> For the complete documentation index, see [llms.txt](https://docs.forestall.io/forestall/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.forestall.io/forestall/search-and-reports/azure-entities/entra-id/group.md).

# Group

The **Group** entity represents a group in Azure Active Directory (Entra ID).

| Field                         | Type    | Possible Operators                                             | Description                                                              |
| ----------------------------- | ------- | -------------------------------------------------------------- | ------------------------------------------------------------------------ |
| Guid                          | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Unique identifier for the entity in Forestall                            |
| ObjectID                      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure AD Object ID of the group                                          |
| FSName                        | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name used in Forestall                                           |
| WhenCreated                   | DATE    | SMALLER, LARGER, BETWEEN, EQUAL, IS\_EMPTY                     | Date the group was created                                               |
| Description                   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Description of the group                                                 |
| DisplayName                   | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Display name of the group in Azure AD                                    |
| IsAssignableToRole            | BOOLEAN | N/A (toggle)                                                   | Whether the group can be assigned to an Azure AD role                    |
| OnPremSID                     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | On-premises Security Identifier (SID)                                    |
| OnPremSyncEnabled             | BOOLEAN | N/A (toggle)                                                   | Whether the group is synced from on-premises AD                          |
| SecurityEnabled               | BOOLEAN | N/A (toggle)                                                   | Whether the group is security-enabled                                    |
| SecurityIdentifier            | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Security Identifier of the group                                         |
| TenantID                      | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Azure AD Tenant ID the group belongs to                                  |
| MailEnabled                   | BOOLEAN | N/A (toggle)                                                   | Whether the group is mail-enabled                                        |
| IsAZPrivileged                | BOOLEAN | N/A (toggle)                                                   | Whether the group has privileged access in Azure                         |
| IsShadow                      | BOOLEAN | N/A (toggle)                                                   | Whether the group is a Shadow Admin group                                |
| IsAdmin                       | BOOLEAN | N/A (toggle)                                                   | Whether the group has admin privileges                                   |
| GroupType                     | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Type of group (e.g., Unified, Security)                                  |
| MembershipType                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Membership type (e.g., Assigned, Dynamic)                                |
| MembershipRule                | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Dynamic membership rule expression                                       |
| MembershipRuleProcessingState | TEXT    | LIKE, NOT\_LIKE, EQUAL, NOT\_EQUAL, IS\_EMPTY                  | Processing state of the dynamic membership rule                          |
| MemberCount                   | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Number of members in the group                                           |
| AZTier                        | NUMBER  | EQUAL, BETWEEN, SMALLER, LARGER, SMALLER\_EQUAL, LARGER\_EQUAL | Azure tier classification assigned by Forestall                          |
| IsARMPrivileged               | BOOLEAN | N/A (toggle)                                                   | Whether the object holds a privileged Azure Resource Manager (ARM) role. |