How to create dynamic group in Azure so users without onprem and exo mailbox go to the group?

Anthony 1 Reputation point
2022-11-01T09:39:47.723+00:00

How can we create dynamic group in Azure so users without onprem and exo mailbox go to the group?
Which attribute in Azure AD can be used to filter the use, for example, MSExchRecipientTypeDetails?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,472 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Michael Durkan 12,151 Reputation points MVP
    2022-11-01T10:32:26.9+00:00

    Hi

    As of right now, the only supported properties that can be used with Dynamic membership rules can be found here:

    https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership#supported-properties

    For your scenario, you could use the following:

    • user.dirSyncEnabled -eq false (to identify cloud-only identities)
    • user.mail -eq null (to identify users with no mail assigned)

    If you'd like this feature to be implemented to leverage MSExchangeOnline attributes, I'd recommend leveraging the User Voice forum and creating a feature request, so that engineering teams can look into implementing this. There is already a Community Idea on this for custom security attributes:

    https://feedback.azure.com/d365community/idea/c766c341-2ec6-ec11-a81b-0022484ee92d

    Thanks

    Michael Durkan

    • If the reply was helpful please upvote and/or accept as answer as this helps others in the community with similar questions. Thanks!
    0 comments