Forum Discussion
site Members vs site Members
Hi ecflyer
If your synced AD security group was named the same as your SharePoint Online group, it would appear identical and could be confusing.
An easy way to tell is by looking at the "type" column. If it says, "SharePoint Group", that is usually the Site group from SharePoint. If it says, "Domain Group", that group is being synced from your AD environment.
The best practice for permissions is to nest AD groups in your SharePoint Online groups and it appears you've done that successfully.
If you were to add members to that SharePoint Online group from the modern menu in your screenshot, it would be adding users directly to the SharePoint Online group, not the AD group. And that's not what you want.
The correct approach is to add users to the AD group only, and then that will sync with SharePoint Online. This approach helps keep permissions clean.
Hope this helps!
-Rob
- Wouldn't it make them more secure, if at the end of them, the end user to put their own code x in you , I like a pitcher or something that you draw. That's only unique for the end user. So that if they guessed your passcode, they still wouldn't have that picture. Our drawing, or whatever to be able to access it. I'm not quite sure what I'm trying to say, but I think you understand it. Because of the computer is looking for numbers to get your code, it would never be able to do decide the last part. The pitcher, the drawing, because it's not in this bank to look for sorry about posting this on your page. I just didn't know where else to put it