Others

Fix 'Add Expression' Option Disabled for Entra ID Dynamic Groups

Emma Brown Sep 28, 2026 869 views

Question details

The 'Add expression' option is greyed out or unavailable when attempting to configure membership rules for dynamic groups.

Fix 'Add Expression' Option Disabled for Entra ID Dynamic Groups

Product: Microsoft Entra ID
Device & OS: not provided
Scenario: Editing membership rules for dynamic groups in the Microsoft Entra admin center.
Observed behavior: The 'Add expression' button cannot be clicked despite the tenant having an active Entra ID P1 subscription and the user holding Global Administrator credentials.

Before you start

Verify that your Global Administrator session hasn't expired, and ensure you are logged into the correct Microsoft Entra admin center directory.

Solution 1Recommended

Consult the Microsoft Entra ID Community on Q&A

Because this issue involves backend tenant synchronization or highly specific licensing glitches, you should engage specialized Microsoft Entra ID support rather than general Exchange forums.

While standard Office 365 support handles Exchange Online issues, dynamic groups are governed by Microsoft Entra ID (formerly Azure AD). The Entra ID engineering and support teams monitor the dedicated Q&A community for UI bugs and backend sync failures.

Navigate to Microsoft Q&A

Go to the official Microsoft Learn Q&A platform and search for the 'Entra ID' tag.

Submit your specific scenario

Create a new post detailing your exact situation: mention that you hold Global Administrator rights and that the Entra ID P1 subscription is actively applied.

Check Microsoft Service Health

While waiting for a response, visit the Microsoft 365 admin center's Service Health dashboard to see if there are any active advisories regarding the Entra ID portal.

Consult the Microsoft Entra ID Community on Q&A

Correct Support Channel: Do not post this issue in an Office 365 Exchange Online forum, as the specialized Entra ID team will not be able to see or investigate dynamic group rule configurations there.

Solution 2

Verify Account Licensing and Use Syntax Workaround

Rule out local browser cache issues and bypass the graphical interface by using the rule syntax box.

Free Microsoft Office alternative

Manage Your IT Documentation with WPS Office

While resolving complex Entra ID administrative issues requires Microsoft's native portals, documenting your IT workflows doesn't require expensive Microsoft 365 subscriptions. WPS Office offers a free, lightweight, and powerful alternative for drafting administrative reports and IT policies.

Fully compatible with Microsoft Word, Excel, and PowerPoint document formats.Free and lightweight, avoiding complex enterprise licensing structures.Familiar user interface ensuring zero learning curve for IT teams.Built-in PDF editing tools for managing IT security manuals and policies.

microsoft office alternative - wps office

Frequently Asked Questions

Why do I need a P1 license for Entra ID dynamic groups?

Dynamic group membership is classified as a premium feature in Microsoft Entra ID. Microsoft requires an active Entra ID P1 or P2 license for every unique user who is a member of one or more dynamic groups.

Can I manually type a dynamic group rule if the button is disabled?

Yes, you can often bypass UI glitches in the Entra ID portal by clicking 'Edit' on the Rule syntax box and manually typing your membership rule using the supported query syntax.

Are dynamic groups supported in basic Microsoft 365 business subscriptions?

No, standard Microsoft 365 Business Basic or Standard subscriptions do not include dynamic group capabilities unless a separate Microsoft Entra ID P1 add-on is purchased and applied.

Office Quick Solutions