Implementing Azure AD dynamic group membership
Before we dive into the principles of Azure AD dynamic groups, it is important to take a step back and ensure you have an overall appreciation of the available methods you can use to assign access rights to your users in Azure AD. These are as follows:
- Direct assignment: Permissions to Azure AD resources are granted by manually assigning access for the resource to an individual Azure AD user object.
- Group assignment: Permissions to Azure AD resources are granted by manually assigning access for the resource to an Azure AD group that contains a set of Azure AD user objects that are added or removed from the group manually.
- Rule-based assignment: Permissions to resources are granted by dynamically assigning users to a group by defining rules for membership based on specific user object attributes (such as the department field).
- External authority assignment: Permissions to resources are granted by creating groups in...