private/helper/m365/entra/group/Get-EntraIdGroupMemberTransitive.ps1

function Get-EntraIdGroupMemberTransitive
{
    <#
    .SYNOPSIS
        Get members recursively from a group, and only return the users.
    .DESCRIPTION
        Return transitive users from a group.
    .NOTES
        Requires the following modules:
        - Microsoft.Graph.Authentication
    .EXAMPLE
        Get-EntraIdGroupMemberTransitive -Id '<group id>';
    #>

    [cmdletbinding()]
    param
    (
        # Group ID.
        [Parameter(Mandatory = $true)]
        [Parameter(ParameterSetName = 'Id')]
        [ValidateNotNullOrEmpty()]
        [string]$Id
    )
    BEGIN
    {
        # URL to get transitive members.
        [string]$uri = ('https://graph.microsoft.com/beta/groups/{0}/transitiveMembers' -f $Id);
    }
    PROCESS
    {
        # Try to invoke API.
        try
        {
            # Write to log.
            Write-CustomLog -Category 'Entra' -Message ("Trying to get members from group '{0}'" -f $Id) -Level Verbose;

            # Get members.
            $response = Invoke-MgGraphRequest -Method Get -Uri $uri -OutputType PSObject -ErrorAction Stop;

            # Write to log.
            Write-CustomLog -Category 'Entra' -Message ("Successfully got members from group '{0}'" -f $Id) -Level Verbose;
        }
        # Something went wrong while getting members from group.
        catch
        {
            # Throw exception.
            throw ("Something went wrong while getting members from group '{0}', exception is '{1}'" -f $Id, $_);
        }
    }
    END
    {
        # If there is any members.
        if ($null -ne $response.value)
        {
            # Return members.
            return $response.value;
        }
    }
}