Skip to content

Commit b0992b3

Browse files
authored
Merge pull request #214422 from csmulligan/csm-use-dynamic
[EXID] Content freshness review for dynamic groups
2 parents f4647a6 + 2dba18f commit b0992b3

File tree

4 files changed

+11
-9
lines changed

4 files changed

+11
-9
lines changed
130 KB
Loading
136 KB
Loading
242 KB
Loading

articles/active-directory/external-identities/use-dynamic-groups.md

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -6,22 +6,24 @@ services: active-directory
66
ms.service: active-directory
77
ms.subservice: B2B
88
ms.topic: how-to
9-
ms.date: 07/13/2021
9+
ms.date: 10/13/2022
1010

1111
ms.author: mimart
1212
author: msmimart
1313
manager: celestedg
1414
ms.reviewer: mal
1515

1616
ms.collection: M365-identity-device-management
17+
ms.custom: engagement-fy23
1718
---
1819

19-
# Dynamic groups and Azure Active Directory B2B collaboration
20+
# Create dynamic groups in Azure Active Directory B2B collaboration
2021

2122
## What are dynamic groups?
22-
Dynamic configuration of security group membership for Azure Active Directory (Azure AD) is available in [the Azure portal](https://portal.azure.com). Administrators can set rules to populate groups that are created in Azure AD based on user attributes (such as userType, department, or country/region). Members can be automatically added to or removed from a security group based on their attributes. These groups can provide access to applications or cloud resources (SharePoint sites, documents) and to assign licenses to members. Read more about dynamic groups in [Dedicated groups in Azure Active Directory](../fundamentals/active-directory-groups-create-azure-portal.md).
23+
A dynamic group is a dynamic configuration of security group membership for Azure Active Directory (Azure AD) available in [the Azure portal](https://portal.azure.com). Administrators can set rules to populate groups that are created in Azure AD based on user attributes (such as [userType](user-properties.md), department, or country/region). Members can be automatically added to or removed from a security group based on their attributes. These groups can provide access to applications or cloud resources (SharePoint sites, documents) and to assign licenses to members. Learn more about [dedicated groups in Azure Active Directory](../fundamentals/active-directory-groups-create-azure-portal.md).
2324

24-
The appropriate [Azure AD Premium P1 or P2 licensing](https://www.microsoft.com/security/business/identity-access-management/azure-ad-pricing) is required to create and use dynamic groups. Learn more in the article [Create attribute-based rules for dynamic group membership in Azure Active Directory](../enterprise-users/groups-dynamic-membership.md).
25+
## Prerequisites
26+
[Azure AD Premium P1 or P2 licensing](https://www.microsoft.com/security/business/identity-access-management/azure-ad-pricing) is required to create and use dynamic groups. Learn more in [Create attribute-based rules for dynamic group membership in Azure Active Directory](../enterprise-users/groups-dynamic-membership.md).
2527

2628
## Creating an "all users" dynamic group
2729
You can create a group containing all users within a tenant using a membership rule. When users are added or removed from the tenant in the future, the group's membership is adjusted automatically.
@@ -38,9 +40,9 @@ You can create a group containing all users within a tenant using a membership r
3840
```
3941
1. Select **OK**. The rule appears in the Rule syntax box:
4042

41-
![Rule syntax for all users dynamic group](media/use-dynamic-groups/all-user-rule-syntax.png)
43+
:::image type="content" source="media/use-dynamic-groups/all-user-rule-syntax.png" alt-text="Screenshot of rule syntax for all users dynamic group." lightbox="media/use-dynamic-groups/all-user-rule-syntax.png":::
4244

43-
1. Select **Save**. The new dynamic group will now include B2B guest users as well as member users.
45+
1. Select **Save**. The new dynamic group will now include B2B guest users and member users.
4446

4547

4648
1. Select **Create** on the **New group** page to create the group.
@@ -55,7 +57,7 @@ If you want your group to exclude guest users and include only members of your t
5557

5658
The following image shows the rule syntax for a dynamic group modified to include members only and exclude guests.
5759

58-
![Shows rule where user type equals member](media/use-dynamic-groups/all-member-user-rule-syntax.png)
60+
:::image type="content" source="media/use-dynamic-groups/all-member-user-rule-syntax.png" alt-text="Screenshot of rule syntax where user type equals member." lightbox="media/use-dynamic-groups/all-member-user-rule-syntax.png":::
5961

6062
## Creating a group of guests only
6163

@@ -67,10 +69,10 @@ You might also find it useful to create a new dynamic group that contains only g
6769

6870
The following image shows the rule syntax for a dynamic group modified to include guests only and exclude member users.
6971

70-
![Shows rule where user type equals guest](media/use-dynamic-groups/all-guest-user-rule-syntax.png)
72+
:::image type="content" source="media/use-dynamic-groups/all-guest-user-rule-syntax.png" alt-text="Screenshot of rule syntax where user type equals guest." lightbox="media/use-dynamic-groups/all-guest-user-rule-syntax.png":::
7173

7274
## Next steps
7375

7476
- [B2B collaboration user properties](user-properties.md)
7577
- [Adding a B2B collaboration user to a role](./add-users-administrator.md)
76-
- [Conditional Access for B2B collaboration users](authentication-conditional-access.md)
78+
- [Conditional Access for B2B collaboration users](authentication-conditional-access.md)

0 commit comments

Comments
 (0)