Examkin

Question

Difficulty: EasyUsers and Groups in Microsoft Entra ID

You manage a Microsoft Entra ID tenant. You are planning to create dynamic groups to automate administrative tasks.

Statement: A single Microsoft Entra ID dynamic group can contain both user objects and device objects as members simultaneously.

Is this statement true or false?

Answer: Answer

Answer

The statement is false. A dynamic group in Microsoft Entra ID can contain either users or devices, but not both types of objects simultaneously.
The correct answer is False because Microsoft Entra ID dynamic groups must be configured as either dynamic user groups or dynamic device groups. The membership rule engine only evaluates attributes of the selected object type, making it impossible to have a mixed membership of users and devices in a single dynamic group.

Step-by-Step Solution

1
Identify the group type and membership rule requirements in Microsoft Entra ID.
Microsoft Entra ID supports two membership types for dynamic groups: Dynamic User and Dynamic Device.
This classification determines which properties are available for writing the membership rule.
2
Analyze whether a dynamic rule can reference both user and device properties.
A dynamic rule is restricted to either the 'user' schema or the 'device' schema. You cannot combine user properties (e.g., user.department) and device properties (e.g., device.operatingSystem) in the same query.
Microsoft Entra ID enforces a strict separation between user and device dynamic group memberships to prevent schema mismatch errors during evaluation.

Key Concept

Dynamic group membership in Microsoft Entra ID is restricted to a single object type (either users or devices) per group.
Rate this question

Topics

Users and Groups in Microsoft Entra ID

More questions from this topic