Creating a Dynamic user group where members must be a member of 2 other groups

[OhhAhh]

Hi

I have Group A which is made up of direct members

I have Group B which is a dynamic group

I want to create a dynamic user group and have it populate with users where the members belong to both Group A and Group B.

I have tried

user.memberof -any (group.objectId -in ['xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx']) -and ,'user.memberof -any (group.objectId -in ['zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzzz']) but that doesnt work.  It seems that there is no option to replace -any with -all

I have read some of the preview limitations so suspect that it might not be possible.  But if that is the case what is the best way to create a dynamic group where the members must exist in both the other 2 groups ?

Thanks

[#2 · Accepted solution]

Maybe this can help - https://rahuljindalmyit.blogspot.com/2023/09/working-with-entra-id-memberof.html

[#3]

Thanks. It doesnt look like there is an option for what I need
The syntax that is currently supported -
Example user rule: user.memberof -any (group.objectId -in ['groupId', 'groupId'])

If that is the only rule which can be used then there isnt a way of saying that a member must be part of GroupA AND GroupB