If you use the UserPrincipalName parameter, you don't need to use the AzureADAuthorizationEndpointUri parameter for MFA or federated customers in environments that Typically demand it (UserPrincipalName or AzureADAuthorizationEndpointUri is required; Alright to use both). The GroupMailbox change specifies regardless of whether to return only Microsoft 365 Groups in the outcome. https://stephenw345ifz2.wikipresses.com/user