@MarvinKetelaars-4432 • The problem is not with the syntax but with the logic. The rule (user.userPrincipalName -contains "*")
means any user whose UPN contains the character *
should be added to the group. However, *
is not a valid character that can be used in the UPN. This is why no user is being added to the group.
What is your end goal? Which users do you want to be added to the group? Do you want all users in Azure AD to be added to the dynamic group?