question

DanyloNovohatskyi-5331 avatar image
0 Votes"
DanyloNovohatskyi-5331 asked Givary-MSFT commented

azure ad dynamic group excluding the list of users

Heloo, PLZ Help
how to create azure ad dynamic group excluding the list of users. or add a new custom attribute to the user's card.

azure-ad-group-management
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Givary-MSFT avatar image
0 Votes"
Givary-MSFT answered

Hi @DanyloNovohatskyi-5331: Azure AD Dynamic Group can be created by defining the expression ( refer screenshot ). 159940-image.png

You can use any of the custom attributes as shown in the screenshot which are not used/defined for any user in your Azure AD, which will help to create a dynamic group in Azure AD which will exclude the users in Azure AD.

Thanks for leveraging Microsoft Q&A community forum. Please let us know if this answer was helpful to you. If so, please remember to mark it as the answer so that others in the community with similar questions can more easily find a solution.




image.png (44.3 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DanyloNovohatskyi-5331 avatar image
0 Votes"
DanyloNovohatskyi-5331 answered Givary-MSFT commented

how to edit attribute and how to add value to organization user?

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@DanyloNovohatskyi-5331 : You can edit/update the attribute of the user from the source directory,

if the user has synced from On premise AD via Azure AD connect, in this scenario you can edit the attribute of the user in your on premise AD and sync the attribute value to Azure AD via Azure AD connect.

If the user has been created directly in Azure AD, in this scenario you can update the attribute of the user from the Azure AD itself.

If the above answer doesn't help you, I would like to know your exact requirement that you are trying to achieve.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal
https://docs.microsoft.com/en-us/azure/active-directory/app-provisioning/user-provisioning-sync-attributes-for-mapping
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-directory-extensions
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-sync-attributes-synchronized




0 Votes 0 ·

@DanyloNovohatskyi-5331: Wanted to follow up regarding this issue, did the above comments helped you to achieve your task regarding Dynamic Groups.

0 Votes 0 ·