Can we create a dynamic group that is based on Guest self-service sign-ins?

Question

We wish to have external collaborators who can sign themselves in etc., but we'd like those users to automatically get added to a group.

Does anyone know if that's possible?

Many thanks in advance,

Greg.

Answer 1

This feature requires an Azure AD Premium P1 license or Intune for Education for each unique user that is a member of one or more dynamic groups. You don't have to assign licenses to users for them to be members of dynamic groups, but you must have the minimum number of licenses in the Azure AD organization to cover all such users. For example, if you had a total of 1,000 unique users in all dynamic groups in your organization, you would need at least 1,000 licenses for Azure AD Premium P1 to meet the license requirement. No license is required for devices that are members of a dynamic device group

Source: https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-membership

To create a dynamic Azure AD group for guests, you need to:

1. Sign in to the Azure portal with an account that is the global administrator for your organization.
2. Select Azure Active Directory > Groups > New group.
3. Select Security as the group type and enter a name and description for the group.
4. Change Membership type to Dynamic User and provide the rules that will be used to determine the group’s members. For example, you can use the rule (user.userType -eq "Guest") to include all guest users in the group.
5. Click Create.

Let me know if it works by accepting the answer.