Event banner
Event details
It is possible to use an AzureAD group to add users to an organization. However it remains possible for Organization Administrators to add users individually. It would be good if we could block administrators from adding users manually if using an AzureAD group so that user administration can be managed using AzureAD groups only. Will you consider that?
Murugesh_seshadri
Microsoft
MicrosoftCurrently, organization administrators can add users to an org with the help of AzureAD group. At this point, we do not have plans to remove the option of adding users individually, because of following reasons: 1. provide flexibility to administrators to add users individually also; 2. encourage virality and adoption - in Viva Goals, basis the policy settings, even roles other than org administrators can add users, for instance Team admins can add individual users to their orgs and then to their teams.
However, we will continue to explore the need for removing individual user addition and include in our future roadmap based on insights and feedback.
- We'd certainly prefer to control access based on AzureAD groups and to prevent access being granted in other ad-hoc methods within the app.