You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/users-groups-roles/groups-create-rule.md
+19-5Lines changed: 19 additions & 5 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,6 @@
1
1
---
2
-
title: Create a dynamic group and check status - Azure AD | Microsoft Docs
3
-
description: How to create a group membership rule in the Azure portal, check status.
2
+
title: Create or edit a dynamic group and get status - Azure AD | Microsoft Docs
3
+
description: How to create or update a group membership rule in the Azure portal, and check its processing status.
4
4
services: active-directory
5
5
documentationcenter: ''
6
6
author: curtand
@@ -10,14 +10,14 @@ ms.service: active-directory
10
10
ms.workload: identity
11
11
ms.subservice: users-groups-roles
12
12
ms.topic: article
13
-
ms.date: 11/08/2019
13
+
ms.date: 01/07/2020
14
14
ms.author: curtand
15
15
ms.reviewer: krbain
16
16
ms.custom: it-pro
17
17
ms.collection: M365-identity-device-management
18
18
---
19
19
20
-
# Create a dynamic group and check status
20
+
# Create or update a dynamic group in Azure Active Directory
21
21
22
22
In Azure Active Directory (Azure AD), you can use rules to determine group membership based on user or device properties. This article tells how to set up a rule for a dynamic group in the Azure portal.
23
23
Dynamic membership is supported for security groups or Office 365 groups. When a group membership rule is applied, user and device attributes are evaluated for matches with the membership rule. When an attribute changes for a user or device, all dynamic group rules in the organization are processed for membership changes. Users and devices are added or removed if they meet the conditions for a group. Security groups can be used for either devices or users, but Office 365 groups can be only user groups.
@@ -36,7 +36,7 @@ Here are some examples of advanced rules or syntax for which we recommend that y
36
36
> [!NOTE]
37
37
> The rule builder might not be able to display some rules constructed in the text box. You might see a message when the rule builder is not able to display the rule. The rule builder doesn't change the supported syntax, validation, or processing of dynamic group rules in any way.
38
38
39
-

39
+

40
40
41
41
For examples of syntax, supported properties, operators, and values for a membership rule, see [Dynamic membership rules for groups in Azure Active Directory](groups-dynamic-membership.md).
42
42
@@ -60,6 +60,20 @@ For examples of syntax, supported properties, operators, and values for a member
60
60
61
61
If the rule you entered isn't valid, an explanation of why the rule couldn't be processed is displayed in an Azure notification in the portal. Read it carefully to understand how to fix the rule.
62
62
63
+
## To update an existing rule
64
+
65
+
1. Sign in to the [Azure AD admin center](https://aad.portal.azure.com) with an account that is in the Global administrator, Group administrator, Intune administrator, or User administrator role in the tenant.
66
+
1. Select **Groups** > **All groups**.
67
+
1. Select a group to open its profile.
68
+
1. On the profile page for the group, select **Dynamic membership rules**. The rule builder supports up to five expressions. To add more than five expressions, you must use the text box.
69
+
70
+

71
+
72
+
1. To see the custom extension properties available for your membership rule:
73
+
1. Select **Get custom extension properties**
74
+
1. Enter the application ID, and then select **Refresh properties**.
75
+
1. After updating the rule, select **Save**.
76
+
63
77
## Turn on or off welcome email
64
78
65
79
When a new Office 365 group is created, a welcome email notification is sent the users who are added to the group. Later, if any attributes of a user or device change, all dynamic group rules in the organization are processed for membership changes. Users who are added then also receive the welcome notification. You can turn off this behavior in [Exchange PowerShell](https://docs.microsoft.com/powershell/module/exchange/users-and-groups/Set-UnifiedGroup?view=exchange-ps).
Copy file name to clipboardExpand all lines: articles/active-directory/users-groups-roles/groups-dynamic-membership.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -43,9 +43,9 @@ Here are some examples of advanced rules or syntax for which we recommend that y
43
43
> [!NOTE]
44
44
> The rule builder might not be able to display some rules constructed in the text box. You might see a message when the rule builder is not able to display the rule. The rule builder doesn't change the supported syntax, validation, or processing of dynamic group rules in any way.
45
45
46
-
For more step-by-step instructions, see [Update a dynamic group](groups-update-rule.md).
46
+
For more step-by-step instructions, see [Create or update a dynamic group](groups-create-rule.md).
47
47
48
-

48
+

Copy file name to clipboardExpand all lines: articles/active-directory/users-groups-roles/groups-lifecycle.md
+4-6Lines changed: 4 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ ms.service: active-directory
11
11
ms.workload: identity
12
12
ms.subservice: users-groups-roles
13
13
ms.topic: article
14
-
ms.date: 10/24/2019
14
+
ms.date: 01/03/2020
15
15
ms.author: curtand
16
16
ms.reviewer: krbain
17
17
ms.custom: it-pro
@@ -83,11 +83,9 @@ For more information on permissions to restore a deleted group, see [Restore a d
83
83
- Save your settings when you're done by selecting **Save**.
84
84
85
85
> [!NOTE]
86
-
> When you first set up expiration, any groups that are older than the expiration interval are set to 35 days until expiration unless the group is automatically renewed or the owner renews it.
87
-
>
88
-
> When a dynamic group is deleted and restored, it's seen as a new group and re-populated according to the rule. This process can take up to 24 hours.
89
-
>
90
-
> Expiration notices for groups used in Teams appear in the Teams Owners feed.
86
+
> - When you first set up expiration, any groups that are older than the expiration interval are set to 35 days until expiration unless the group is automatically renewed or the owner renews it.
87
+
> - When a dynamic group is deleted and restored, it's seen as a new group and re-populated according to the rule. This process can take up to 24 hours.
88
+
> - Expiration notices for groups used in Teams appear in the Teams Owners feed.
0 commit comments