Question

Difficulty: EasyUsers and Groups in Microsoft Entra ID

In Microsoft Entra ID, you configure a new dynamic group. Statement: A single dynamic group can contain a dynamic membership rule that evaluates both user attributes and device attributes to include both users and devices in the same group. Is this statement true?

Answer: Answer

Answer

The statement is false because a dynamic group in Microsoft Entra ID can only contain either user objects or device objects, not both.
The correct answer is false because Microsoft Entra ID requires you to choose a specific membership type (Dynamic User or Dynamic Device) when configuring dynamic membership. This selection limits the membership rule to evaluating only attributes of that specific object type (users or devices), preventing a single dynamic group from containing both types of objects.

Step-by-Step Solution

1
Identify the membership types available for Microsoft Entra ID groups.
Groups can be configured as Assigned, Dynamic User, or Dynamic Device.
This establishes the core limitation of dynamic group types in Microsoft Entra ID.
2
Determine if a single dynamic group can evaluate both user and device attributes simultaneously.
A group configured as Dynamic User can only query user attributes, and a group configured as Dynamic Device can only query device attributes.
Entra ID does not support hybrid dynamic groups containing both user and device objects.

Key Concept

Microsoft Entra ID Dynamic Group Membership Types
Estimated Time:45s
Rate this question