Is it possible to exclude office 365 group from expiration in azuer ad?

Grzegorz O 26 Reputation points
2021-06-07T10:54:32.773+00:00

I have users allowed to create office 365 groups. I want to set expiration to those groups, but i must exclude a couple from this rule.
I know i can select groups enabled for expiration, but it makes no sense form me as i would have to constantly monitor and add new groups to this rule upon creation.
Is there any way to sort it out? I googled and binged it but i only found some posts from two years back that Microsoft is planning to include this option.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
24,169 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. AmanpreetSingh-MSFT 56,811 Reputation points
    2021-06-07T11:48:02.337+00:00

    Hi @Grzegorz O · Thank you for reaching out.

    The best option available for this purpose is to use Access Review. This will allow you to select which users owners/members(self)/selected users can review the membership at the specified interval onetime/weekly/monthly/yearly and approvers will get an email notification at the end of review cycle. You can also specify default action, if approver doesn't respond to Approve/Reject.

    Read more: https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.