Creating Microsoft 365 Dynamic Groups in Azure/Intune

Azure Dynamic Groups is a feature that allows you to automatically add users to a deployment group based on certain criteria. This can be useful when you want to ensure that users have the appropriate licenses and permissions to access the resources in the deployment group.

To use Azure Dynamic Groups, first you will need to create a new dynamic group in the Azure portal. You can do this by going to the Azure Active Directory section and selecting "Groups" from the menu. From there, click the "New Group" button and select "Dynamic Device Group" as the group type.

Once you have created the dynamic group, you can define the criteria for membership in the group. This can include things like the user's location, the device they are using, or their membership in other groups.

Once you have defined the membership criteria, you can add users to the dynamic group by using PowerShell scripts. To do this, you will need to use the Add-AzureADGroupMember cmdlet. This cmdlet allows you to specify the user's object ID and the dynamic group's object ID, and it will automatically add the user to the group if they meet the membership criteria.

Here’s a useful snippet that ban be used to add users to a dynamic group:

$userObjectId = "<user's object ID>"
$groupObjectId = "<dynamic group's object ID>"
Add-AzureADGroupMember -ObjectId $groupObjectId -RefObjectId $userObjectId

In this snippet, you will need to replace <user's object ID> and <dynamic group's object ID> with the actual object IDs of the user and dynamic group, respectively.

Once the user has been added to the dynamic group, they will automatically be added to any deployment groups that are associated with the group. This will ensure that they have the appropriate licenses and permissions to access the resources in the deployment group.

In addition to using PowerShell scripts, you can also use the Azure portal to manage dynamic groups and add users to them. To do this, you can go to the Azure Active Directory section of the portal and select "Groups" from the menu. From there, you can click on the dynamic group you want to manage, and then click the "Members" tab to see a list of current members.

To add a new member to the dynamic group, you can click the "Add Member" button and search for the user you want to add. You can then select the user from the list and click the "Select" button to add them to the group.

Keep in mind that it may take some time for the user to be added to the dynamic group and associated deployment groups, as the membership criteria will need to be evaluated and the user will need to be added to the group.

Overall, Azure Dynamic Groups is a powerful tool that can help you automate the process of adding users to deployment groups. By using PowerShell scripts, you can easily add users to dynamic groups and ensure that they have the appropriate licenses and permissions to access the resources they need.