How to get a groups claims for a sharepoint person column?

[Oskarkuus]

To patch a Person column in sharepoint i need to send:

Claims
Department
DisplayName
Email
JobTitle
Picture

Picture, JobTitle, Department, Email can be sent as blank.

But DisplayName and Claims need to be there.

For a user account the claim is easy to build.

i:0#.f|membership|<mailadress>

But how do i build the claim for a group?

c:0t.c|tenant|<group-id>

c:0o.c|federateddirectoryclaimprovider|<group-id>

I can not find a way to identify what groups have what claim.

How can i get a groups claim?

[v-jefferni]

Hi @Oskarkuus ,

Could you please share more details about your scenario? Does this topic relate to a Canvas App? Generally speaking, in a Canvas App you can use a Combo box with its Items property set to Choices(ListName.PeopleColumn) and make users be able to search all the users and groups:

In addition, c:0o.c|federateddirectoryclaimprovider|<group-id> indicates it's a Teams or SharePoint group (O365 groups), c:0t.c|tenant|<group-id> indicates it's a security group. 

Best regards,

[Oskarkuus]

Hi

Yes, it is in a CanvasApp.

The problem i am having is that i groups with the attribute.

I do not want to use a combobox in my app for users to select a group, i want to use a gallery. But i can not use a gallery and use :

Choices(LISTNAME.COLUMNNAME)

So i need to use something else to list the groups, then save the selected group to a sharepoint column. But to be able to save a group to a sharepoint column, i need to have the groups claim correct... so i am looking for a way to identify a groups claim value

Looking at groups with this connection

GrupperiOffice365.ListGroups().value

I have two groups fro example:

displayname: testgroup1
mailenabled: true
securtyenabled: true
mail:<mailadress....>

and

displayname: testgroup2
mailenabled: true
securtyenabled: true
mail:<mailadress....>

If i setup a combobox looking at the claim from a person column for tesgroup1 and testgroup2

testgroup1 claim: c:0o.c|federateddirectoryclaimprovider|<GROUPID>

testgroup2 claim: c:0t.c|tenant|<GROUPID>

so How can i figure out what claim groups should have to be able to be saved to a person column if they can be securtyenabled and mailenabled and have either tenant or federateddirectoryclaimprovider in the claim...

is there something that differ the groups that i actually can use?

[v-jefferni]

Hi @Oskarkuus ,

Choices can be used for Items of a Gallery to list all groups, including Claims field:

You can even Filter on the items of retrieve mail enabled or security enabled groups only:

Best regards,

[Oskarkuus]

Interesting, i do not get that result.

Here is what i do:

1. I have a sharepoint list with a person column.

2. I have a powerapp (canvas) with gallery and searchbox (textinput).

In azure i do have a group called TestSak

I can only search the first groups that display in the gallery. i can not find all groups in my tenant.

Also if i count rows on choices i dont get all groups

or the gallery

so i have a tenant with 150k groups. how to find all 150k groups and the claim for each group?

[Oskarkuus]

Still havent been able to figure out how to create a good search-group experience with a gallery and also be able to get the Claim for the group.

c:0t.c|tenant|<group-id>

c:0o.c|federateddirectoryclaimprovider|<group-id>

i:0#.f|membership|<mailadress>

Using a SP column in a Combobox seems to be the only way to
1. Find all groups in your tenant

2. Get the groups claim

Can this really be true?

Looking into if Power Automate can do this instead... Lookup group based on ID to find the claim.

[Oskarkuus]

Bumping this up again. Collecting the correct claim of a group is still unsolved. 

[Oskarkuus]

Frustrating... but still not found an solution to this.

the claim does not follow a logical rule it seems...

[Anonymous]

facing this same issue does anyone have any new info? trying to patch a group email to sharepoint column, but having a tough time getting the group email "claim" id eg: (Top Row Group, Bottom row Person... the Getting the ID for a group can be done if the groups are known, but how to get them on the fly?

[Oskarkuus]

I have not found a solution. 

I wonder if the sharepoint api (rest) can be used with power automate. 

If i have the group id. Lookup the id in sp api with flow and find the claim?