Repository navigation
AdditionalProperties is confusing #3115
Description
Is your feature request related to a problem? Please describe the problem.
The way how the use of the -Property parameter changes the results is confusing.
Get-MgGroupMember -GroupId "…"
Returns and object with a propertyidGet-MgGroupMember -GroupId "…" -Property "city"
Returns and object with a dictionaryAdditionalPropertieswith the keycity, but propertyiddoes not exist.Get-MgGroupMember -GroupId "…" -Property "id","city"
Returns and object with a propertyidand a dictionaryAdditionalPropertieswith the keycity.
My question is:
- When
idis treated as a standard and immediate property of the returned user object (rather than an additional property), why is it left blank, when you manually add properties to the request and don't includeid? - Why is there a distinction between immediate properties (
id) and additional properties (everything notid)?
Looking at the HTTPS request/response, this makes no sense because all properties are on the same JSON level and there is no distinction between standard and additional properties:
GET https://graph.microsoft.com/v1.0/groups/<GUID>/members?$select=id,department
{
"@odata.context": "https://graph.microsoft.com/v1.0/$metadata#directoryObjects(id,department)",
"value": [
{
"@odata.type": "#microsoft.graph.user",
"id": "xxx",
"department": "Sales"
},
{
"@odata.type": "#microsoft.graph.user",
"id": "yyy",
"department": "Finance"
},
{
"@odata.type": "#microsoft.graph.user",
"id": "zzz",
"department": "Management"
}
]
}
Coming from Active Directory, this behaviour is also unexpected, where the -Properties attribute add the selected properties directly to the user object.
Describe the solution you'd like.
A request Get-MgGroupMember -GroupId "…" -Property "id","city" should return an object with a property id and another property department.
Additional context?
No response
Activity
timayabi2020 commentedon Feb 10, 2025
Hi Daniel Niccoli (@danielniccoli) What you are experiencing is by design because of the SDK's code generator's (https://github.com/Azure/autorest.powershell) way of handling response entities defined in the OpenApi file. Attached is the image of the response entity defined in the open Api file used to generate the cmdlet in question.
Based on the code generator's rules:
deletedDateTimeproperty is fine since it has a defined type (string) and this will be displayed in the PowerShell session.additionalPropertiesbecause it doesn't know the exact structure.In summary, for the sdk to display any property, it should have a defined type.
In case you need any further clarifications regarding the API path (
/users/{user-id}/memberOf) responsible for this issue, kindly raise an issue here https://developer.microsoft.com/en-us/graph/support so that the API owner can respond to it.danielniccoli commentedon Feb 12, 2025
Why is
ida immediate property and other properties likecityare nested withingadditionalProperties?timayabi2020 commentedon Feb 12, 2025
Daniel Niccoli (@danielniccoli) I unfortunately don't have visibility about API design decisions hence why I referred you to the graph support team here https://developer.microsoft.com/en-us/graph/support. Please raise the question there.
danielniccoli commentedon Feb 12, 2025
I don't understand what the Graph support team has to do with that question. The sample response from the Graph API, which I included, does not make a distinction between
idanddepartmentor any other property likecity. So why does the PowerShell SDK treat them differently? Again, Why isida immediate property and other properties likecityare nested withinadditionalProperties?gavinbarron commentedon Oct 2, 2025
Closing this as working as designed.
Groups can contain object of many types, these all share a common root object, which the results are serialized into. Properties that belong to child types are collected in the Additional Properties collection.
Until we change the underly technology for the PowerShell this will not change.
gavinbarron commentedon Oct 2, 2025
To answer the direct question, id and department are part of the directory object class, city is not.