Share via

Can't pull custom security attributes when setting Dynamic User in Security Group

Ronald Loun 20 Reputation points
2024-10-07T13:41:27.71+00:00

I am trying to populate users into a Security group using custom security attributes with an attribute set of "site locations" when setting Dynamic User in Membership Type but it is failing.

I can pull the custom attributes from the user account from exchange using user.extensionAttribute1 -eq "Houston".

This does pull up the user however I do not want to go thru exchange and user account if I don't have to.

I would rather predefine custom security attribute that we can assign to users for different security groups and AU's

Microsoft Security | Intune | Grouping
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
0 comments
Accepted answer
  1. Vasil Michev 119.7K Reputation points MVP Volunteer Moderator
    2024-10-07T15:43:45.1266667+00:00

    You cannot currently leverage custom security attributes for Dynamic group membership filters. It's a common ask though, so Microsoft will hopefully include it in the future. In the meantime, best thing you can do here is vote the corresponding suggestion over at the Feedback portal: https://feedback.azure.com/d365community/idea/c766c341-2ec6-ec11-a81b-0022484ee92d

    1 person found this answer helpful.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.