Create Dynamic Group for Devices - Based on location

Rahul 236

Hi,

I need some suggestion for creating dynamic group based on location but issue is how to filter Devices based on location. I checked there's no attribute for filtering Devices based on location in Azure AD.

I see in AD we have an attribute CountryCode ? I believe if we can add this additional attribute and send via AD connect this way we can get make this work

If any other approach how to filter based on location please let me know your ideas.

1 answer

Vasil Michev 95,836 Reputation points MVP

2020-05-29T15:18:44.343+00:00

Only the attributes listed here are supported for dynamic membership rules: https://learn.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership#rules-for-devices

You cannot just use other "random" attributes, even if they seem to fit your scenario.
Please sign in to rate this answer.
Rahul 236 Reputation points

2020-05-29T15:47:10.827+00:00

@Vasil Michev : My Feedback would be Azure should allow custom attribute like we have in case of users.

Vasil Michev 95,836 Reputation points MVP

2020-05-29T16:06:43.833+00:00

I'm sure others have requested the same, but just in case you can always put it on UserVoice: https://feedback.azure.com/forums/169401-azure-active-directory

Rahul 236 Reputation points

2020-05-29T18:26:51.89+00:00

@Vasil Michev : If you think in other way around to use and send additional attribute via AD connect it should work. (https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-directory-extensions) and this attribute CountryCode can be added.

Because anywhere in the document https://learn.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership#rules-for-devices it's not mentioned we cannot add additional attribute synced via AAD connect.

Rahul 236 Reputation points

2020-06-01T11:27:09.003+00:00

@Vasil Michev : I feel using AAD connect we can sync additional attribute and that attribute we can use it in Dynamic Group filtering.

Jerome Wink 1 Reputation point

2022-02-07T22:56:21.887+00:00

You can sync more stuff, but I can't find a way in Dynamic Group rules to read anything behond what's in the aforementioned document. So no matter what is in sync, you can't use any of it.
Sign in to comment