AD Connect convert groups and user to cloud

Burim Rama 21 Reputation points
2021-10-13T19:54:18.253+00:00

HI
We have AD connect who sync all users and security groups from local ad to azure.

Now we want to run cloud only but when we remove a security group from sync it delete it from cloud and we cant find it to restore as we do with users.

Question:

  1. Can we convert a local security group from local ad to Cloud only with memebers
  2. If we diasable ad connect, will it remove our security groups in azure or will it convert them with members ?

We have about 500 groups and all of them are used to give permission on sharepoint librarys.

Thanks.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,473 questions
0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Siva-kumar-selvaraj 15,551 Reputation points
    2021-10-14T08:22:36.177+00:00

    Hello @Burim Rama ,

    Turn off directory synchronization on your Azure AD tenant and will convert all synchronized objects (DirSyncEnabled = True) to cloud objects(DirsyncEnabled = False).

    You'll need to install the MSOnline (Azure AD v1 PowerShell) module, and then run Set-MsolDirSyncEnabled -EnableDirSync $false. More information, refer the following document: https://learn.microsoft.com/en-us/microsoft-365/enterprise/turn-off-directory-synchronization?view=o365-worldwide .

    Hope this helps.

    ------
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments