parameter | Type |Description|
If successful, this method returns `200 OK` response code and String collection
## Example
-##### Request
+### Request
# [HTTP](#tab/http)
Content-type: application/json
-##### Response
-Note: The response object shown here might be shortened for readability.
+### Response
+>**Note:** The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "truncated": true,
v1.0 Directoryobject Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directoryobject-delete.md
One of the following permissions is required to call this API. To learn more, in
|Application | Not supported. | **NOTE:** Users, groups, and contacts are types of directory object. As a result,if you need to delete users, the following permission can and should be used: User.ReadWrite.All+ ## HTTP request+ <!-- { "blockType": "ignored" } --> ```http DELETE /directoryObjects/{id} ``` ## Request headers+ | Name | Type | Description| |:|:--|:-| | Authorization | string | Bearer {token}. Required. | ## Request body+ Do not supply a request body for this method. ## Response
Do not supply a request body for this method.
If successful, this method returns `204 No Content` response code. It does not return anything in the response body. ## Example
-##### Request
-Here is an example of the request.
+
+### Request
+
+The following is an example of the request.
# [HTTP](#tab/http) <!-- {
DELETE https://graph.microsoft.com/beta/directoryObjects/ffab4dce-9b82-49a6-b7c7
-##### Response
-Here is an example of the response.
+### Response
+ <!-- { "blockType": "response", "truncated": true
v1.0 Directoryobject Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directoryobject-get.md
Namespace: microsoft.graph
[!INCLUDE [beta-disclaimer](../../includes/beta-disclaimer.md)]
-Retrieve the properties and relationships of directoryobject object.
+Retrieve the properties and relationships of a directoryObject object.
+ ## Permissions One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
One of the following permissions is required to call this API. To learn more, in
```http GET /directoryObjects/{id} ```
-## Optional query parameters
-This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
+ ## Request headers+ | Name | Type | Description| |:--|:|:-| | Authorization | string | Bearer {token}. Required. | ## Request body+ Do not supply a request body for this method. ## Response If successful, this method returns a `200 OK` response code and [directoryObject](../resources/directoryobject.md) object in the response body.+ ## Example
-##### Request
-Here is an example of the request.
+
+### Request
+The following is an example of the request.
# [HTTP](#tab/http) <!-- {
GET https://graph.microsoft.com/beta/directoryObjects/{id}
-##### Response
-Here is an example of the response. Note: The response object shown here might be shortened for readability.
+### Response
+
+The following is an example of the response.
+>**Note:** The response object shown here might be shortened for readability.
+ <!-- { "blockType": "response", "truncated": true,
Here is an example of the response. Note: The response object shown here might b
```http HTTP/1.1 200 OK Content-type: application/json
-Content-length: 22
{
- "id": "id-value"
+ "@odata.context": "https://graph.microsoft.com/beta/$metadata#directoryObjects/$entity",
+ "@odata.type": "#microsoft.graph.user",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/6ea91a8d-e32e-41a1-b7bd-d2d185eed0e0/Microsoft.DirectoryServices.User",
+ "id": "6ea91a8d-e32e-41a1-b7bd-d2d185eed0e0",
+ "accountEnabled": true,
+ "displayName": "Conf Room Adams",
+ "mail": "Adams@Contoso.com",
+ "mailNickname": "Adams",
+ "proxyAddresses": [
+ "SMTP:Adams@Contoso.com"
+ ],
+ "refreshTokensValidFromDateTime": "2021-08-09T09:30:59Z",
+ "signInSessionsValidFromDateTime": "2021-08-09T09:30:59Z",
+ "userPrincipalName": "Adams@Contoso.com",
+ "userType": "Member",
+ "identities": [
+ {
+ "signInType": "userPrincipalName",
+ "issuer": "Contoso.com",
+ "issuerAssignedId": "Adams@Contoso.com"
+ }
+ ]
} ```
v1.0 Directoryobject Getbyids https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directoryobject-getbyids.md
ms.prod: "directory-management"
doc_type: apiPageType
-# Get directory objects from a list of ids
+# directoryObject: getByIds
Namespace: microsoft.graph
In the request body, provide a JSON object with the following parameters.
