cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Anonymous
Not applicable

How to use Azure Ad CheckMemberGroupsV2

Hallo, 

 

I have a canvas application that uses the Azure Ad connector. 

I use the CheckMemberGroups to check if a person is a member of a group with the following statement: 

!IsEmpty((AzureAD.CheckMemberGroups(User().Email; ["group-id"]).Value)) 

 

This function is deprecated and so I want to use the CheckMemberGroupsV2 version. But the V2 function dosn't work like the V1 version. Even if the documentary is the same (https://docs.microsoft.com/en-us/connectors/azuread/#getmembergroups_response_v2)

I am not able to use the ".Value".

When I use the statement:

!IsEmpty((AzureAD.CheckMemberGroupsV2(User().Email; ["group-id"]))) 

the statement always evaluate to true. 

So my question is: How to use the CheckMemberGroupsV2 method to find out, if a person is a member of a group? 

 

 

1 ACCEPTED SOLUTION

Accepted Solutions
rimatos
Community Support
Community Support

Hi @Anonymous ,

 

So I tested the CheckMemberGroupsV2 method in my environment, and I was able to correctly identify the groups where the user belonged to. You should do something like this:

 

!IsEmpty(AzureAD.CheckMemberGroupsV2(User().Email,["24e48800-d0f1-46e6-b9e8-54d838d5a457"]).value)

 

 

The difference in this method is that you should put the Value at the end of the formula, so that way it will let you know if the user indeed exists or not.

 

An example that I used was the one in the picture bellow, where upon clicking the button, the label would be updated with the result:

 

image.png

 

Hope this helps you move forward! Let me know if this reply helped. 🙂

 

 

Regards,

Ricardo

View solution in original post

3 REPLIES 3
rimatos
Community Support
Community Support

Hi @Anonymous ,

 

So I tested the CheckMemberGroupsV2 method in my environment, and I was able to correctly identify the groups where the user belonged to. You should do something like this:

 

!IsEmpty(AzureAD.CheckMemberGroupsV2(User().Email,["24e48800-d0f1-46e6-b9e8-54d838d5a457"]).value)

 

 

The difference in this method is that you should put the Value at the end of the formula, so that way it will let you know if the user indeed exists or not.

 

An example that I used was the one in the picture bellow, where upon clicking the button, the label would be updated with the result:

 

image.png

 

Hope this helps you move forward! Let me know if this reply helped. 🙂

 

 

Regards,

Ricardo

Anonymous
Not applicable

Hello @rimatos

 

thank you for your answer. Your reply helped me.

The error occurend because the first version of this method uses ".Value" and the V2 uses".value".

I am looking to use this but I am guessing that given this (Standard?) connector needs the following graph permissions:

  • Group.ReadWrite.All
  • User.ReadWrite.All
  • Directory.ReadWrite.All

Then I guess makers are  going down the service account route ? In which case I wonder if this account just  doesn't need a E1 or E3 but just a AD P1 permissions.

Helpful resources

Announcements
Ignite 2022

WHAT’S NEXT AT MICROSOFT IGNITE 2022

Explore the latest innovations, learn from product experts and partners, level up your skillset, and create connections from around the world.

Power Apps Africa Challenge 2022

Power Apps Africa Challenge

Your chance to join an engaging competition of Power Platform enthusiasts.

Super User 2 - 2022 Congratulations

Welcome Super Users

The Super User program for 2022 - Season 2 has kicked off!

September Events 2022

Check out all of these events

Attend in person or online, there are incredible conferences and events happening all throughout the month of September.

Users online (1,935)