Ad Connect sync group type security onprem with existing group AAD

Question

Andre Marsaioli 1

Hi,

it is possible do it with rule editor?
Which attributes my i choice and how do it?

Regrads

2 answers

Answer 1

Vasil Michev 123.6K MVP Volunteer Moderator

If the group is mail-enabled, you should be able to soft-match it against the primary SMTP address value. Otherwise it's not possible afaik.

Answer 2

Andre Marsaioli 1

Hi Michev thanks for reply.

But in Azure Portal i don't have this option "email-enable" only in admin center ms365.

Vasil Michev 123.6K Reputation points MVP Volunteer Moderator

2020-03-30T12:13:23.467+00:00

Nobody said that's an option :) What I meant was if the group was created as mail-enabled one, sorry if I was being unclear. And no, there isn't any way to mail-enable a group in O365.
Andre Marsaioli 1 Reputation point

2020-03-30T14:50:37.963+00:00

No problem, my apologies, my questions weren't clear as well

I guess to control my security groups only in Portal Azure, to automate i'll need a script on my local server ad connect with create a group in AD on-prem, move to the UO sync and delete the group was created on Azure.
Andre Marsaioli 1 Reputation point

2020-03-30T15:17:17.753+00:00

With support of same sample codes in websites, and Docs Microsoft.

Script