Oct 17 2017
- last edited on
Jan 14 2022
I created a new Dynamic Group with the following rule:
(user.accountEnabled -eq true -and user.employeeID -ne $null)
But no members are being added.
Can anyone spot what may be the issue?
Oct 17 2017 10:10 AM
Paranthesis? Try this:
(user.accountEnabled -eq true) -and (user.employeeID -ne $null)
Well, also the fact that employeeID is not supported. You can find the list of supported proeprties here: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-accessmanagement-groups-wit...
Oct 17 2017 10:19 AM
Thanks for the reply. I just added the parenthesis, but it still says 0 members.
I didn't see employeeID in the help document, as you are pointing out, however I did sync employeeID as a custom attribute and tried that custom attribute with varied results.
There was also the recommendation in the help document to use the Graph Explorer to see the attributes, and when I did that I noticed that even though employeeID was not listed in the Dynamic Groups help page, it is there on the user object.
If I intentionally do a typo in employeeID (employeeI for example) the Dynamic memberthip rule editor interface throws an error, so it is validating and accepting the input.
I am stumpted.
Is there any way to troubleshoot this?
Oct 17 2017 10:52 AM
Oct 18 2017 12:37 AM
Do you have the necessary licenses applied? The feature requires Azure AD Premium for ALL users in the scope of the rule.
Oct 19 2017 08:59 AM
Oct 22 2020 08:57 AM
@Vasil Michev Not really a solution. In our experience, the average time to closure on any case with Microsoft is 6 weeks or longer. The reality about support is that nobody at Microsoft really knows their products. Also, things should be wizard driven, but are not. So you are crestfallen when after 4 weeks of banging your head against the wall, someone finally tells you, "you don't have the right license".