| Parameter | Type |Description| |:|:--|:-| |ids|String collection| A collection of IDs for which to return objects. The IDs are GUIDs, represented as strings. You can specify up to 1000 IDs. |
-|types|String collection| A collection of resource types that specifies the set of resource collections to search. If not specified, the default is [directoryObject](/graph/api/resources/directoryobject?view=graph-rest-beta), which contains all of the resource types defined in the directory. Any object that derives from [directoryObject](/graph/api/resources/directoryobject?view=graph-rest-beta) may be specified in the collection; for example: [user](/graph/api/resources/user?view=graph-rest-beta), [group](/graph/api/resources/group?view=graph-rest-beta), [device](/graph/api/resources/device?view=graph-rest-beta), and so on. To search for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization specify [directoryObjectPartnerReference](/graph/api/resources/directoryobjectpartnerreference?view=graph-rest-beta). If not specified, the default is [directoryObject](/graph/api/resources/directoryobject?view=graph-rest-beta), which contains all of the resource types defined in the directory, except for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization. The values are not case-sensitive.|
+|types|String collection| A collection of resource types that specifies the set of resource collections to search. If not specified, the default is [directoryObject](../resources/directoryobject.md), which contains all of the resource types defined in the directory. Any object that derives from [directoryObject](../resources/directoryobject.md) may be specified in the collection; for example: [user](../resources/user.md), [group](../resources/group.md), and [device](../resources/device.md) objects. <br/><br/>To search for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization specify [directoryObjectPartnerReference](../resources/directoryobjectpartnerreference.md). If not specified, the default is [directoryObject](../resources/directoryobject.md), which contains all of the resource types defined in the directory, except for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization. </br><br/> The values are not case-sensitive.|
## Response
v1.0 Directoryobject Getmembergroups https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/directoryobject-getmembergroups.md
Title: "Get member groups"
+ Title: "directoryObject: getMemberGroups"
description: "Return all the groups that the specified user, group, service principal or directory object is a member of. This function is transitive." ms.localizationpriority: medium
ms.prod: "directory-management"
doc_type: apiPageType
-# Get member groups
+# directoryObject: getMemberGroups
Namespace: microsoft.graph
v1.0 Unifiedroleeligibilityschedulerequest Post Unifiedroleeligibilityschedulerequests https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/api/unifiedroleeligibilityschedulerequest-post-unifiedroleeligibilityschedulerequests.md
The following table shows the optional and required properties when you create t
|Property|Type|Description| |:|:|:|
-|action|String|Represents the type of the operation on the role eligibility assignment. The possible values are: <ul><li>`AdminAdd`: For administrators to assign role eligibility to users or groups to roles.</li><li>`AdminExtend`: For administrators to extend expiring assignments.</li><li>`AdminUpdate`: For administrators to change existing role assignments.</li><li>`AdminRenew`: For administrators to renew expired assignments.</li><li>`AdminRemove`: For administrators to remove users or groups from eligible roles.</li><li>`UserAdd`: For users to activate their eligible assignments.</li><li>`UserExtend`: For users to request to extend their expiring eligible assignments.</li><li>`UserRemove`: For users to deactivate their active eligible assignments.</li><li>`UserRenew`: For users to request to renew their expired eligible assignments.</li></ul>|
+|action|String|Represents the type of the operation on the role eligibility assignment. The possible values are: <ul><li>`AdminAssign`: For administrators to assign role eligibility to users or groups to roles.</li><li>`AdminExtend`: For administrators to extend expiring assignments.</li><li>`AdminUpdate`: For administrators to change existing role assignments.</li><li>`AdminRenew`: For administrators to renew expired assignments.</li><li>`AdminRemove`: For administrators to remove users or groups from eligible roles.</li><li>`UserAdd`: For users to activate their eligible assignments.</li><li>`UserExtend`: For users to request to extend their expiring eligible assignments.</li><li>`UserRemove`: For users to deactivate their active eligible assignments.</li><li>`UserRenew`: For users to request to renew their expired eligible assignments.</li></ul>|
|appScopeId|String|Identifier of the app-specific scope when the assignment scope is app-specific. The scope of an assignment determines the set of resources for which the principal has been granted access. App scopes are scopes that are defined and understood by this application only. Use `/` for tenant-wide app scopes. Use **directoryScopeId** to limit the scope to particular directory objects, for example, administrative units or all users.| |directoryScopeId|String|Identifier of the directory object representing the scope of the assignment. The scope of an assignment determines the set of resources for which the principal has been granted access. Directory scopes are shared scopes stored in the directory that are understood by multiple applications. Use `/` for tenant-wide scope. Use **appScopeId** to limit the scope to an application only.| |isValidationOnly|Boolean|A boolean that determines whether the call is a validation or an actual call. Only set this property if you want to check whether an activation is subject to additional rules like MFA before actually submitting the request.|
v1.0 Directoryobject https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/directoryobject.md
Title: "directoryObject resource type"
-description: "Represents an Azure Active Directory object. The **directoryObject** type is the base type for many other directory entity types."
+description: "Represents an Azure Active Directory object. The directoryObject type is the base type for many other directory entity types."
ms.localizationpriority: high ms.prod: "directory-management"
v1.0 Unifiedroleeligibilityschedulerequest https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/beta/resources/unifiedroleeligibilityschedulerequest.md
Inherits from [request](request.md).
## Properties |Property|Type|Description| |:|:|:|
-|action|String|Represents the type of the operation on the role eligibility assignment. The possible values are: <ul><li>`AdminAdd`: For administrators to assign role eligibility to users or groups to roles.</li><li>`AdminExtend`: For administrators to extend expiring assignments.</li><li>`AdminUpdate`: For administrators to change existing role assignments.</li><li>`AdminRenew`: For administrators to renew expired assignments.</li><li>`AdminRemove`: For administrators to remove users or groups from eligible roles.</li><li>`UserAdd`: For users to activate their eligible assignments.</li><li>`UserExtend`: For users to request to extend their expiring eligible assignments.</li><li>`UserRemove`: For users to deactivate their active eligible assignments.</li><li>`UserRenew`: For users to request to renew their expired eligible assignments.</li></ul>|
+|action|String|Represents the type of the operation on the role eligibility assignment. The possible values are: <ul><li>`AdminAssign`: For administrators to assign role eligibility to users or groups to roles.</li><li>`AdminExtend`: For administrators to extend expiring assignments.</li><li>`AdminUpdate`: For administrators to change existing role assignments.</li><li>`AdminRenew`: For administrators to renew expired assignments.</li><li>`AdminRemove`: For administrators to remove users or groups from eligible roles.</li><li>`UserAdd`: For users to activate their eligible assignments.</li><li>`UserExtend`: For users to request to extend their expiring eligible assignments.</li><li>`UserRemove`: For users to deactivate their active eligible assignments.</li><li>`UserRenew`: For users to request to renew their expired eligible assignments.</li></ul>|
|approvalId|String|The identifier of the approval of the request. Inherited from [request](request.md).| |appScopeId|String|Identifier of the app-specific scope when the assignment scope is app-specific. The scope of an assignment determines the set of resources for which the principal has been granted access. App scopes are scopes that are defined and understood by this application only. Use `/` for tenant-wide app scopes. Use **directoryScopeId** to limit the scope to particular directory objects, for example, administrative units.| |completedDateTime|DateTimeOffset|The request completion date time. Inherited from [request](request.md).|
v1.0 Directoryobject Checkmembergroups https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directoryobject-checkmembergroups.md
Title: "Check member groups"
+ Title: "directoryObject: checkMemberGroups"
description: "Check for membership in a specified list of groups, and returns from that list those groups" ms.localizationpriority: medium
ms.prod: "directory-management"
doc_type: apiPageType
-# Check member groups
+# directoryObject: checkMemberGroups
Namespace: microsoft.graph
Check for membership in a specified list of groups, and returns from that list t
of which the specified user, group, or directory object is a member. This function is transitive. ## Permissions+ One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference). |Permission type | Permissions (from least to most privileged) |
One of the following permissions is required to call this API. To learn more, in
|Delegated (personal Microsoft account) | Not supported. | |Application | User.Read.All, Directory.Read.All |
-Use the follow scenario guidance to help determine which permission types to use:
-- Use User.Read and GroupMember.Read.All or User.Read and Group.Read.All permissions to get group memberships for the signed-in user.-- Use User.ReadBasic.All and GroupMember.Read.All, User.Read.All and GroupMember.Read.All, User.ReadBasic.All and Group.Read.All or User.Read.All and Group.Read.All permissions to get group memberships for any user.-- Use GroupMember.Read.All or Group.Read.All permission to get group memberships for a group.-- Use Directory.Read.All permission to check group memberships for a directory object.
