manage users on 365 and sync the changes to on-premise

Question

I am just looking for some confirmation because i cannot find a single possibility to manage users from 365 to an on-premise AD.

So the situation is simple.

1 AD (DC), 1 Exchange. Hybrid setup with 365.

Is it possible to change settings in the 365 environment and let those changes sync to my AD on-premise server?
It does not have to be everything, but I thought of changing an user his department, organization, office, .... Maybe also his password?
Or his name?

Is there a solution for this?

kind regards
Kurt

Answer 1

The only options are what can be set in AADConnect.

If using Exchange hybrid, the following is written back to on-prem:

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-synchronized#exchange-hybrid-writeback

You can also enable password writeback:

https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

Answer 2

That is very interesting. Thank you for that, AndyDavid.