Azure Dynamic Group Rule - List of Multiple Display Names

Question

Hello,

We are trying to create Microsoft Dynamic rules and add specific users that should over oversite of correspondence flowing through these groups. The rule we are trying to use is below. and we are using this MS write-up for a reference https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-rule-more-efficient

(user.jobTitle -eq "employeetitle1") or (user.displayName -eq ["userdisplayname1", "userdisplayname1", "userdisplayname3"]

When using this rule we get an error that invalid characters are used.

Any insight is appreciated, thank you.

Answer 1

When comparing against a collection (the list of displayNames enclosed in []), you cannot use the -eq operator. Instead, use -in:

(user.jobTitle -eq "employeetitle1") or (user.displayName -in ["userdisplayname1", "userdisplayname1", "userdisplayname3"])