+The following table lists the permission types to use for different scenarios.
+
+| Scenario | Permissions |
+|:-|:-|
+| To get group memberships for the signed-in user | Use one of the following sets of permissions: <br/> <li> **User.Read** and **GroupMember.Read.All** <li>**User.Read** and **Group.Read.All** |
+| To get group memberships for any user | Use one of the following sets of permissions: <br/> <li> **User.ReadBasic.All** and **GroupMember.Read.All** <li>**User.Read.All** and **GroupMember.Read.All** <li>**User.ReadBasic.All** and **Group.Read.All** <li>**User.Read.All** and **Group.Read.All** |
+| To get group memberships for a group | Use either the **GroupMember.Read.All** or **Group.Read.All** permission. |
+| To get group memberships for a service principal | Use one of the following sets of permissions <br/> <li>**Application.ReadWrite.All** and **GroupMember.Read.All** <li>**Application.ReadWrite.All** and **Group.Read.All** |
+| To get group memberships for a directory object | Use the **Directory.Read.All** permission. |
## HTTP request+ <!-- { "blockType": "ignored" } --> ```http POST /me/checkMemberGroups
POST /groups/{id}/checkMemberGroups
POST /directoryObjects/{id}/checkMemberGroups ``` ## Request headers+ | Name | Type | Description| |:|:--|:-| | Authorization | string | Bearer {token}. Required. | | Content-Type | string | application/json | ## Request body+ In the request body, provide a JSON object with the following parameters. | Parameter | Type |Description|
If successful, this method returns `200 OK` response code and String collection
## Example
-##### Request
+### Request
# [HTTP](#tab/http)
Content-type: application/json
-##### Response
+### Response
Note: The response object shown here might be shortened for readability. <!-- { "blockType": "response",
v1.0 Directoryobject Delete https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directoryobject-delete.md
Namespace: microsoft.graph
Deletes a directoryObject. ## Permissions+ One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference).
One of the following permissions is required to call this API. To learn more, in
|Application | Not supported. | ## HTTP request+ <!-- { "blockType": "ignored" } --> ```http DELETE /directoryObjects/{id} ``` ## Request headers+ | Name | Type | Description| |:|:--|:-| | Authorization | string | Bearer {token}. Required. | ## Request body+ Do not supply a request body for this method. ## Response
Do not supply a request body for this method.
If successful, this method returns `204 No Content` response code. It does not return anything in the response body. ## Example
-##### Request
+
+### Request
# [HTTP](#tab/http)
DELETE https://graph.microsoft.com/v1.0/directoryObjects/{id}
-##### Response
+### Response
<!-- { "blockType": "response",
v1.0 Directoryobject Get https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directoryobject-get.md
doc_type: apiPageType
Namespace: microsoft.graph
-Retrieve the properties and relationships of directoryObject object.
+Retrieve the properties and relationships of a directoryObject object.
+ ## Permissions+ One of the following permissions is required to call this API. To learn more, including how to choose permissions, see [Permissions](/graph/permissions-reference). |Permission type | Permissions (from least to most privileged) |
One of the following permissions is required to call this API. To learn more, in
```http GET /directoryObjects/{id} ```
-## Optional query parameters
-This method supports the [OData Query Parameters](/graph/query-parameters) to help customize the response.
++ ## Request headers+ | Name | Type | Description| |:--|:|:-| | Authorization | string | Bearer {token}. Required. |
Do not supply a request body for this method.
## Response If successful, this method returns a `200 OK` response code and [directoryObject](../resources/directoryobject.md) object in the response body.+ ## Example
-##### Request
+
+### Request
# [HTTP](#tab/http)
GET https://graph.microsoft.com/v1.0/directoryObjects/{id}
-##### Response
-Note: The response object shown here might be shortened for readability.
