SOLVED

Everyone group Azure AD for user assignment

%3CLINGO-SUB%20id%3D%22lingo-sub-1622099%22%20slang%3D%22en-US%22%3EEveryone%20group%20Azure%20AD%20for%20user%20assignment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1622099%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Everyone%2C%3C%2FP%3E%3CP%3EI%20am%20creating%20a%20enterprise%20application%20in%20Azure%20and%20I%20am%20at%26nbsp%3B%20user%20assignment%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%20I%20can%20allow%20certain%20groups%2F%20users%20which%20I%20would%20select%2C%20however%20is%20there%20a%20pre-defined%20group%20that%20allows%20Everyone%26nbsp%3B%20from%20%3CSTRONG%3EOnly%3C%2FSTRONG%3E%20my%20Azure%20Active%20Directory.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20I%20don't%20tick%20on%20User%20assignment%20required%2C%20does%20this%20mean%20anyone%20with%20a%20Microsoft%20id%20can%20login%20%2C%20even%20if%20they%20are%20not%20a%20member%20of%20my%20Azure%20Active%20directory%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20Thanks%20in%20Advance%3C%2FP%3E%3CP%3EPaul%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1622432%22%20slang%3D%22en-US%22%3ERe%3A%20Everyone%20group%20Azure%20AD%20for%20user%20assignment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1622432%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F589709%22%20target%3D%22_blank%22%3E%40AshJor%3C%2FA%3E%2C%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20would%20suggest%20to%20build%20a%20dynamic%20AAD%20Group%20that%20contains%20all%20users%20from%20AAD%2C%20maybe%20with%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUsertype%20-%26gt%3B%20Member%3C%2FP%3E%3CP%3EdirSyncEnabled%20-%26gt%3B%20false%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20should%20get%20all%20AAD%20Only%20Users%20to%20the%20Group.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20you%20don't%20tick%26nbsp%3B%3CSPAN%3EUser%20assignment%20required%2C%20everybody%20can%20use%20the%20Enterprise%20App%20as%20far%20as%20i%20remember.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EKind%20Regards%2C%20Peter%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1639883%22%20slang%3D%22en-US%22%3ERe%3A%20Everyone%20group%20Azure%20AD%20for%20user%20assignment%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1639883%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F294699%22%20target%3D%22_blank%22%3E%40Peter_Beckendorf%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMany%20Thanks%3C%2FP%3E%3CP%3Ethis%20worked%20extremely%20well.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPaul%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi Everyone,

I am creating a enterprise application in Azure and I am at  user assignment,

 

I know I can allow certain groups/ users which I would select, however is there a pre-defined group that allows Everyone  from Only my Azure Active Directory.

 

If I don't tick on User assignment required, does this mean anyone with a Microsoft id can login , even if they are not a member of my Azure Active directory?

 

Many Thanks in Advance

Paul

 

 

 

 

 

 

2 Replies
best response confirmed by AshJor (New Contributor)
Solution

Hi @AshJor

 

I would suggest to build a dynamic AAD Group that contains all users from AAD, maybe with:

 

Usertype -> Member

dirSyncEnabled -> false

 

This should get all AAD Only Users to the Group.

 

When you don't tick User assignment required, everybody can use the Enterprise App as far as i remember.

 

Kind Regards, Peter

@Peter_Beckendorf 

 

Many Thanks

this worked extremely well.

 

Paul