Examkin

Question

Difficulty: EasyUsers and Groups in Microsoft Entra ID

You need to create a dynamic user group in Microsoft Entra ID. The group must automatically include all users whose department attribute is set to Sales. Which membership rule should you use?

  1. (user.department -eq "Sales")Answer
  2. B
    (user.department -match "Sales")
  3. C
    (device.department -eq "Sales")
  4. D
    (user.department == "Sales")

Answer

The correct membership rule is (user.department -eq "Sales").
The correct dynamic membership rule query uses the expression '(user.department -eq "Sales")' because Microsoft Entra ID dynamic group rules use OData syntax with operators like '-eq' for exact matches and 'user' to reference user attributes.

Step-by-Step Solution

1
Identify the target object type for the dynamic group.
Since the group is populated based on user attributes, the rule prefix must begin with 'user.' rather than 'device.'
This target represents user properties in the Entra ID schema.
2
Select the correct comparison operator for an exact match.
The operator '-eq' is the correct syntax for equality in Entra ID dynamic rules.
Microsoft Entra ID dynamic membership rules use OData query syntax, which implements PowerShell-style operators like '-eq' for equivalence.
3
Assemble the dynamic membership query.
Combine the user prefix, department property, operator, and the value to form '(user.department -eq "Sales")'.
This produces a syntactically correct query that the Entra ID rule parser can validate and process.

Key Concept

Dynamic group membership rules in Microsoft Entra ID require specific OData/PowerShell-like syntax and correct object prefixes (user or device).
Rate this question

Topics

Users and Groups in Microsoft Entra ID

More questions from this topic