Unable to create group membership in a dynamic group

Joey Karijowiredjo 20 Reputation points

I'm unable to create group membership in a dynamic group especially for devices.

I'm following along with the official MS docs and use the query they provided: https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-dynamic-rule-member-of

I was able to create a group earlier this week, but suddenly I'm getting an error saying: "Property objectid cannot be applied to object group", preventing me to create the so called nested dynamic groups.

I also tried to modify an already made dynamic group, by adding a objectId from a group we wanted to include but that didn't work also. It gave me the same error.

Trying to validate the query only gives you a question mark with the error message.

The query used: device.memberof -any (group.objectId -in ['groupId', 'groupId'])

It looks like the 'group.objectId' is a bit broken, according to the error message...

I'm certain I followed the instructions, letter by letter but it just won't work anymore.

For work, we need some dynamic groups that can take members from other groups so we don't have to deal with nesting groups in groups as that will sometimes give some issues.

I tried creating a dynamic group in my own test tenant and I get the same error.

Is the functionality broken or is something else going on?

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
16,657 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
3,338 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Crystal-MSFT 32,971 Reputation points Microsoft Vendor

    @Joey Karijowiredjo, Thanks for posting in Q&A. Based on my test in my lab, I find I can add the dynamic group rule with device group object id. In the article, it mentioned some limitation with the group. for example: only direct members of the included groups can be included.

    User's image

    Please ensure the group object id we add meet the requirement.

    Hope the above information can help.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. Joey Karijowiredjo 20 Reputation points

    Microsoft fixed the issue as I was able to create dynamic nested groups again on the 22nd of September 2023.

    0 comments No comments