How to Remove a User from Office 365 Group using PowerShell?
Requirement: Remove user from office 365 group using PowerShell
How to remove a User from Office 365 Group?
If you are an Office 365 administrator, there may come a time when you need to remove a user from the group. This article will show you how to remove a user from an Office 365 group using PowerShell and with the Azure Active Directory Module for PowerShell. We will also show you how to remove a user from an Office 365 group using the Microsoft 365 Admin Center.
You can remove members from any Office 365 group through Microsoft 365 admin center as an admin. Here is how:
- Login to the Microsoft 365 Admin Center site: https://admin.microsoft.com
- Expand Groups and Click on the Groups link in the left navigation.
- Search and Select the Office 365 group you wish to remove members.
- On the Group Details page, click on the “Members” tab >> Click on View all and manage members link.
- Now, you can remove group members by clicking on the “X” button next to each member. Hit save once you are done!
How to Remove Group Memberships of a Microsoft 365 User?
Instead of going through Groups, You can proceed through the specific user and remove the group membership. Here is how:
- Open the Admin app in Office 365 >> In the left navigation pane, select Users >> Active users.
- Search and get the user you want to remove, select the three dots from the user object, and then select “Manage groups”.
- In the next window, Select the Group(s) you would like to remove and click on the “Remove” button and confirm the prompt.
PowerShell to Remove User from Office 365 Group
A quick and easy way to remove a user from an Office 365 group is to use the Azure AD PowerShell. Here is how we can use PowerShell to remove a user from Office 365 group:
#Variables
$GroupName = "IT Team"
$UserUPN = "[email protected]"
#Connect to AzureAD
Connect-AzureAD -Credential (Get-Credential)
#Get the Azure AD Group
$AADGroup = Get-AzureADGroup -Filter "DisplayName eq '$GroupName'"
#Get the Azure AD User
$AADUser = Get-AzureADUser -Filter "UserPrincipalName eq '$UserUPN'"
#Remove User from Group
Remove-AzureADGroupMember -ObjectId $AADGroup.ObjectID -MemberId $AADUser.ObjectID
Similarly, You can remove a user from all Office 365 Groups quickly through PowerShell as:
#Variables
$UserUPN = "[email protected]"
#Connect to AzureAD
Connect-AzureAD -Credential (Get-Credential) | Out-Null
#Get all Azure AD Unified Groups
$AADGroups = Get-AzureADMSGroup -Filter "groupTypes/any(c:c eq 'Unified')" -All:$true
#Get the Azure AD User
$AADUser = Get-AzureADUser -Filter "UserPrincipalName eq '$UserUPN'"
#Check each group for the user
ForEach ($Group in $AADGroups)
{
$GroupMembers = (Get-AzureADGroupMember -ObjectId $Group.id).UserPrincipalName
If ($GroupMembers -contains $UserUPN)
{
#Remove user from Group
Remove-AzureADGroupMember -ObjectId $Group.Id -MemberId $AADUser.ObjectId
Write-Output "$UserUPN was removed from $($Group.DisplayName)"
}
}
How about removing multiple users in Microsoft 365 groups from a CSV file? My CSV file has a “UPN” column with the login IDs of users.
#Variables
$CSVFile = "C:\Temp\UserList.csv"
#Connect to AzureAD
Connect-AzureAD -Credential (Get-Credential) | Out-Null
#Get all Azure AD Unified Groups
$AADGroups = Get-AzureADMSGroup -Filter "groupTypes/any(c:c eq 'Unified')" -All:$true
#Iterate through each line in CSV
Import-CSV $CSVFile | ForEach-Object {
#Get the UPN
$UPN = $_.UPN
#Get the Azure AD User
$AADUser = Get-AzureADUser -Filter "UserPrincipalName eq '$UPN'"
#Check each group for the user
ForEach ($Group in $AADGroups)
{
$GroupMembers = (Get-AzureADGroupMember -ObjectId $Group.id).UserPrincipalName
If ($GroupMembers -contains $UPN)
{
#Remove user from Group
Remove-AzureADGroupMember -ObjectId $Group.Id -MemberId $AADUser.ObjectId
Write-Output "$UPN is removed from Group '$($Group.DisplayName)'"
}
}
}
Remove Office 365 Group Member with Exchange Online PowerShell
We can delete a Microsoft 365 group member with Exchange Online PowerShell as well:
#Connect to Exchange Online
Connect-ExchangeOnline -Credential (Get-Credential) -ShowBanner:$false
#PowerShell to remove a Member from office 365 group
Remove-UnifiedGrouplinks -Identity "[email protected]" -LinkType "Members" -Links "[email protected]"
PnP PowerShell to Remove User from a SharePoint Online Site’s Associated Group
When a site is connected with Microsoft 365 group, permissions can be managed at the group level. E.g. To remove a user from site, You have to remove him from the group.
#Parameters
$SiteURL = "https://crescent.sharepoint.com/sites/CorporateBranding"
$UserId= "[email protected]"
Try {
#Connect to PnP Online
Connect-PnPOnline -Url $SiteURL -Interactive
#Get the Site
$Site = Get-PnPSite -Includes GroupId
#Remove user from the Site's associated Microsoft 365 Group
Remove-PnPMicrosoft365GroupMember -Identity $Site.GroupId -Users $UserId
Write-host "Removed User from the Associated Microsoft 365 Group!" -f Green
}
Catch {
Write-host -f Red "Error:" $_.Exception.Message
}
Similarly, to remove the user from the Group owners, use:
Remove-PnPMicrosoft365GroupOwner -Identity $Site.GroupId -Users $UserId
Hi, that’s very usefull script but i want to delete users also from distribution list. So that i removed ‘-Filter “grou(..)’ from $AADGroups. I thought it works as I got message “[email protected] is removed from Group ‘somegroup’ ” but there is error.
“Message: Cannot Update a mail-enabled security groups and or distribution list.”
Probably the solution would be Remove-DistributionGroupMember instead of Remove-AzureADGroupMember. But how to filter distribution groups?
Can you help ?
How was the CSV created that worked with the bulk script?
Just create a CSV with “UPN” as column header.
This is a big help. Is there a way to exclude a single group. My hope is to remove the user from all groups with one exception to which they will remain a member (if they were a member). Unfortunately, my automation does not work if they are removed and added back to this group.
You can just wrap the removal code in an If statement that excludes that group.
if($Group.DisplayName -ne “Group to keep them in”)
{
#do the deletions as normal
}
This is helpful for 1 user. What script can I run if I wanna remove a number of users saved in a CSV file? I want to remove all those users from all groups. It’s over 900 users by the way.
Sure, Article has been updated to bulk remove users in Microsoft 365 Groups from a CSV file.