Azure 365 Groups have disappeared from Intune / Endpoint Manager Profiles

%3CLINGO-SUB%20id%3D%22lingo-sub-1287390%22%20slang%3D%22en-US%22%3EAzure%20365%20Groups%20have%20disappeared%20from%20Intune%20%2F%20Endpoint%20Manager%20Profiles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1287390%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20There%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20ticket%20underway%20for%20this%20one%20but%20I%20don't%20think%20the%20agent%20is%20aware%20of%20the%20resolution%20so%20I%20am%20posting%20here%20in%20the%20hopes%20of%20some%20insight.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20whole%20bunch%20of%20Intune%20configuration%20profiles%20set%20in%20Intune%20%2F%20Endpoint%20Manager.%20The%20profiles%20are%20generally%20assigned%20to%20members%20via%20365%20groups%20with%20dynamic%20membership.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETwo%20weeks%20ago%2C%20many%20of%20the%20365%20groups%20dropped%20from%20the%20list%20of%20selectable%20groups%20when%20assigning%20a%20configuration%20profile%20in%20Intune.%20I%20can%20set%20up%20a%20new%20365%20group%20and%20this%20new%20group%20is%20selectable%20in%20the%20drop%20down%20list%20of%20possible%20assignments%20for%20the%20profile%20however%20most%20of%20the%20existing%20365%20groups%20are%20not%20visible%20or%20assignable.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIntune%20support%20have%20told%20me%20that%20this%20is%20occurring%20because%20I%20should%20be%20using%20Security%20Groups%20rather%20than%20365%20Groups%20to%20assign%20profiles.%20This%20is%20contrary%20to%20the%20guidance%20information%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmem%2Fintune%2Fconfiguration%2Fdevice-profile-assign%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EHERE%3C%2FA%3E%20and%20is%20contrary%20to%20the%20behavior%20I%20have%20experienced%20in%20the%20past%20whilst%20using%20this%20system.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMy%20existing%20profiles%20are%20still%20linked%20to%20the%20pre-existing%20365%20groups%20that%20have%20long%20been%20established%20in%20the%20system.%20However%20I%20cannot%20assign%20NEW%20profiles%20to%20my%20pre-existing%20365%20groups.%20The%20only%20way%20around%20this%20at%20the%20moment%20seems%20to%20be%20to%20create%20a%20new%20365%20group.%20I%20don't%20want%20to%20have%20to%20reinvent%20all%20of%20my%20groups%20from%20scratch%20because%20there%20are%20many%20policies%20linked%20to%20these%20groups.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlease%20help!!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1287390%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1426489%22%20slang%3D%22en-US%22%3ERe%3A%20Azure%20365%20Groups%20have%20disappeared%20from%20Intune%20%2F%20Endpoint%20Manager%20Profiles%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1426489%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F612108%22%20target%3D%22_blank%22%3E%40Luke_SM%3C%2FA%3E%26nbsp%3BDid%20you%20try%20the%20Graph%20API%20%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Fresources%2Fintune-deviceconfig-deviceconfigurationgroupassignment%3Fview%3Dgraph-rest-beta%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fapi%2Fresources%2Fintune-deviceconfig-deviceconfigurationgroupassignment%3Fview%3Dgraph-rest-beta%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Visitor

Hi There

 

I have a ticket underway for this one but I don't think the agent is aware of the resolution so I am posting here in the hopes of some insight.

 

I have a whole bunch of Intune configuration profiles set in Intune / Endpoint Manager. The profiles are generally assigned to members via 365 groups with dynamic membership.

 

Two weeks ago, many of the 365 groups dropped from the list of selectable groups when assigning a configuration profile in Intune. I can set up a new 365 group and this new group is selectable in the drop down list of possible assignments for the profile however most of the existing 365 groups are not visible or assignable.

 

Intune support have told me that this is occurring because I should be using Security Groups rather than 365 Groups to assign profiles. This is contrary to the guidance information HERE and is contrary to the behavior I have experienced in the past whilst using this system.

 

My existing profiles are still linked to the pre-existing 365 groups that have long been established in the system. However I cannot assign NEW profiles to my pre-existing 365 groups. The only way around this at the moment seems to be to create a new 365 group. I don't want to have to reinvent all of my groups from scratch because there are many policies linked to these groups.

 

Please help!!

1 Reply