Thanks for your interest on this feature. This capability is still in the pipeline. The initial estimate was obviously off and we are looking at a new timeline. We are aware of the benefit of having this rollover made automatic and the interest you have on the feature, and that’s how we are looking at it while prioritizing it against other capabilities requests.
Thanks for your patience!
Principal Program Manager
Microsoft IdentityPaweł Zieliński commented
This should be automatic. Most Azure users are not even aware it is a security issue.
106 votes22 comments · Azure Active Directory » Groups/Dynamic groups · Flag idea as inappropriate… · Admin →
We are investigating what it would take to add support for multi-value attributes in Dynamic Groups to enable this and related scenarios.
Kristina Bain SmithPaweł Zieliński commented
We use departmentNumber in our on-site AD as a cost number. Microsoft in default schema decided to make it a multi-valued attribute (although department is a single-valued). We use only the first row of it. I would be happy to be able to sync it to single-valued Azure attribute as a workaround. Possible?