Forum Discussion

Brent Ellis's avatar
Brent Ellis
Silver Contributor
Dec 21, 2017

Dynamic Rules and Direct Reports (combine with anything else?)

I am trying to use the Direct Reports rule for dynamic membership (which works great), but I need to add another user to the Group

 

So basically it is "everyone that reports to Joe", but also include "Bill"

 

Is it possible?

 

Trying every combination of something like this to  no avail:

Direct Reports for "a96d4941-03b4-4b43-a1e7-af0d18d9cc37" -OR user.mail -contains "userid"

Access Management
Azure Active Directory (AAD)
Identity Management
  • Shaima Yasin's avatar
    Shaima Yasin
    Icon for Microsoft rankMicrosoft
    Dec 03, 2018

    this rule can't be combined with any other membership rules. this is by design

    • Brent Ellis's avatar
      Brent Ellis
      Silver Contributor
      Dec 03, 2018
      Ya, found that a good while back. I find the capability basically useless for our organization. We resort to just using PowerShell scripts to define our criteria, rarely does the simple limited one shot dynamic rule satisfy what is really needed.

Resources