List Group Ownerships
List the groups this user owns
Description
Lists the Entra ID groups this user owns, with their names and IDs. The report can be sent by email or provided as a download link.
Setup regarding email sending
Sending an email report is optional and only happens when a recipient (EmailTo) is provided. The sender address is taken from the RJReport.EmailSender tenant setting.
This runbook sends emails using the Microsoft Graph API. To send emails via Graph API, you need to configure an existing email address in the runbook customization.
See the RealmJoin Report Settings documentation for details on all available settings.
Email branding
The report email honors the optional RJReport.Branding.* tenant settings:
Header and footer image – public HTTPS URLs, PNG/JPEG/GIF, max. 200 KB each
Footer link – target of the footer image
Accent and text color – 6-digit hex values, e.g.
#0052cc
When these settings are not configured, the default RealmJoin graphics and colors are used. An image that cannot be downloaded or validated, or an invalid color value, never prevents the report email – the corresponding default is used instead.
Setup instructions and image requirements: Email branding.
Location
User → General → List Group Ownerships
Full Runbook name
rjgit-user_general_list-group-ownerships
Details
Version
1.4.0
Required modules
RealmJoin.RunbookHelper (>= 0.8.9) Az.Accounts (>= 5.5.2)
Schedulable
no
Permissions
Application permissions
Type: Microsoft Graph
User.Read.All
Resolves the target user's id and UPN before listing owned groups
Group.Read.All
Reads /users/{id}/ownedObjects to report each owned group
Mail.Send (optional — feature: Email report)
Sends the ownership report via Send-RjReportEmail when SendMail is enabled
Organization.Read.All
Reads /organization for the tenant name in the email report
Parameters
UserName
User principal name of the user the runbook acts on. Set by the portal from the selected user.
Required
true
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
SendMail
Send the report to the recipient email address.
Required
false
Default Value
False
Type
Boolean
Portal display name
Send the report by email?
Portal options
Yes - send the report via email
true
No - do not send an email
false
EmailTo
Send the report to these addresses. Separate several with commas; each recipient gets a separate email.
Required
false
Default Value
Type
String
Portal display name
Recipient email address(es)
Hidden in portal
yes (preset via runbook customization)
EmailFrom
Sender address of the report email. Taken from the tenant setting RJReport.EmailSender.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
BrandingHeaderImageUrl
Header image of the report email (HTTPS URL, PNG/JPEG/GIF, max 200 KB). Taken from the tenant setting RJReport.Branding.HeaderImageUrl; the default RealmJoin header is used when empty.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
BrandingFooterImageUrl
Footer image of the report email (HTTPS URL, PNG/JPEG/GIF, max 200 KB). Taken from the tenant setting RJReport.Branding.FooterImageUrl; the default RealmJoin footer is used when empty.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
BrandingFooterLink
Link behind the footer image of the report email. Taken from the tenant setting RJReport.Branding.FooterLink; realmjoin.com is used when empty.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
BrandingAccentColor
Accent color of the report email as a 6-digit hex value. Taken from the tenant setting RJReport.Branding.AccentColor; the RealmJoin default is used when empty or invalid.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
BrandingTextColor
Text color of the report email as a 6-digit hex value. Taken from the tenant setting RJReport.Branding.TextColor; the RealmJoin default is used when empty or invalid.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
ReportFileFormat
Deliver the report as CSV, as an Excel workbook, or both.
Required
false
Default Value
CSV & XLSX
Type
String
Portal display name
Report file format
Hidden in portal
yes (preset via runbook customization)
Portal options
CSV & XLSX
CSV & XLSX
CSV only
CSV only
XLSX only
XLSX only
CreateDownloadLink
Also upload the report and return a download link that expires after a few days.
Required
false
Default Value
False
Type
Boolean
Portal display name
Create a download link?
Portal options
Yes - upload report and return a download link
true
No - do not create a download link
false
ContainerName
Storage container the report files are uploaded to. Set per runbook.
Required
false
Default Value
user-group-ownerandmemberships
Type
String
Hidden in portal
yes (preset via runbook customization)
ResourceGroupName
Resource group of the storage account for report uploads. Taken from the tenant setting RJReport.StorageAccount.ResourceGroup.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
StorageAccountName
Storage account for report uploads. Taken from the tenant setting RJReport.StorageAccount.StorageAccountName.
Required
false
Default Value
Type
String
Hidden in portal
yes (preset via runbook customization)
LinkExpiryDays
Number of days a download link stays valid. Taken from the tenant setting RJReport.StorageAccount.LinkExpiryDays.
Required
false
Default Value
6
Type
Int32
Hidden in portal
yes (preset via runbook customization)
Last updated
Was this helpful?