Skip to content

Commit 993fcab

Browse files
committed
updates
1 parent b70c718 commit 993fcab

File tree

2 files changed

+3
-3
lines changed

2 files changed

+3
-3
lines changed
-2.02 KB
Loading

articles/active-directory/b2b/use-dynamic-groups.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -47,10 +47,10 @@ You can create a group containing all users within a tenant using a membership r
4747

4848
## Creating a group of members only
4949

50-
You can secure your "all users" group by using a rule to remove guest users. If you want your group to exclude guest users and include only members of your tenant, create a dynamic group as described above, but in the **Rule syntax** box, enter the following expression:
50+
If you want your group to exclude guest users and include only members of your tenant, create a dynamic group as described above, but in the **Rule syntax** box, enter the following expression:
5151

5252
```
53-
(user.objectId -ne null) -and (user.userType -eq Member)
53+
(user.objectId -ne null) and (user.userType -eq "Member")
5454
```
5555

5656
The following image shows the rule syntax for a dynamic group modified to include members only and exclude guests.
@@ -62,7 +62,7 @@ The following image shows the rule syntax for a dynamic group modified to includ
6262
You might also find it useful to create a new dynamic group that contains only guest users, so that you can apply policies (such as Azure AD Conditional Access policies) to them. Create a dynamic group as described above, but in the **Rule syntax** box, enter the following expression:
6363

6464
```
65-
(user.objectId -ne null) -and (user.userType -eq “Member”)
65+
(user.objectId -ne null) and (user.userType -eq "Guest")
6666
```
6767

6868
The following image shows the rule syntax for a dynamic group modified to include guests only and exclude member users.

0 commit comments

Comments
 (0)