Skip to content

Commit 828ac12

Browse files
Merge pull request #197216 from curtand/jordan0505
[Azure AD enterprise users] dynamic rule status changes
2 parents 182d409 + e3c7bd0 commit 828ac12

File tree

2 files changed

+12
-11
lines changed

2 files changed

+12
-11
lines changed

articles/active-directory/enterprise-users/groups-create-rule.md

Lines changed: 12 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ ms.service: active-directory
1010
ms.subservice: enterprise-users
1111
ms.workload: identity
1212
ms.topic: how-to
13-
ms.date: 09/02/2021
13+
ms.date: 05/05/2022
1414
ms.author: curtand
1515
ms.reviewer: krbain
1616
ms.custom: it-pro
@@ -19,8 +19,7 @@ ms.collection: M365-identity-device-management
1919

2020
# Create or update a dynamic group in Azure Active Directory
2121

22-
In Azure Active Directory (Azure AD), you can use rules to determine group membership based on user or device properties. This article tells how to set up a rule for a dynamic group in the Azure portal.
23-
Dynamic membership is supported for security groups or Microsoft 365 Groups. When a group membership rule is applied, user and device attributes are evaluated for matches with the membership rule. When an attribute changes for a user or device, all dynamic group rules in the organization are processed for membership changes. Users and devices are added or removed if they meet the conditions for a group. Security groups can be used for either devices or users, but Microsoft 365 Groups can be only user groups. Using Dynamic groups requires Azure AD premium P1 license or Intune for Education license. See [Dynamic membership rules for groups](./groups-dynamic-membership.md) for more details.
22+
In Azure Active Directory (Azure AD), you can use rules to determine group membership based on user or device properties. This article tells how to set up a rule for a dynamic group in the Azure portal. Dynamic membership is supported for security groups and Microsoft 365 Groups. When a group membership rule is applied, user and device attributes are evaluated for matches with the membership rule. When an attribute changes for a user or device, all dynamic group rules in the organization are processed for membership changes. Users and devices are added or removed if they meet the conditions for a group. Security groups can be used for either devices or users, but Microsoft 365 Groups can be only user groups. Using Dynamic groups requires Azure AD premium P1 license or Intune for Education license. See [Dynamic membership rules for groups](./groups-dynamic-membership.md) for more details.
2423

2524
## Rule builder in the Azure portal
2625

@@ -46,7 +45,7 @@ For examples of syntax, supported properties, operators, and values for a member
4645
1. Search for and select **Groups**.
4746
1. Select **All groups**, and select **New group**.
4847

49-
![Select the command to add new group](./media/groups-create-rule/create-new-group-azure-active-directory.png)
48+
![Screenshot showing how to select the "add new group" action](./media/groups-create-rule/create-new-group-azure-active-directory.png)
5049

5150
1. On the **Group** page, enter a name and description for the new group. Select a **Membership type** for either users or devices, and then select **Add dynamic query**. The rule builder supports up to five expressions. To add more than five expressions, you must use the text box.
5251

@@ -67,7 +66,7 @@ If the rule you entered isn't valid, an explanation of why the rule couldn't be
6766
1. Select a group to open its profile.
6867
1. On the profile page for the group, select **Dynamic membership rules**. The rule builder supports up to five expressions. To add more than five expressions, you must use the text box.
6968

70-
![Add membership rule for a dynamic group](./media/groups-create-rule/update-dynamic-group-rule.png)
69+
![Screenshot showing how to add a membership rule for a dynamic group](./media/groups-create-rule/update-dynamic-group-rule.png)
7170

7271
1. To see the custom extension properties available for your membership rule:
7372
1. Select **Get custom extension properties**
@@ -80,29 +79,31 @@ When a new Microsoft 365 group is created, a welcome email notification is sent
8079

8180
## Check processing status for a rule
8281

83-
You can see the membership processing status and the last updated date on the **Overview** page for the group.
82+
You can see the dynamic rule processing status and the last membership change date on the **Overview** page for the group.
8483

85-
![display of dynamic group status](./media/groups-create-rule/group-status.png)
84+
![Diagram of dynamic group status](./media/groups-create-rule/group-status.png)
8685

87-
The following status messages can be shown for **Membership processing** status:
86+
The following status messages can be shown for **Dynamic rule processing** status:
8887

8988
- **Evaluating**: The group change has been received and the updates are being evaluated.
9089
- **Processing**: Updates are being processed.
9190
- **Update complete**: Processing has completed and all applicable updates have been made.
9291
- **Processing error**: Processing couldn't be completed because of an error evaluating the membership rule.
9392
- **Update paused**: Dynamic membership rule updates have been paused by the administrator. MembershipRuleProcessingState is set to “Paused”.
9493

95-
The following status messages can be shown for **Membership last updated** status:
94+
The following status messages can be shown for **Last membership change** status:
9695

9796
- <**Date and time**>: The last time the membership was updated.
9897
- **In Progress**: Updates are currently in progress.
9998
- **Unknown**: The last update time can't be retrieved. The group might be new.
10099

101100
If an error occurs while processing the membership rule for a specific group, an alert is shown on the top of the **Overview page** for the group. If no pending dynamic membership updates can be processed for all the groups within the organization for more than 24 hours, an alert is shown on the top of **All groups**.
102101

103-
![processing error message alerts](./media/groups-create-rule/processing-error.png)
102+
![Screenshot showing how to process error message alerts](./media/groups-create-rule/processing-error.png)
104103

105-
These articles provide additional information on groups in Azure Active Directory.
104+
## Next steps
105+
106+
The following articles provide additional information on how to use groups in Azure Active Directory.
106107

107108
- [See existing groups](../fundamentals/active-directory-groups-view-azure-portal.md)
108109
- [Create a new group and adding members](../fundamentals/active-directory-groups-create-azure-portal.md)
74.7 KB
Loading

0 commit comments

Comments
 (0)