Get-EntraGuestUserReport

<#
.SYNOPSIS
    Reports all guest accounts in Entra ID.

.DESCRIPTION
    Lists every guest user with creation date, invitation status and
    group memberships, so guest account sprawl is visible in a single
    report instead of scattered across individual group membership lists.

.EXAMPLE
    .\Get-EntraGuestUserReport.ps1

.NOTES
    Requires Microsoft.Graph.Users and Microsoft.Graph.Groups with an
    active Connect-MgGraph session.

.AUTHOR
    Shehryar Hassan
#>

$guests = Get-MgUser -Filter "userType eq 'Guest'" -All -Property Id,DisplayName,Mail,CreatedDateTime,ExternalUserState

$report = foreach ($guest in $guests) {
    $groups = Get-MgUserMemberOf -UserId $guest.Id | ForEach-Object { $_.AdditionalProperties.displayName }
    [pscustomobject]@{
        DisplayName = $guest.DisplayName
        Email       = $guest.Mail
        Created     = $guest.CreatedDateTime
        State       = $guest.ExternalUserState
        GroupCount  = $groups.Count
    }
}

$report | Sort-Object Created | Format-Table -AutoSize
Write-Host "$($guests.Count) guest account(s) found" -ForegroundColor Cyan