I would like to sync multiple (but not all) AD groups from on premise to Azure AD. I would like to also sync the users included in these groups from on premise to Azure AD. I would then use the Azure AD groups to provide access to different applications.
How is it best to do this?
@TimothyReese-4525
I just wanted to check in and see if you had any other questions or if you were able to resolve this issue?
I was able to resolve the issue. I ended up using - Positive filtering: "only sync these" from this microsoft documentation - https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering.
Following this document, I was able to create sync rules to sync the groups and users I needed based on sAMAccountName attribute or any other custom attribute.
Syncing by groups alone is not supported in production however - only for a pilot test
So, sync your on-prem forest and filter out any OUs not needed in the sync and ensure the groups and users in those groups that you DO need are not in any OU you may be filtering out.
39 people are following this question.
