How to create a group membership in a dynamic group (preview) in Microsoft Entra ID

Microsoft Entra ID (formerly Azure Active Directory) allows administrators to create dynamic groups whose membership automatically updates using the memberOf attribute. Security groups, Microsoft 365 groups, and groups that are synced from on-premises Active Directory can all be added as members of these dynamic groups.

Follow the steps below to create a memberOf dynamic group.

1. Sign in to the Microsoft Entra admin center as at least a User Administrator .
2. Browse to Identity > Groups > All groups .
3. Select New group .
4. Fill in the group details. The group type can be Security or Microsoft 365 , and the membership type can be set to Dynamic User or Dynamic Device .
5. Select Add dynamic query .
6. Select Edit to write the rule in the Rule syntax box.
   1. Example user rule: user.memberof -any (group.objectId -in ['groupId', 'groupId'])
   2. Example device rule: device.memberof -any (group.objectId -in ['groupId', 'groupId'])
7. Select OK .
8. Select Create group .

Manage Entra ID groups and more with M365 Manager Plus

M365 Manager Plus is an extensive Microsoft 365 tool used for reporting, managing, monitoring, auditing, and creating alerts for critical incidents. With M365 Manager Plus, you can:

• Perform bulk operations like password resets and account unlock without using PowerShell scripts.
• Report and audit with over 700pre-packaged reports to track changes and get better visibility on your services.
• Automate routine tasks like user provisioning, stale group cleanup, and mailbox management operations.
• Monitor the health of Microsoft 365 services and get notified on critical activities and outages.
• Create custom granular roles to delegate Microsoft 365 administration to technicians.