Get member groups


APIs under the /beta version in Microsoft Graph are subject to change. Use of these APIs in production applications is not supported.

Return all the groups that the specified user, group, service principal or directory object is a member of. This function is transitive.


One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) Directory.Read.All
Delegated (personal Microsoft account) Not supported.
Application Directory.Read.All

HTTP request

POST /me/getMemberGroups
POST /users/{id | userPrincipalName}/getMemberGroups
POST /groups/{id}/getMemberGroups
POST /servicePrincipals/{id}/getMemberGroups
POST /directoryObjects/{id}/getMemberGroups

Request headers

Name Type Description
Authorization string Bearer {token}. Required.
Content-Type application/json

Request body

In the request body, provide a JSON object with the following parameters.

Parameter Type Description
securityEnabledOnly Boolean true to specify that only security groups that the entity is a member of should be returned; false to specify that all groups and directory roles that the entity is a member of should be returned. Note: The function can only be called on a user if the parameter is true.


If successful, this method returns 200 OK response code and String collection object in the response body.


Content-type: application/json

  "securityEnabledOnly": true

Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-type: application/json

    "@odata.context": "$metadata#Collection(Edm.String)",
    "value": [

SDK sample code

GraphServiceClient graphClient = new GraphServiceClient( authProvider );

var securityEnabledOnly = true;

await graphClient.Me

Read the SDK documentation for details on how to add the SDK to your project and create an authProvider instance.