How to find empty groups in Microsoft Entra ID

Empty groups in Microsoft Entra ID (formerly Azure Active Directory) can arise due to accidental creations or by doing a group cleanup. These groups create clutter and confusion in your environment if left unmanaged.

Microsoft Entra ID currently does not offer any method to find empty groups, which leads administrators to resort to PowerShell scripts. However, M365 Manager Plus, a holistic M365 administration and security solution, enables users to find those empty groups script-free in just a few clicks.

The table below compares how you can find empty groups using PowerShell and M365 Manager Plus.

    # Import the Microsoft Graph module
    Import-Module Microsoft.Graph
    # Authenticate with Microsoft Graph
    Connect-MgGraph -Scopes "Group.Read.All"
    # Get all groups
    $allGroups = Get-MgGroup -All
    # Find and display empty groups
    $emptyGroups = $allGroups | Where-Object { IsGroupEmpty($_.Id) }
    $emptyGroups | Select-Object DisplayName, Id            
                

What to do after you find empty groups

After getting the list of empty groups, it makes sense to delete them so you can declutter your environment.

In Microsoft Entra ID, you'll need to navigate to Identity > Groups > All groups and search for each inactive group individually to delete them.

On the contrary, M365 Manager Plus enables you to automate the entire process of finding inactive users and deleting them in bulk, helping you save time and repetitive effort.

Follow the steps below to automate empty group cleanup in M365 Manager Plus:

1. Navigate to Automation > Create New Automation.
2. Select Delete Groups as the task.
3. Select Empty Groups as the report from which the objects will be imported from.
4. Select the frequency at which the automation must be run.
5. Click Save.

   

Limitations of using PowerShell and Microsoft Entra ID to clear empty groups

• Only users with PowerShell knowledge can execute the command.
• PowerShell scripts take time and affect your productivity.
• Microsoft Entra ID doesn't allow you to delete multiple inactive groups in bulk.
• The user requires at least the Group Administrator role to perform delete operations.

Benefits of using M365 Manager Plus

• Delete multiple empty groups in bulk and eliminate repetitive actions.
• Manage groups, users, mailboxes, sites, and contacts effortlessly without PowerShell scripting.
• Gain a thorough understanding of your environment in Microsoft Entra ID, Exchange Online, SharePoint Online, OneDrive for Business, and other Microsoft 365 services with detailed reports from a single console.
• Delegate granular permissions to technicians without elevating their Microsoft 365 privileges, and create custom roles with any combination of reporting, management, and auditing tasks.
• Monitor the health and performance of Microsoft 365 features and endpoints around the clock.