Skip to content

Commit 60a49cc

Browse files
committed
Updated groups-troubleshooting.md document with MgGraph cmdlets and improved Acrolinx score
1 parent 685dfbb commit 60a49cc

File tree

1 file changed

+7
-7
lines changed

1 file changed

+7
-7
lines changed

articles/active-directory/enterprise-users/groups-troubleshooting.md

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -21,16 +21,16 @@ This article contains troubleshooting information for groups in Azure Active Dir
2121
## Troubleshooting group creation issues
2222

2323
**I disabled security group creation in the Azure portal but groups can still be created via PowerShell**
24-
The **User can create security groups in Azure portals** setting in the Azure portal controls whether or not non-admin users can create security groups in the Access panel or the Azure portal. It does not control security group creation via PowerShell.
24+
The **User can create security groups in Azure portals** setting in the Azure portal controls whether or not nonadmin users can create security groups in the Access panel or the Azure portal. It does not control security group creation via PowerShell.
2525

26-
To disable group creation for non-admin users in PowerShell:
27-
1. Verify that non-admin users are allowed to create groups:
26+
To disable group creation for nonadmin users in PowerShell:
27+
1. Verify that nonadmin users are allowed to create groups:
2828

2929
```powershell
3030
Get-MgBetaDirectorySetting | select -ExpandProperty values
3131
```
3232

33-
2. If it returns `EnableGroupCreation : True`, then non-admin users can create groups. To disable this feature:
33+
2. If it returns `EnableGroupCreation : True`, then nonadmin users can create groups. To disable this feature:
3434

3535
```powershell
3636
Install-Module Microsoft.Graph.Beta.Identity.DirectoryManagement
@@ -59,7 +59,7 @@ To create any new Dynamic groups, you'll first need to delete some existing Dyna
5959
**I configured a rule on a group but no memberships get updated in the group**
6060
1. Verify the values for user or device attributes in the rule. Ensure there are users that satisfy the rule.
6161
For devices, check the device properties to ensure any synced attributes contain the expected values.
62-
2. Check the membership processing status to confirm if it is complete. You can check the [membership processing status](groups-create-rule.md#check-processing-status-for-a-rule) and the last updated date on the **Overview** page for the group.
62+
2. Check the membership processing status to confirm if it's complete. You can check the [membership processing status](groups-create-rule.md#check-processing-status-for-a-rule) and the last updated date on the **Overview** page for the group.
6363

6464
If everything looks good, please allow some time for the group to populate. Depending on the size of your Azure AD organization, the group may take up to 24 hours for populating for the first time or after a rule change.
6565

@@ -70,15 +70,15 @@ This is expected behavior. Existing members of the group are removed when a rule
7070
Dedicated membership evaluation is done periodically in an asynchronous background process. How long the process takes is determined by the number of users in your directory and the size of the group created as a result of the rule. Typically, directories with small numbers of users will see the group membership changes in less than a few minutes. Directories with a large number of users can take 30 minutes or longer to populate.
7171

7272
**How can I force the group to be processed now?**
73-
Currently, there is no way to automatically trigger the group to be processed on demand. However, you can manually trigger the reprocessing by updating the membership rule to add a whitespace at the end.
73+
Currently, there's no way to automatically trigger the group to be processed on demand. However, you can manually trigger the reprocessing by updating the membership rule to add a whitespace at the end.
7474

7575
**I encountered a rule processing error**
7676
The following table lists common dynamic membership rule errors and how to correct them.
7777

7878
| Rule parser error | Error usage | Corrected usage |
7979
| --- | --- | --- |
8080
| Error: Attribute not supported. |(user.invalidProperty -eq "Value") |(user.department -eq "value")<br/><br/>Make sure the attribute is on the [supported properties list](groups-dynamic-membership.md#supported-properties). |
81-
| Error: Operator is not supported on attribute. |(user.accountEnabled -contains true) |(user.accountEnabled -eq true)<br/><br/>The operator used is not supported for the property type (in this example, -contains cannot be used on type boolean). Use the correct operators for the property type. |
81+
| Error: Operator isn't supported on attribute. |(user.accountEnabled -contains true) |(user.accountEnabled -eq true)<br/><br/>The operator used isn't supported for the property type (in this example, -contains can't be used on type boolean). Use the correct operators for the property type. |
8282
| Error: Query compilation error. | 1. (user.department -eq "Sales") (user.department -eq "Marketing")<br>2. (user.userPrincipalName -match "\*@domain.ext") | 1. Missing operator. Use -and or -or to join predicates<br>(user.department -eq "Sales") -or (user.department -eq "Marketing")<br>2. Error in regular expression used with -match<br>(user.userPrincipalName -match ".\*@domain.ext")<br>or alternatively: (user.userPrincipalName -match "@domain.ext$") |
8383

8484
## Next steps

0 commit comments

Comments
 (0)