Entra dynamic membership rules and the memberOf operator

Timelines and exceptions · All guidance changes

Microsoft Entra · Official Microsoft guidance

No content change seen yet. Watched since today 06:21 UTC, last read today 06:21 UTC, next check 27 Oct 06:21 UTC. Microsoft's own edits are listed below.

Read the Microsoft source · Link to this observation · My radar

Timeline

From the capture of today 06:21 UTC

14 undated sections
23 with conditions
20 recorded changes

Requirements, exceptions and scope

OverviewException3 conditions3 passages
An agent's user account is a subtype of user identity within Microsoft Entra. An agent's user account is evaluated by user-based membership rules and can…
Considerations for dynamic membership groupsRequirementException4 conditions2 passages
Security consideration: Evaluate attribute write permissions before using them in dynamic group rulesException1 condition1 passage
License requirementsRequirement1 condition2 passages
Rule builder in the Azure portalException2 conditions1 passage
Construct the body of a membership ruleException1 passage
Supported valuesExceptionRecommendation4 conditions3 passages
Use of null valuesException1 condition1 passage
Operator precedenceException2 conditions1 passage
Create a rule for direct reportsException1 condition1 passage
Create a rule for all usersException2 conditions2 passages
Create a rule for all devicesException1 condition1 passage
Extension attributes and custom extension propertiesRequirementException2 conditions2 passages
Rules for devicesRequirementExceptionTentative4 conditions5 passages

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

13 Aug 2026
Exception added Overview Microsoft's source, commit af37138
13 Aug 2026
Exception added Overview Microsoft's source, commit af37138
16 Jun 2026
Exception added Rules for devices Microsoft's source, commit 3258b02
16 Jun 2026
No longer on the page Rules for devices Microsoft's source, commit 3258b02
16 Jun 2026
Scope added Rules for devices Microsoft's source, commit ed0d7d3
25 Mar 2026
No longer on the page Manage rules for dynamic membership groups in Microsoft Entra ID Microsoft's source, commit 4e5d0e1
25 Mar 2026
Exception added Overview Microsoft's source, commit 4e5d0e1
17 Mar 2026
Exception added Construct the body of a membership rule Microsoft's source, commit 79ce023
17 Mar 2026
No longer on the page Constructing the body of a membership rule Microsoft's source, commit 79ce023
17 Mar 2026
Exception added Rules for devices Microsoft's source, commit 79ce023
17 Mar 2026
No longer on the page Rules for devices Microsoft's source, commit 79ce023
6 Mar 2026
No longer on the page Security consideration: Evaluate attribute write permissions before using them in dynamic group rules Microsoft's source, commit 683fa20

8 earlier changes

5 Mar 2026
Exception added Security consideration: Evaluate attribute write permissions before using them in dynamic group rules Microsoft's source, commit 5571eaa
5 Mar 2026
Exception added Security consideration: Evaluate attribute write permissions before using them in dynamic group rules Microsoft's source, commit 5571eaa
17 Feb 2026
No longer on the page Supported values Microsoft's source, commit 47a81da
17 Feb 2026
Recommendation added Supported values Microsoft's source, commit 47a81da
20 Aug 2025
Recommendation added Supported values Microsoft's source, commit 323c187
20 Aug 2025
No longer on the page Supported values Microsoft's source, commit 323c187
12 Jun 2025
No longer on the page Supported values Microsoft's source, commit 297a36a
12 Jun 2025
Recommendation added Supported values Microsoft's source, commit 297a36a

Observed history and review priority

Captured today 06:21 UTC; extracted today 06:21 UTC. Extractor: microsoft-1/9/d9863eb412f92fa5ec3a8ca32e2dd7cfe8095530f456ecb1866608d1166a435d.

Review priority. Extracted assertions require review · Publisher marks guidance tentative · Applicability or exceptions require review

0 date changes and 0 condition changes across 0 compared revisions. Suggested check interval: 24 hours.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 17

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

today 06:21 UTC · 26 candidates
13 Aug 18:53 UTC · 26 candidates
23 Jun 21:35 UTC · 24 candidates
16 Jun 21:24 UTC · 24 candidates
16 Jun 19:30 UTC · 24 candidates
16 Jun 19:13 UTC · 24 candidates
5 Jun 19:12 UTC · 23 candidates
25 Mar 03:10 UTC · 23 candidates
17 Mar 16:37 UTC · 23 candidates
6 Mar 16:12 UTC · 23 candidates
5 Mar 20:47 UTC · 24 candidates
17 Feb 23:02 UTC · 22 candidates
22 Sep 2025 21:26 UTC · 22 candidates
2 Sep 2025 11:46 UTC · 22 candidates
20 Aug 2025 20:05 UTC · 22 candidates
12 Jun 2025 10:34 UTC · 22 candidates
22 Apr 2025 18:33 UTC · 22 candidates

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/entra-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read today 06:21 UTC.

13 Aug 18:53 UTC Update dynamic membership groups documentation Served on LearnView diff
23 Jun 21:35 UTC yml-conversion1-061926 (#13583) View diff
16 Jun 21:24 UTC Add no enabled Intune plan dynamic rule example View diff
16 Jun 19:30 UTC Address dynamic membership audit findings View diff
16 Jun 19:13 UTC Clarify assignedPlans dynamic membership guidance View diff
5 Jun 19:12 UTC Fix string-collection rule examples to use -any operator View diff
25 Mar 03:10 UTC AI readiness: Add Overview headings to Enterprise Users articles (batch 2) View diff
17 Mar 16:37 UTC Editorial pass: dynamic groups articles (33 fixes) View diff
6 Mar 16:12 UTC Update security consideration wording for dynamic group rules View diff
5 Mar 20:47 UTC Add security consideration for attribute write permissions in dynamic group rules View diff
17 Feb 23:02 UTC Merge pull request #8687 from TPavanBalaji/patch-19 View diff
22 Sep 2025 21:26 UTC Enhance direct reports rule documentation View diff
2 Sep 2025 11:46 UTC Update groups-dynamic-membership.md View diff
20 Aug 2025 20:05 UTC [Fundamentals] IAM Concepts Curation View diff
12 Jun 2025 10:34 UTC (AzureCXP) fixes MicrosoftDocs/Entra-docs#433749 View diff
22 Apr 2025 18:33 UTC edit pass: microsoft-entra-dynamic-groups View diff

4 metadata-only edits · author, dates or topic labels, no article text

18 Mar 04:06 UTC Metadata cleanup: app-proxy and users folders Metadata onlyView diff
20 Feb 03:12 UTC [BULK UPDATE] Metadata update only. Moves values from individual file to folder level in docfx.json. Metadata onlyView diff
31 Jul 2025 07:05 UTC Bulk update ms.topic, folder: identity,permissions-management,standards Metadata onlyView diff
3 Jun 2025 10:38 UTC changing manager field Metadata onlyView diff

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

What changed

First observed 26 Oct 2026

No field changes are shown for this selection.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.