If you're wondering why we're using "contains" in the example instead of "equals", I was having flashbacks to a time I would have used this but there were a dozen Sales departments (one for each region, one for ops, etc), then realized it wasn't in the dropdown menu, and figured that would it a worthwhile example! 😄
Ohh that was a great one!! I didn't know about this. Question, we do have Membership type Assigned on groups, is there a possibility to change the type actually to this dynamic?
Good question - looks like you can, but I would be really careful doing this if you're using it on business-critical resources. Make sure to validate the rule carefully to make sure it gets everyone, and plan it for non-peak hours - here's Microsoft's article on swapping: learn.microsoft.com/en-us/entra/identity/users/groups-change-type
Security groups ARE AD groups, they are just a particular kind. They used to be called Azure AD groups, but got renamed to Entra, and in this particular menu they’re just called security groups. The dynamic membership is just a layer on top of that. The Microsoft 365 groups are a different thing.
You can invite external users in these groups, just keep in mind that they may not have fully filled out profiles to base the rules on unless you’re setting the profile fields as a part of your process.
Great video by the way! I wish you could convince my IT to grant me access lol. Pro tip: make sure to turn off reshare capabilities when sharing reports this way, otherwise those users can technically share with more people and you wouldn’t really know.
Yeah, typically they would rather make it for you than give you access to do it yourself. They usually have a naming convention they’re already using, etc so you might have better luck just asking for the group to be made and make you the owner. :)
If you're wondering why we're using "contains" in the example instead of "equals", I was having flashbacks to a time I would have used this but there were a dozen Sales departments (one for each region, one for ops, etc), then realized it wasn't in the dropdown menu, and figured that would it a worthwhile example! 😄
Ohh that was a great one!! I didn't know about this. Question, we do have
Membership type
Assigned
on groups, is there a possibility to change the type actually to this dynamic?
Good question - looks like you can, but I would be really careful doing this if you're using it on business-critical resources. Make sure to validate the rule carefully to make sure it gets everyone, and plan it for non-peak hours - here's Microsoft's article on swapping:
learn.microsoft.com/en-us/entra/identity/users/groups-change-type
Is this better than AD groups?
Security groups ARE AD groups, they are just a particular kind. They used to be called Azure AD groups, but got renamed to Entra, and in this particular menu they’re just called security groups. The dynamic membership is just a layer on top of that. The Microsoft 365 groups are a different thing.
What about external shares?
You can invite external users in these groups, just keep in mind that they may not have fully filled out profiles to base the rules on unless you’re setting the profile fields as a part of your process.
Great video by the way! I wish you could convince my IT to grant me access lol.
Pro tip: make sure to turn off reshare capabilities when sharing reports this way, otherwise those users can technically share with more people and you wouldn’t really know.
Yeah, typically they would rather make it for you than give you access to do it yourself. They usually have a naming convention they’re already using, etc so you might have better luck just asking for the group to be made and make you the owner. :)