Skip to main content

Create a Dynamic Group

Dynamic groups in Microsoft Entra ID allow administrators to automatically manage group membership based on user or device attributes. This article provides a step-by-step guide to creating a dynamic group that includes members with Windows OS and corporate devices.

Prerequisitesโ€‹

  • Microsoft Entra ID P1 license or Intune for Education license.
  • Administrative access to the Microsoft Entra admin center.

Steps to Create a Dynamic Groupโ€‹

Sign in to Microsoft Entra Admin Centerโ€‹

Create a New Groupโ€‹

  • In the left-hand navigation pane, select Groups > All groups.
  • Click on New group.

Configure Group Settingsโ€‹

  • Group Type: Select Security.
  • Group Name: Enter a meaningful name for the group (e.g., "Windows Corporate Devices").
  • Group Description: Provide a description for the group.

create-new-group

Set Membership Type to Dynamicโ€‹

  • Under Membership type, select Dynamic Device.
  • Click on Add dynamic query.

create-new-group

Define Membership Rulesโ€‹

  • Use the rule builder or text box to define the membership rules. For this example, we'll use the text box to add two expressions:
    • Expression 1: device.deviceOSType -eq "Windows"
    • Expression 2: device.deviceOwnership -eq "Corporate"

Example Dynamic Query

(device.deviceOSType -eq "Windows") and (device.deviceOwnership -eq "Corporate")

Save the Groupโ€‹

  • Click on Save to create the group with the defined dynamic membership rules.

entra-dynamic-group

Verification:

  • After saving the group, the dynamic membership rules will be processed. You can verify the members of the group by navigating to the group's Members section.

Summaryโ€‹

Summary

Creating dynamic groups in Microsoft Entra ID simplifies the management of users and devices by automating group membership based on specific attributes. This example demonstrates how to create a dynamic group for Windows OS corporate devices, ensuring efficient and organized device management.

For more detailed information: