Azure Dynamic group attribute "membershipruleprocessingstatus"

Question

Hello, I have also posted this in another forum and so I am re-posting my ask https://learn.microsoft.com/en-us/answers/questions/1221202/azure-dynamic-group-stopped-processing-changes?page=1&orderby=Helpful&comment=answer-1204152#newest-answer-comment We are working with Azure AD Dynamic group for license assignment. One of the group we recently created has processing failed. We want to create an alert such that when any such group processing status is marked as failed, it should send the alert. We are yet to identify if it is going to be email alert or is going to be through teams channel. I have tried to find this in Audit logs so that I can put the Kusto query on audit logs from Log Analytics, but I am not sure if this is going to be in it or not. Is this option possible? The other option is to call MS Graph API. I follow this article for permissions https://learn.microsoft.com/en-us/answers/questions/819840/select-group-membershipruleprocessingstatus-fails All I need is to know the dynamic groups that has membershipRuleProcessingStatus as Failed

Can you please advise? Thank you in advance!

Answer 1

As this property is only updated by the backend, you might not find any relevant audit entries. I'd go with the second solution, enumerate groups as needed and fire up the alert.