Forum Discussion

johnjohn-Peter's avatar
johnjohn-Peter
Iron Contributor
Feb 26, 2025

Can we add an Office 365 dynamic group inside SharePoint site permissions?

If we create a dynamic office 365 group which contain the users inside the HR department, and we assign this dynamic group read permission on a SharePoint site (directly or through SharePoint group), will all the related users inside the HR dept get access to the SharePoint site? if the answer is Yes, then what will happen if the user get moved from the HR dept to let say the finance dept, and hence from the dynamic group, , will the user permission inside SharePoint get removed as well? so the user no longer can access the SharePoint site?

Thanks

  • Aravinda Rao's avatar
    Aravinda Rao
    Copper Contributor

    Dynamic groups are basically created to automatically include / exclude users into a group who meet a criteria like Department, Office Location etc., So, the group is managed automatically, so as users meet the dynamic criteria, they will be granted access or removed from the SharePoint site accordingly. Important points to consider

    Permissions Inheritance: If the site permissions are inherited from a parent site, you may need to break inheritance first to modify the permissions at the site level.

    Permissions Sync: Changes to the dynamic group (e.g., a member added or removed) will be reflected in the SharePoint site permissions, but it may not reflect immediately.

    See if this guide helps. 

    https://blog.atwork.at/post/Dynamic-groups-accessing-SharePoint-Online

  • lgonyea's avatar
    lgonyea
    Brass Contributor

    That is correct. If the users profile updates to change departments and the Dynamic Group is only looking for HR, then once the profile changes, the user no longer meets the criteria and is removed, hence losing access. 

Resources