Forum Discussion
Can we add an Office 365 dynamic group inside SharePoint site permissions?
If we create a dynamic office 365 group which contain the users inside the HR department, and we assign this dynamic group read permission on a SharePoint site (directly or through SharePoint group),...
A bit late but thought I'd add some comments.
- If you are using dynamic groups to control access to sensitive sites/libraries, etc. then you should make sure the rules for the dynamic groups work exactly as expected (you don't want any false positives that give incorrect people access to HR data as an example).
- If a user moves to a different role and their details are updated in SAP (or other system) those changes may not be reflected in Active Directory for quite some time, if ever. In large companies it's difficult to manage synchronizing between your employment systems and AD. I'd be finding out exactly how the syncing works, how frequent, and exactly what properties.
- If your SharePoint site is group connected you can change your Microsoft 365 group from Static to Dynamic, so it becomes a dynamic group. This will manage the Microsoft 365 Members dynamically based on the rules you set - the Owners will still be static.