AzureAD PowerShell通过邮箱复制用户组成员身份报错如何解决

你的脚本核心问题是参数类型不匹配，次要问题存在两处语法错误：

1. Get-AzureADUser返回的是完整的Azure AD用户对象，你直接将整个用户对象赋值给$user1ObjId、$user2ObjId，但后续Get-AzureADUserMembership、Add-AzureADGroupMember的参数要求传入字符串格式的ObjectId，传整个用户对象就会触发参数绑定失败的报错。
2. 列出待复制组的Write-Host行缺少闭合引号，ForEach-Object没有输入管道对象，属于无效逻辑。

# 导入Azure AD模块
Import-Module AzureAD

Connect-AzureAD

# 输入源用户和目标用户的邮箱
$sourceUserMail = Read-Host "Enter username to copy from (source user mail)" 
$targetUserMail = Read-Host "Enter username to copy to (target user mail)" 

# 分别获取源用户、目标用户的对象，提取ObjectId单独存储
$sourceUser = Get-AzureADUser -ObjectId $sourceUserMail
$targetUser = Get-AzureADUser -ObjectId $targetUserMail
$sourceUserId = $sourceUser.ObjectId
$targetUserId = $targetUser.ObjectId

# 列出源用户所有的组成员身份
Write-Host "`n-- Groups available to copy from $sourceUserMail to $targetUserMail --" -ForegroundColor Yellow
$sourceGroups = Get-AzureADUserMembership -ObjectId $sourceUserId | Where-Object {$_.ObjectType -eq "Group"}
$sourceGroups | Select-Object DisplayName, ObjectId | Format-Table -AutoSize

# 批量添加目标用户到对应组，跳过已加入的组
Write-Host "`n[!] Adding $targetUserMail to the same groups as $sourceUserMail ..." -ForegroundColor Yellow
foreach ($group in $sourceGroups) {
    # 检查目标用户是否已经在组内
    $isMember = Get-AzureADGroupMember -ObjectId $group.ObjectId -All $true | Where-Object {$_.ObjectId -eq $targetUserId}
    if (-not $isMember) {
        Add-AzureADGroupMember -ObjectId $group.ObjectId -RefObjectId $targetUserId
        Write-Host "Added to group: $($group.DisplayName)" -ForegroundColor Green
    } else {
        Write-Host "Already in group: $($group.DisplayName)" -ForegroundColor Gray
    }
}
Write-Host "`nAll operation completed" -ForegroundColor Green

• 单独提取用户对象的ObjectId属性传参，匹配cmdlet的参数类型要求
• 增加ObjectType过滤，只复制组对象，跳过目录角色、管理单元等不可直接添加成员的对象，避免额外报错
• 增加成员身份重复校验，不会因为重复添加组中断运行，同时输出每一步的操作结果方便排查
• 修正原有语法错误，简化组列表展示逻辑

内容的提问来源于stack exchange，提问作者Expeditious