You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
# Create or update a dynamic group in Azure Active Directory
21
21
22
-
In Azure Active Directory (Azure AD), you can use rules to determine group membership based on user or device properties. This article tells how to set up a rule for a dynamic group in the Azure portal.
23
-
Dynamic membership is supported for security groups or Microsoft 365 Groups. When a group membership rule is applied, user and device attributes are evaluated for matches with the membership rule. When an attribute changes for a user or device, all dynamic group rules in the organization are processed for membership changes. Users and devices are added or removed if they meet the conditions for a group. Security groups can be used for either devices or users, but Microsoft 365 Groups can be only user groups. Using Dynamic groups requires Azure AD premium P1 license or Intune for Education license. See [Dynamic membership rules for groups](./groups-dynamic-membership.md) for more details.
22
+
In Azure Active Directory (Azure AD), you can use rules to determine group membership based on user or device properties. This article tells how to set up a rule for a dynamic group in the Azure portal. Dynamic membership is supported for security groups and Microsoft 365 Groups. When a group membership rule is applied, user and device attributes are evaluated for matches with the membership rule. When an attribute changes for a user or device, all dynamic group rules in the organization are processed for membership changes. Users and devices are added or removed if they meet the conditions for a group. Security groups can be used for either devices or users, but Microsoft 365 Groups can be only user groups. Using Dynamic groups requires Azure AD premium P1 license or Intune for Education license. See [Dynamic membership rules for groups](./groups-dynamic-membership.md) for more details.
24
23
25
24
## Rule builder in the Azure portal
26
25
@@ -46,7 +45,7 @@ For examples of syntax, supported properties, operators, and values for a member
46
45
1. Search for and select **Groups**.
47
46
1. Select **All groups**, and select **New group**.
48
47
49
-

48
+

50
49
51
50
1. On the **Group** page, enter a name and description for the new group. Select a **Membership type** for either users or devices, and then select **Add dynamic query**. The rule builder supports up to five expressions. To add more than five expressions, you must use the text box.
52
51
@@ -67,7 +66,7 @@ If the rule you entered isn't valid, an explanation of why the rule couldn't be
67
66
1. Select a group to open its profile.
68
67
1. On the profile page for the group, select **Dynamic membership rules**. The rule builder supports up to five expressions. To add more than five expressions, you must use the text box.
69
68
70
-

69
+

71
70
72
71
1. To see the custom extension properties available for your membership rule:
73
72
1. Select **Get custom extension properties**
@@ -80,29 +79,31 @@ When a new Microsoft 365 group is created, a welcome email notification is sent
80
79
81
80
## Check processing status for a rule
82
81
83
-
You can see the membership processing status and the last updated date on the **Overview** page for the group.
82
+
You can see the dynamic rule processing status and the last membership change date on the **Overview** page for the group.
84
83
85
-

84
+

86
85
87
-
The following status messages can be shown for **Membership processing** status:
86
+
The following status messages can be shown for **Dynamic rule processing** status:
88
87
89
88
-**Evaluating**: The group change has been received and the updates are being evaluated.
90
89
-**Processing**: Updates are being processed.
91
90
-**Update complete**: Processing has completed and all applicable updates have been made.
92
91
-**Processing error**: Processing couldn't be completed because of an error evaluating the membership rule.
93
92
-**Update paused**: Dynamic membership rule updates have been paused by the administrator. MembershipRuleProcessingState is set to “Paused”.
94
93
95
-
The following status messages can be shown for **Membership last updated** status:
94
+
The following status messages can be shown for **Last membership change** status:
96
95
97
96
-<**Date and time**>: The last time the membership was updated.
98
97
-**In Progress**: Updates are currently in progress.
99
98
-**Unknown**: The last update time can't be retrieved. The group might be new.
100
99
101
100
If an error occurs while processing the membership rule for a specific group, an alert is shown on the top of the **Overview page** for the group. If no pending dynamic membership updates can be processed for all the groups within the organization for more than 24 hours, an alert is shown on the top of **All groups**.
0 commit comments