dynamic membership for administrative units
Managing user memberships for administrative units should be make possible by dynamic membership!
So for instance the memberships should be auto-updated based on the department field of the user. (or any other attribute)

13 comments
-
Maarten van den Berg commented
+1 for dynamic group admin units!
-
Kuriakose commented
Administrative Units is useless for us without support for Dynamic groups. It is near impossible to manually manage membership since users are added on the on-prem AD side by different groups with delegated access to their respective OU.
-
Harish commented
Without Dynamic groups it will be waste of using Administrative Units. we have around 20k users who needs to be managed by delegated administrator and we have inflow and outflow of 100 users everyday.
Please expedite this -
Winston Anderson commented
I'm surprised that I'm unable to dynamically assign a user to an administrative unit. Our goal for the deployment of AUs was to limit the amount of clicks required by our Global Administrators.
-
Harry C. commented
Confirming what Leiming has posted, how can this feature be used in an organisation with 1000+ members effectively?
-
Leiming commented
the feature is useless for any tenant more than 1000 users unless dynamic membership is allowed.
-
Olivier Arpagaus commented
Yes, please add support for dynamic groups. It's mandatory to be able to work in bigger organizations. Thx.
-
Christer Eklundh commented
Adding support for dynamic groups, yes please!
-
Nikki Chapple commented
This is needed to make this feature work. Manually or bulk adding and removing users is unworkable
-
Keith Bachman commented
As someone with a large-scale environment this is needed for me to be able to take advantage of AUs. I cannot manually manage the addition/removal of users on a daily basis, without significant overhead, so I cannot deploy this environment-wide.
If there is an easy way to automate syncing changes from a Dynamic Group, that would be a 'workaround' for now. (Or let an AU tie its membership on top of a Dynamic Group, even if it only updates periodically on a 'sync schedule'?)
-
Ian Caldwell commented
please add support for dynamic membership for administrative units. AUs are a great feature, but we need dynamic membership to get the best value.
-
Anonymous commented
I would be fine if they supported using groups for memberships of AUs, then we could use dynamic groups to control memberships.
-
Aengus Moran commented
This deserves attention!
Would really add value to AUs.
I want to delegate some Guest Inviting but I want my guest inviters to be able to add some extra attribute values to the invitee's account and be able to reset the invitees MFA etc.
AUs are perfect for this ... but for one thing, the inviters cant add members to the AU (which I understand and agree with, but the lack of other options means someone else has to do the AU membership update and therefore the invitee onboarding process slows ...).
I would include also in the definition for dynamic membership, the ability to add a user as a member if they are a member of x group.