You manage a Microsoft Entra ID tenant. You have the following users configured in the tenant:
| User | Department | UserType |
|---|---|---|
| User1 | Sales | Member |
| User2 | sales | Member |
| User3 | Marketing | Member |
| User4 | Sales | Guest |
You create a dynamic user group named SalesGroup and configure the dynamic membership rule for SalesGroup as follows:
`(user.department -eq "Sales") -and (user.userType -ne "Guest")`
Which users are members of SalesGroup?
- AUser1 only
- User1 and User2 onlyAnswer
- CUser1, User2, and User4 only
- DUser1, User2, User3, and User4
Answer
User1 and User2 only
The correct answer is the option stating 'User1 and User2 only'. In Microsoft Entra ID, dynamic membership rules evaluate string attributes without case sensitivity, so 'Sales' matches both 'Sales' and 'sales'. Since both User1 and User2 are members, and User4 is a guest, they are the only users matching both conditions of the rule.
Step-by-Step Solution
Key Concept
Microsoft Entra ID dynamic group membership rules use case-insensitive string comparisons and logical operators to determine group membership.
Estimated Time:1m 30s