An organization utilizes Microsoft Entra Connect to synchronize user accounts from an on-premises Active Directory Domain Services (AD DS) domain to a cloud-based Microsoft Entra ID tenant. An administrator attempts to add a synchronized user named User-Alpha (whose current department is Marketing) to a dynamic group named Group-Sales (configured with the membership rule `(user.department -eq "Sales")`) by changing User-Alpha's department attribute to Sales directly in the Microsoft Entra admin center.
Is it true that this action successfully updates User-Alpha's department attribute in Microsoft Entra ID and adds them to the dynamic group?
Answer: Answer
Answer
It is false that the action successfully updates User-Alpha's department attribute in Microsoft Entra ID and adds them to the dynamic group.
The correct answer is False because the user account is synchronized from an on-premises directory, meaning its department attribute cannot be changed in the cloud via the Microsoft Entra admin center. Since the attribute remains unchanged, the user does not satisfy the dynamic group membership rule.
Step-by-Step Solution
Key Concept
Source of authority for synchronized identities and its impact on Microsoft Entra ID dynamic groups.
Estimated Time:1m 30s