Entra synchronized Nested security groups

Question

When Entra was branded Azure, on prem AD groups synchronized to Azure could not be nested.

I have done some testing recently and it seems this has changed. I need to get Microsofts offical line on this.

Here is the use case:

On premesis AD has a number of nested security groups. For Example

Group 1

Member - Group 2

Group 2

Mmeber - Group 3

All groups are syncrhonized to Entra through Entra Connect.

On Prem AD to Entra AD One Way Only.

I give Group 1 access to Test SharePoint so that anyone in Group 3 would have access to that SharePoint.

Will this work?

Answer 1

Here is the official doc on what is supported and what is not:

https://learn.microsoft.com/en-us/entra/identity/users/directory-service-limits-restrictions