How to use Azure Ad CheckMemberGroupsV2

[Anonymous]

Hallo, 

I have a canvas application that uses the Azure Ad connector. 

I use the CheckMemberGroups to check if a person is a member of a group with the following statement: 

!IsEmpty((AzureAD.CheckMemberGroups(User().Email; ["group-id"]).Value)) 

This function is deprecated and so I want to use the CheckMemberGroupsV2 version. But the V2 function dosn't work like the V1 version. Even if the documentary is the same (https://docs.microsoft.com/en-us/connectors/azuread/#getmembergroups_response_v2)

I am not able to use the ".Value".

When I use the statement:

!IsEmpty((AzureAD.CheckMemberGroupsV2(User().Email; ["group-id"]))) 

the statement always evaluate to true. 

So my question is: How to use the CheckMemberGroupsV2 method to find out, if a person is a member of a group? 

[rimatos · Accepted solution]

Hi @Anonymous ,

So I tested the CheckMemberGroupsV2 method in my environment, and I was able to correctly identify the groups where the user belonged to. You should do something like this:

!IsEmpty(AzureAD.CheckMemberGroupsV2(User().Email,["24e48800-d0f1-46e6-b9e8-54d838d5a457"]).value)

The difference in this method is that you should put the Value at the end of the formula, so that way it will let you know if the user indeed exists or not.

An example that I used was the one in the picture bellow, where upon clicking the button, the label would be updated with the result:

Hope this helps you move forward! Let me know if this reply helped. 🙂

Regards,

Ricardo

[Anonymous]

Hello @rimatos, 

thank you for your answer. Your reply helped me.

The error occurend because the first version of this method uses ".Value" and the V2 uses".value".

[westerdaled]

I am looking to use this but I am guessing that given this (Standard?) connector needs the following graph permissions:

• Group.ReadWrite.All
• User.ReadWrite.All
• Directory.ReadWrite.All

Then I guess makers are  going down the service account route ? In which case I wonder if this account just  doesn't need a E1 or E3 but just a AD P1 permissions.