question

Rahul-7230 avatar image
0 Votes"
Rahul-7230 asked ·

Create Dynamic Group for Devices - Based on location

Hi,

I need some suggestion for creating dynamic group based on location but issue is how to filter Devices based on location. I checked there's no attribute for filtering Devices based on location in Azure AD.

I see in AD we have an attribute CountryCode ? I believe if we can add this additional attribute and send via AD connect this way we can get make this work

If any other approach how to filter based on location please let me know your ideas.


azure-active-directoryazure-ad-connect
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
0 Votes"
michev answered ·

Only the attributes listed here are supported for dynamic membership rules: https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership#rules-for-devices

You cannot just use other "random" attributes, even if they seem to fit your scenario.

· 4 · Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@michev : My Feedback would be Azure should allow custom attribute like we have in case of users.

0 Votes 0 · ·

I'm sure others have requested the same, but just in case you can always put it on UserVoice: https://feedback.azure.com/forums/169401-azure-active-directory

0 Votes 0 · ·

@michev : If you think in other way around to use and send additional attribute via AD connect it should work. (https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-directory-extensions) and this attribute CountryCode can be added.

Because anywhere in the document https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership#rules-for-devices it's not mentioned we cannot add additional attribute synced via AAD connect.

0 Votes 0 · ·
Show more comments