+### Response
+
+The following is an example of the response.
+>**Note:** The response object shown here might be shortened for readability.
<!-- { "blockType": "response", "truncated": true,
HTTP/1.1 200 OK
Content-type: application/json {
- "id": "id-value"
+ "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#directoryObjects/$entity",
+ "@odata.type": "#microsoft.graph.user",
+ "@odata.id": "https://graph.microsoft.com/v2/84841066-274d-4ec0-a5c1-276be684bdd3/directoryObjects/6ea91a8d-e32e-41a1-b7bd-d2d185eed0e0/Microsoft.DirectoryServices.User",
+ "id": "6ea91a8d-e32e-41a1-b7bd-d2d185eed0e0",
+ "businessPhones": [],
+ "displayName": "Conf Room Adams",
+ "givenName": null,
+ "jobTitle": null,
+ "mail": "Adams@Contoso.com",
+ "mobilePhone": null,
+ "officeLocation": null,
+ "preferredLanguage": null,
+ "surname": null,
+ "userPrincipalName": "Adams@Contoso.com"
} ```
v1.0 Directoryobject Getbyids https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directoryobject-getbyids.md
In the request body, provide a JSON object with the following parameters.
| Parameter | Type |Description| |:|:--|:-|
-|ids|String collection| A collection of IDs for which to return objects. The IDs are GUIDs, represented as strings. You can specify up to 1000 IDs. |
-|types|String collection| A collection of resource types that specifies the set of resource collections to search. If not specified, the default is [directoryObject](/graph/api/resources/directoryobject?view=graph-rest-v1.0), which contains all of the resource types defined in the directory. Any object that derives from [directoryObject](/graph/api/resources/directoryobject?view=graph-rest-v1.0) may be specified in the collection; for example: [user](/graph/api/resources/user?view=graph-rest-v1.0), [group](/graph/api/resources/group?view=graph-rest-v1.0), [device](/graph/api/resources/device?view=graph-rest-v1.0), and so on. To search for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization specify [directoryObjectPartnerReference](/graph/api/resources/directoryobjectpartnerreference?view=graph-rest-v1.0). If not specified, the default is [directoryObject](/graph/api/resources/directoryobject?view=graph-rest-v1.0), which contains all of the resource types defined in the directory, except for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization. The values are not case sensitive.|
+|ids|String collection| A collection of IDs for which to return objects. The IDs are GUIDs, represented as strings. You can specify up to 1000 IDs. |
+|types|String collection| A collection of resource types that specifies the set of resource collections to search. If not specified, the default is [directoryObject](../resources/directoryobject.md), which contains all of the resource types defined in the directory. Any object that derives from [directoryObject](../resources/directoryobject.md) may be specified in the collection; for example: [user](../resources/user.md), [group](../resources/group.md), and [device](../resources/device.md) objects. <br/><br/>To search for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization specify [directoryObjectPartnerReference](../resources/directoryobjectpartnerreference.md). If not specified, the default is [directoryObject](../resources/directoryobject.md), which contains all of the resource types defined in the directory, except for references to a [Cloud Solution Provider](https://partner.microsoft.com/cloud-solution-provider) partner organization. </br><br/> The values are not case-sensitive.|
## Response
v1.0 Directoryobject Getmembergroups https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/api/directoryobject-getmembergroups.md
Title: "Get member groups"
+ Title: "directoryObject: getMemberGroups"
description: "Return all the groups that the specified user, group, or directory object is a member of. This function is transitive." ms.localizationpriority: medium
ms.prod: "directory-management"
doc_type: apiPageType
-# Get member groups
+# directoryObject: getMemberGroups
Namespace: microsoft.graph
v1.0 Directoryobject https://github.com/microsoftgraph/microsoft-graph-docs/commits/master/api-reference/v1.0/resources/directoryobject.md
Title: "directoryObject resource type"
-description: "Represents an Azure Active Directory object. The **directoryObject** type is the base type for many other directory entity types."
+description: "Represents an Azure Active Directory object. The directoryObject type is the base type for many other directory entity types."
ms.localizationpriority: high ms.prod: "directory-management"