Created by Claude - please verify

Open mail groups - member counts are direct members; nested groups count as one.

Required Microsoft Graph permissions

Exchange.ManageAsApp — application permission, granted to the app registration with admin consent.

Endpoints: Get-DistributionGroup · Get-DistributionGroupMember · Get-UnifiedGroup

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Distribution Lists Open to External Senders

A large distribution list that accepts mail from anyone on the internet turns one phishing mail into a company-wide campaign - and bypasses the per-recipient friction attackers usually face. Lists that genuinely need outside mail (support@, info@) are fine; 'All staff' is not.