Forum Discussion
Solved
SPO with AD groups - refresh membership
Hello, I use synced AD groups to set permissions on SharePoint Online document libraries. When I remove, let's say 'userA', from my AD group then run a synchronization to O365, userA still have acce...
Yeah, so the Token Cache is the one for on-prem was 24 hours, looks to be the same in 365 "Access Token". Here is article about it, you can apparently change them for your tenant. https://docs.microsoft.com/en-us/azure/active-directory/active-directory-configurable-token-lifetimes
I know SharePoint on Prem had a cache for AD groups were cached with the user and I would have to app pool recycle to clear it for the user. Assuming same thing happens with 365 but problem is how long before those app pools in 365 refresh cache.