You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/external-identities/use-dynamic-groups.md
+11-9Lines changed: 11 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,22 +6,24 @@ services: active-directory
6
6
ms.service: active-directory
7
7
ms.subservice: B2B
8
8
ms.topic: how-to
9
-
ms.date: 07/13/2021
9
+
ms.date: 10/13/2022
10
10
11
11
ms.author: mimart
12
12
author: msmimart
13
13
manager: celestedg
14
14
ms.reviewer: mal
15
15
16
16
ms.collection: M365-identity-device-management
17
+
ms.custom: engagement-fy23
17
18
---
18
19
19
-
# Dynamic groups and Azure Active Directory B2B collaboration
20
+
# Create dynamic groups in Azure Active Directory B2B collaboration
20
21
21
22
## What are dynamic groups?
22
-
Dynamic configuration of security group membership for Azure Active Directory (Azure AD) is available in [the Azure portal](https://portal.azure.com). Administrators can set rules to populate groups that are created in Azure AD based on user attributes (such as userType, department, or country/region). Members can be automatically added to or removed from a security group based on their attributes. These groups can provide access to applications or cloud resources (SharePoint sites, documents) and to assign licenses to members. Read more about dynamic groups in [Dedicated groups in Azure Active Directory](../fundamentals/active-directory-groups-create-azure-portal.md).
23
+
A dynamic group is a dynamic configuration of security group membership for Azure Active Directory (Azure AD) available in [the Azure portal](https://portal.azure.com). Administrators can set rules to populate groups that are created in Azure AD based on user attributes (such as [userType](user-properties.md), department, or country/region). Members can be automatically added to or removed from a security group based on their attributes. These groups can provide access to applications or cloud resources (SharePoint sites, documents) and to assign licenses to members. Learn more about [dedicated groups in Azure Active Directory](../fundamentals/active-directory-groups-create-azure-portal.md).
23
24
24
-
The appropriate [Azure AD Premium P1 or P2 licensing](https://www.microsoft.com/security/business/identity-access-management/azure-ad-pricing) is required to create and use dynamic groups. Learn more in the article [Create attribute-based rules for dynamic group membership in Azure Active Directory](../enterprise-users/groups-dynamic-membership.md).
25
+
## Prerequisites
26
+
[Azure AD Premium P1 or P2 licensing](https://www.microsoft.com/security/business/identity-access-management/azure-ad-pricing) is required to create and use dynamic groups. Learn more in [Create attribute-based rules for dynamic group membership in Azure Active Directory](../enterprise-users/groups-dynamic-membership.md).
25
27
26
28
## Creating an "all users" dynamic group
27
29
You can create a group containing all users within a tenant using a membership rule. When users are added or removed from the tenant in the future, the group's membership is adjusted automatically.
@@ -38,9 +40,9 @@ You can create a group containing all users within a tenant using a membership r
38
40
```
39
41
1. Select **OK**. The rule appears in the Rule syntax box:
40
42
41
-

43
+
:::image type="content" source="media/use-dynamic-groups/all-user-rule-syntax.png" alt-text="Screenshot of rule syntax for all users dynamic group." lightbox="media/use-dynamic-groups/all-user-rule-syntax.png":::
42
44
43
-
1. Select **Save**. The new dynamic group will now include B2B guest users as well as member users.
45
+
1. Select **Save**. The new dynamic group will now include B2B guest users and member users.
44
46
45
47
46
48
1. Select **Create** on the **New group** page to create the group.
@@ -55,7 +57,7 @@ If you want your group to exclude guest users and include only members of your t
55
57
56
58
The following image shows the rule syntax for a dynamic group modified to include members only and exclude guests.
57
59
58
-

60
+
:::image type="content" source="media/use-dynamic-groups/all-member-user-rule-syntax.png" alt-text="Screenshot of rule syntax where user type equals member." lightbox="media/use-dynamic-groups/all-member-user-rule-syntax.png":::
59
61
60
62
## Creating a group of guests only
61
63
@@ -67,10 +69,10 @@ You might also find it useful to create a new dynamic group that contains only g
67
69
68
70
The following image shows the rule syntax for a dynamic group modified to include guests only and exclude member users.
69
71
70
-

72
+
:::image type="content" source="media/use-dynamic-groups/all-guest-user-rule-syntax.png" alt-text="Screenshot of rule syntax where user type equals guest." lightbox="media/use-dynamic-groups/all-guest-user-rule-syntax.png":::
71
73
72
74
## Next steps
73
75
74
76
-[B2B collaboration user properties](user-properties.md)
75
77
-[Adding a B2B collaboration user to a role](./add-users-administrator.md)
76
-
-[Conditional Access for B2B collaboration users](authentication-conditional-access.md)
78
+
-[Conditional Access for B2B collaboration users](authentication-conditional-access.md)
0 commit comments