SALES: 1-800-867-1380
This topic has not yet been rated - Rate this topic

Check Group Membership (transitive)

Updated: August 30, 2013

The Check Group Membership operation is performed by invoking the IsMemberOf function on the directory service. This function returns a Boolean value that indicates whether a specified user, group, or contact is a member of a specified group. The operation is transitive, that is, if User A is a member of Group B and Group B is a member of Group C and the function is invoked with User A and Group C as parameters, it will return true. You can contrast this with the memberOf navigation property for User A, which is intransitive and would therefore not return Group C in its result set because User A is a member of Group C only through its membership in Group B.

Request URI

The request may be constructed as follows. Replace mytenantdomain with the domain of your Windows Azure Active Directory tenant, such as The api-version query string parameter is required. The examples in this topic use the tenant domain to address the tenant. For other ways of addressing the tenant, see Addressing Entities and Operations in the Graph.


HTTP Method Request URI HTTP Version


HTTP 1.1

Request Headers


Request Header Description


Required. A bearer token issued by Windows Azure Access Control. See Windows Azure AD Graph Authentication for more information.


Required. The media type of the content in the request body.


Required. The length of the request in bytes.

Request Body

The parameters to the function: groupId, the object ID of the group to check, and memberId, the object ID of the contact, group, or user to check for membership in the specified group.

Sample Requests

The following sample request checks the membership of the specified object in the specified group.

Authorization: Bearer eyJ0eX ... FWSXfwtQ
Content-Type: application/json
Content-Length: 108



Status Code

A successful operation returns status code 200 OK.



Response Header Description


The identifier for the server that performed the requested operation.


The key that identifies the current session with the directory service.

Sample Response

The following sample response is received when the sample request above is sent. It indicates that the specified member object is a member of the specified group.

HTTP/1.1 200 OK
Cache-Control: no-cache
Content-Length: 112
Content-Type: application/json;odata=minimalmetadata;streaming=true;charset=utf-8
Server: Microsoft-IIS/7.5
ocp-aad-diagnostics-server-name: 0KG3XJca10JBaCPPVyV6S/TPZvVBRyYmKz0GZKrigX0=
request-id: 0f6e8f9c-3491-4cfb-b879-552017c2607c
client-request-id: 0c0936e5-5bb3-4018-8f5b-5ecf20bd33ac
x-ms-dirapi-data-contract-version: 1.0
ocp-aad-session-key: 0q9HykNQlCqskP3L4QJuUOC5jb_JHzxWbpOn7gQdnwl5O_n4XARvKaIXcBpZfo45KLF1OHewKqoyEcI3M4DS9gzY88nvGFMAkhHRwVDrY6I0ItcZ1uza3nSHkpjCpKGPCZUNC-09A5zchBOD1N-UpA.3AbmtQAEUXHvIvb5yQlWlNqvmmbhah1nmyFT6Az9PXM
X-Content-Type-Options: nosniff
DataServiceVersion: 3.0;
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
X-Powered-By: ARR/2.5
X-Powered-By: ASP.NET
Date: Fri, 29 Mar 2013 19:31:46 GMT

    "odata.metadata": "$metadata#Edm.Boolean",
    "value": true

See Also



Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback
© 2014 Microsoft. All rights reserved.