Configure dynamic membership with the memberOf operator
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 88286c8 · +1 −2 lines · also on GitHub
⋯ 40 unchanged lines
4141
- The dynamic group rule builder and validate feature can't be used for `memberOf` at this time.
4242
- The `memberOf` attribute can't be used with other operators. For example, you can't create a rule that states "Members Of group A can't be in Dynamic group B."
4343
- Users included in `memberOf` dynamic membership groups may cause a slower processing time for your tenant, if the tenant has a large number of groups or frequent dynamic membership groups updates.
44
+- Membership of a memberOf dynamic group doesn't automatically update when a child group is deleted or when members are removed from a child group. The affected users or devices remain members of the memberOf dynamic group until the rule is modified.
4445
45
−> [!IMPORTANT]
46
−> When a group object that is listed in the rule of a memberOf dynamic group is deleted from the tenant, the users or devices that were members of the deleted group at the time of deletion remain members of the memberOf dynamic group. This behavior continues until the memberOf dynamic group rule is modified.
4746
4847
## Get started
4948
⋯ 14 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 06:21 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.