Implementing Azure AD dynamic group membership
Before diving into the principles of Azure AD dynamic groups, it is important to take a step back and ensure you have an overall appreciation of the methods available for assigning access rights to your users in Azure AD. These methods are as follows:
- Direct assignment: Permissions to Azure AD resources are granted by manually assigning access for the resource to an Azure AD object that has a credential.
- Group assignment: Permissions to Azure AD resources are granted by manually assigning access for the resource to an Azure AD group containing a set of Azure AD user objects. These objects are added or removed from the group manually.
- Rule-based assignment: Permissions to resources are granted by dynamically assigning users to a group. The rules for membership are defined based on specific user object attributes (such as the
department
field). - External authority assignment: Permissions to resources are granted by creating...