Forum Discussion
Group together Guest Accounts based on Dynamic Groups
Yes, it's possible via the Dynamic Azure AD Groups functionality: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-groups-dynamic-membership-azure-portal
The membership rule you need is: (user.userType -eq "Guest")
Yes, it's possible via the Dynamic Azure AD Groups functionality: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-groups-dynamic-membership-azure-portal
The membership rule you need is: (user.userType -eq "Guest")
VasilMichevhow does the licensing for this scenario work? I thought that dynamic group members needed to have AAD P1, is there an exemption for guests?
Shhhhh, let it slide :) I'm not sure to be honest, I know that they are not enforcing the licensing requirement in code, but whether Guest users need to be licensed...
Hi Dean,
Its actually always the Tenant which invites the Guests requiring the correct count of Licenses regarding Azure MFA. Its a 1:5 Ratio.
You need 1 User which has a AD Premium or Azure MFA License and with that you can have 5 Guest Users which are required to use MFA while accessing one of your Resources /SaaS Apps.
They do not have to be related to that specific User.
I hope this helps to clarify
Cheers
Ueli
