Ad Connect sync group type security onprem with existing group AAD

Andre Marsaioli 1

Hi,

it is possible do it with rule editor?
Which attributes my i choice and how do it?

Regrads

2 answers

Vasil Michev 95,181 Reputation points MVP

2020-03-30T08:26:45.657+00:00

If the group is mail-enabled, you should be able to soft-match it against the primary SMTP address value. Otherwise it's not possible afaik.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-existing-tenant#other-objects-than-users
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Andre Marsaioli 1 Reputation point

2020-03-30T11:47:40.46+00:00

Hi Michev thanks for reply.

But in Azure Portal i don't have this option "email-enable" only in admin center ms365.
Please sign in to rate this answer.
Vasil Michev 95,181 Reputation points MVP

2020-03-30T12:13:23.467+00:00

Nobody said that's an option :) What I meant was if the group was created as mail-enabled one, sorry if I was being unclear. And no, there isn't any way to mail-enable a group in O365.

Andre Marsaioli 1 Reputation point

2020-03-30T14:50:37.963+00:00

No problem, my apologies, my questions weren't clear as well

I guess to control my security groups only in Portal Azure, to automate i'll need a script on my local server ad connect with create a group in AD on-prem, move to the UO sync and delete the group was created on Azure.

Andre Marsaioli 1 Reputation point

2020-03-30T15:17:17.753+00:00

With support of same sample codes in websites, and Docs Microsoft.

Script
Sign in to comment