question

onetech-it avatar image
0 Votes"
onetech-it asked

Creating an Azure AD dynamic security group that covers multiple Object GUIDs?

I would like to be able to create an Azure AD Security group that will automatically add all members who have M365 licenses that include the Azure AD Premium P1 features (i.e. Microsoft 365 Business Premium, Office E3, Office E5, etc.) Right now we have a Dynamic Security group that only captures if a user has an explicit Azure AD P1 license: (Rule: user.assignedPlans -any (assignedPlan.servicePlanId -eq "41781fb2-bc02-4b7c-bd55-b576c07bb09d" -and assignedPlan.capabilityStatus -eq "Enabled") where "41781fb2-bc02-4b7c-bd55-b576c07bb09d" is the GUID specific for the Azure AD P1 license.

Or do I need to create the Dynamic Rule that includes all the different Object GUIDs for the different licensing SKUs mentioned above and, if so, what's the proper syntax for that?

azure-ad-domain-servicesazure-ad-saml-sso
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

0 Answers