Create simpler, more efficient dynamic membership rules
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit dbff8db · +6 −6 lines · also on GitHub
11
---
2
−title: Create simpler and faster rules for dynamic groups
2
+title: Create simpler and faster rules for dynamic membership groups
33
description: How to optimize your membership rules to automatically populate groups.
44
55
author: barclayn
⋯ 1 unchanged line
77
ms.service: entra-id
88
ms.subservice: users
99
ms.topic: conceptual
10
−ms.date: 11/07/2023
10
+ms.date: 08/25/2024
1111
ms.author: barclayn
1212
ms.reviewer: jordandahl
1313
ms.custom: it-pro
1414
---
1515
1616
17
−# Create simpler, more efficient rules for dynamic groups in Microsoft Entra ID
17
+# Create simpler, more efficient rules for dynamic membership groups in Microsoft Entra ID
1818
19
−The team for Microsoft Entra ID, part of Microsoft Entra, receives reports of incidents related to dynamic groups and the processing time for their membership rules. This article uses that reported information to present the most common methods by which our engineering team helps customers to simplify their membership rules. Simpler and more efficient rules result in better dynamic group processing times. When writing membership rules for dynamic groups, follow these steps to ensure that your rules are as efficient as possible.
19
+The Microsoft Entra ID engineering team, part of Microsoft Entra, receives reports of incidents related to dynamic membership groups and the processing time for their membership rules. The information that is reported is presented in this article. This article also discusses the most common methods by which Microsoft helps customers to simplify their rules for dynamic membership groups. Simpler and more efficient rules result in better dynamic group processing times.
2020
21
+When writing membership rules for dynamic membership groups, follow the steps in this article to ensure that you create these rules as efficiently as possible.
2122
2223
## Minimize use of MATCH
2324
⋯ 12 unchanged lines
3637
3738
## Minimize use of CONTAINS
3839
39
−Similar to the use of MATCH. Minimize the usage of the `contains` operator in rules as much as possible. Instead, explore if it's possible to use the `startswith` or `-eq` operators. Utilizing CONTAINS can increase processing times, especially for tenants with many dynamic groups.
40
+Similar to the use of MATCH. Minimize the usage of the `contains` operator in rules as much as possible. Instead, explore if it's possible to use the `startswith` or `-eq` operators. Utilizing CONTAINS can increase processing times, especially for tenants with many dynamic membership groups.
4041
4142
## Use fewer OR operators
4243
⋯ 10 unchanged lines
5354
It's better to have a rule like this:
5455
5556
- `user.department -eq "Accounts" -and user.city -in ["Lagos", "Ibadan", "Kaduna", "Abuja", "Port Harcourt"]`
56
−
5757
5858
Conversely, identify similar sub criteria with the same property not equal to various values, that are linked with `-and` operators. Then use the `-notin` operator to group them into a single criterion to make the rule easier to understand and evaluate. For example, instead of using a rule like this:
5959
⋯ 20 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy today 06:37 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.