Application integrated with Azure AD can see security groups but not M365 Groups

Question

Hi there,
We have registered an application (Safe Software FME Server) with our Azure AD. When I import groups into the app I can only see groups of type security, not groups of type Microsoft 365.

Is there a likely setting or configuration that could be causing this behaviour? The vendor has confirmed they are not seeing this in their tests, so it is likely something in our environment.

Thanks,
M.

Answer 1

Hi @Marc Graham ,

Thanks for your post!

This could happen if "Guest users permissions are limited" is set to "Yes" on the tenant and you are logging in with a guest account. Even if you have global admin permissions, if you are trying to via Access Control (IAM) in the Azure portal, you won't be able to see them if you do not have enumeration permissions and if the guest permissions are limited on the tenant. You will need to make sure that the guest permission limitation is set to "No" in order to resolve this. See: Can't see list of users or groups

Another issue I can think of is that the groups may not have been synchronized to Azure AD if you have mail-enabled groups. To resolve this, you need to make sure that the display name is specified for the on-premises mail-enabled group. Reference: Troubleshoot Group Synchronization

Let me know if this helps. I'm happy to troubleshoot further and open a support case if you are still facing this issue.

-

If the information helped you, please Accept the answer. This will help us and other community members as well.