ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 272/272 feeds/APIs · 469/469 docs · 8/9 advisories · checked 09:15 UTC Customize Public modeDiscuss ChangeIntel on Discord

Configure dynamic membership with the memberOf operator

This page's changes and edits · All guidance changes

Microsoft's edit ·

adding preview label

Microsoft's commit message in MicrosoftDocs/entra-docs · commit 95820c2 · +3 −3 lines · also on GitHub

⋯ 11 unchanged lines
1212 ms.custom: it-pro
1313 ---
1414
15 −# Configure dynamic membership groups with the memberOf attribute in the Azure portal
15 +# Configure dynamic membership groups with the memberOf attribute in the Azure portal (preview)
1616
1717 This feature preview in Microsoft Entra ID enables admins to create dynamic membership groups and administrative units that populate by adding members of other groups using the `memberOf` attribute. Apps that couldn't read group-based membership previously in Microsoft Entra ID can now read the entire membership of these new `memberOf` groups. Not only can these groups be used for apps but they can also be used for licensing assignments.
1818
1919 >[!WARNING]
20 −>This is a preview feature and is not intended for production use. The use of this feature comes with limitations that can impact dynamic group processing in the tenant. We recommend you review the [Preview limitations](#preview-limitations) section before using this feature.
20 +>This is a preview feature and isn't intended for production use. The use of this feature comes with limitations that can affect dynamic group processing in the tenant. We recommend you review the [Preview limitations](#preview-limitations) section before using this feature.
2121
2222 The following diagram illustrates how you could create Dynamic-Group-A with members of Security-Group-X and Security-Group-Y. Members of the groups inside Security-Group-X and Security-Group-Y don't become members of Dynamic-Group-A.
2323
⋯ 8 unchanged lines
3232 ## Preview limitations
3333
3434
35 −- This preview should only be used in test environments as it can impact dynamic group processing in the tenant. We are working on addressing these limitations and will provide updates when they are available.
35 +- This preview should only be used in test environments as it can affect dynamic group processing in the tenant. We are working on addressing these limitations and will provide updates when they are available.
3636 - Each Microsoft Entra tenant is limited to 500 dynamic groups using the `memberOf` attribute. The `memberOf` groups count toward the total dynamic group quota of 15,000.
3737 - Each dynamic group can have up to 50 member groups.
3838 - When you add members of security groups to `memberOf` dynamic membership groups, only direct members of the security group become members of the dynamic group.
⋯ 22 unchanged lines

Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 06:21 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 09:15 UTC · 272 of 272 readable · 270 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.