Configure dynamic membership with the memberOf operator
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit af44a46 · +4 −1 lines · also on GitHub
⋯ 5 unchanged lines
66
ms.service: entra-id
77
ms.subservice: users
88
ms.topic: how-to
9
−ms.date: 11/18/2025
9
+ms.date: 01/27/2026
1010
ms.author: barclayn
1111
ms.reviewer: krbain
1212
ms.custom: it-pro
⋯ 28 unchanged lines
4141
- The dynamic group rule builder and validate feature can't be used for `memberOf` at this time.
4242
- The `memberOf` attribute can't be used with other operators. For example, you can't create a rule that states "Members Of group A can't be in Dynamic group B."
4343
- Users included in `memberOf` dynamic membership groups may cause a slower processing time for your tenant, if the tenant has a large number of groups or frequent dynamic membership groups updates.
44
+
45
+> [!IMPORTANT]
46
+> When a group object that is listed in the rule of a memberOf dynamic group is deleted from the tenant, the users or devices that were members of the deleted group at the time of deletion remain members of the memberOf dynamic group. This behavior continues until the memberOf dynamic group rule is modified.
4447
4548
## Get started
4649
⋯ 14 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 06:21 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.