Forum Discussion
OhhAhh
Oct 19, 2023Copper Contributor
Creating a Dynamic user group where members must be a member of 2 other groups
Hi
I have Group A which is made up of direct members
I have Group B which is a dynamic group
I want to create a dynamic user group and have it populate with users where the members belong to both Group A and Group B.
I have tried
user.memberof -any (group.objectId -in ['xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx']) -and ,'user.memberof -any (group.objectId -in ['zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzz']) but that doesnt work. It seems that there is no option to replace -any with -all
I have read some of the preview limitations so suspect that it might not be possible. But if that is the case what is the best way to create a dynamic group where the members must exist in both the other 2 groups ?
Thanks
- OhhAhhCopper ContributorThanks. It doesnt look like there is an option for what I need
The syntax that is currently supported -
Example user rule: user.memberof -any (group.objectId -in ['groupId', 'groupId'])
If that is the only rule which can be used then there isnt a way of saying that a member must be part of GroupA AND GroupB - rahuljindal-MVPBronze ContributorMaybe this can help - https://rahuljindalmyit.blogspot.com/2023/09/working-with-entra-id-memberof.html