Get-MgmtGraphDeviceMemberOf

MgmtGraph: Audits group membership for a Microsoft Graph device

Script

#Requires -Version 5.1
#Requires -Modules Microsoft.Graph.Identity.DirectoryManagement

[CmdletBinding()]
Param (
    [Parameter(Mandatory = $true, Position = 0)]
    [string]$Identity
)

Process {
    try {
        $groups = Get-MgDeviceMemberOf -DeviceId $Identity -All -ErrorAction Stop
        
        $results = foreach ($g in $groups) {
            [PSCustomObject]@{
                DisplayName = $g.AdditionalProperties.displayName
                Type        = $g.AdditionalProperties.'@odata.type'.Replace('#microsoft.graph.', '')
                Id          = $g.Id
                Timestamp   = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
            }
        }

        Write-Output ($results | Sort-Object DisplayName)
    }
    catch {
        throw
    }
}

Customize

Identity string

Specifies the ID of the device to audit.