Sync error due to deletion of licensed group

Question

Hello guys,

I deleted a licensed group from our AD that was synced to our AAD. It was licensed at the time of deletion and now I'm getting sync errors even though the group has already been deleted.

"DeletingLicensedGroupNotAllowed"

Did anyone encounter the same issue yet and has a solution for that?

Thank you a lot in advance!

Answer 1

Hello @Michael Herzog

Thank you for reaching out. I assume you are getting error similar to what is show in below screenshot:

I understand that you might have applied Group Based licenses to a group that is synchronized from On-Premises Active Directory, so that it allows you the flexibility to maintain group membership in a centralized directory and the flexibility to assign licenses without a second operation in a different directory.

If you try to delete the Sync'd group which is licensed in Azure AD, AD Connect would fail to export changes to Azure AD to delete/remove that group, as it might impact users license assignment status. Hence would like to confirm that error you are receiving is an expected error. For more information you can also review Group Based License document - When a licensed group is deleted; which confirms that "You must remove all licenses assigned to a group before you can delete the group"

Additionally, the Error message AD Connect Sync Service Client - "DeletingLicensedGroupNotAllowed" clearly states that a deletion is being attempted on a Sync'd Group that has Azure AD Group Based licenses applied and delete operation is not allowed. If we allow such operations all the users who are part of this group would be impacted with licenses being removed.

To correct this condition the administrator must follow below steps:

• Assign direct license to users who are part of the group on which you have received this error or add the user to a different Group which has same Group Based license so that they inherit licenses from that group.
• Once step one is complete remove the licenses from the group as shown in below screenhot.

• Once the licenses are removed from the group the next sync cycle will successfully delete the group and remove any errors associated to the from AD Sync Service Client.

I hope this helps to resolve your query.

----------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.