EntraGroupInsights

0.1.2

Visualizes and analyzes Microsoft Entra ID dynamic group rules: rule-tree parsing, at-scale membership simulation, snapshot/diff versioning, and blast-radius mapping (Conditional Access, license, app role, and PIM dependencies) for a given group.

Minimum PowerShell version

5.1

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name EntraGroupInsights -RequiredVersion 0.1.2

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name EntraGroupInsights -Version 0.1.2

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) Pascal Huber. All rights reserved.

Package Details

Author(s)

  • Pascal Huber

Tags

Entra EntraID AzureAD IdentityGovernance ConditionalAccess DynamicGroups MicrosoftGraph Security

Functions

Get-EGIDynamicGroupRuleTree Test-EGIDynamicGroupRule Get-EGIGroupBlastRadius Export-EGIGroupBlastRadiusSvg Export-EGIGroupSnapshot Compare-EGIGroupSnapshot

PSEditions

Desktop Core

Dependencies

Release Notes

0.1.2: rule-engine hardening (wildcard values compared literally, extension_* attributes, quoted commas in -in lists, warning on ambiguous -and/-or mixes), leaf compilation cache for bulk simulation, -PassThru returns the original user objects, advanced-query headers for snapshot export, blast-radius count/risk fixes, BOM-less UTF-8 output.

FileList

Version History

Version Downloads Last updated
1.0.0 4 8/4/2026
0.1.2 (current version) 15 7/21/2026
0.1.1 4 7/21/2026