Forum Discussion
Solved
transition to O365 - AAD
Hi Just wanted to hear about any recommendations / best practice for the following: A company has a traditional AD on-prem - with OU's, User objects, Security Groups, Distribution lists, et...
- Yeah it's still a mix and depends on if you still have onprem resources or not. I personally like to split the two up. Cloud is Office 365 groups which includes anything connected to that group and on-prem and Non SharePoint group connected sites (comm sites etc.) stay Security groups.
Really isn't a best practice per say other than that. You don't want to use office 365 groups across other sites because membership into that group could affect access to other things that people may not think about and when guest access comes into play can get even worse that's why I like to try to keep it manual if possible.
Ms is pushing for membership through office 365 groups which don’t play very well with local Ad membership assignment! Modern pages work on O365 groups and it’s the easiest to not mess with synced Security groups except if you have a sharepoint intranet or classic sites! You may use dynamic office 365 groups if you have P1 licenses