Dynamic Group rule syntax | user.memberof Group-A but not Group-B

Question

Hi, I am trying to create a custom rule for a Group with Dynamic assignment.

I basically want to include any Users who are in Group_A but exclude any of those users who are also in Group_B

I have tried many interactions but have not been able to get his to work such as:

user.memberof -any (group.objectId -in ['Group_A_ID'] -and -notin ['Group_B_ID'])

Answer 1

I'm afraid it is not possible.

This is a preview limitation of the memberof function.

https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-rule-member-of