Ad Connect sync group type security onprem with existing group AAD

Andre Marsaioli 1

Hi,

it is possible do it with rule editor?
Which attributes my i choice and how do it?

Regrads

2 answers

Vasil Michev 113.4K Reputation points MVP

2020-03-30T08:26:45.657+00:00

If the group is mail-enabled, you should be able to soft-match it against the primary SMTP address value. Otherwise it's not possible afaik.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-existing-tenant#other-objects-than-users
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Andre Marsaioli 1 Reputation point

2020-03-30T11:47:40.46+00:00

Hi Michev thanks for reply.

But in Azure Portal i don't have this option "email-enable" only in admin center ms365.
Please sign in to rate this answer.
Vasil Michev 113.4K Reputation points MVP

2020-03-30T12:13:23.467+00:00

Nobody said that's an option :) What I meant was if the group was created as mail-enabled one, sorry if I was being unclear. And no, there isn't any way to mail-enable a group in O365.

Andre Marsaioli 1 Reputation point

2020-03-30T14:50:37.963+00:00

No problem, my apologies, my questions weren't clear as well

I guess to control my security groups only in Portal Azure, to automate i'll need a script on my local server ad connect with create a group in AD on-prem, move to the UO sync and delete the group was created on Azure.

Andre Marsaioli 1 Reputation point

2020-03-30T15:17:17.753+00:00

With support of same sample codes in websites, and Docs Microsoft.

Script
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Ad Connect sync group type security onprem with existing group AAD

2 answers

Your answer