Using AD Security Groups for SPO Access

[albertstain]

I have had mixed results using Security Groups I've created in our AD and using them on our SharePoint Online environment. I can see the Security Group in AAD and the correct members.

If I add the Domain Group (Security Group) into SPO and it works properly, I can run Check Permissions, search for the user, and it will show what Domain Group and what access they have.

If it doesn't work, the user will just have no permissions/Limited Access.

Does it take up to 24hrs for users to gain access via Domain Groups or am I doing something wrong? I have tried both adding the Domain Group directly into permissions, and also nesting it under a SharePoint Group.

[#2]

@albertstain 

Hi, I'm not quite understanding your problem here I'm afraid.  Are you saying that sometimes you can grant Security Groups permissions to SharePoint Sites, and other times you cannot?  Can you please provide a bit more information and perhaps some example screenshots?

[#3]

@PeterRising Hi Peter - I create a Security Group in our AD and I can see that it syncs up as I can see it on our Azure AD as well. When I use this Security Group and add it for Site permissions on our SPO, the group adds as a Domain Group but takes a long time for the users in that group to actually gain access via the Domain Group.

E.g. I add a Domain Group called AD-Site-Owners with John Doe, after adding in SPO, I use the Check Permissions function and search for John Doe - he comes up with Access: None or Limited Access. If I wait till the next day, I can see him granted access via AD-Site-Owners.

Is this normal and is there any way to speed up the time it takes for this to happen?

[#4]

@albertstain 

Ah I see.  Yes I've had mixed results with this method in the past, and I must admit that when it comes to SP Online Sites, I favour the use of SP groups as opposed to AD synced or Azure AD Groups.  It just works a whole lot better (in my own opinion that is).