How to Recover Azure AD Dynamic Group Rules After Conversion
Question details
The user needs to restore dynamic membership rules for an Azure AD (Microsoft Entra ID) group that were lost when the group type was changed from Dynamic to Assigned.
- Product
- Microsoft Entra ID
- Device & OS
- not provided
- Scenario
- A dynamic group was converted to an assigned group, causing the loss of the original dynamic membership queries.
- Observed behavior
- The previous dynamic membership rules are removed or overwritten, and the group no longer automatically updates its members.
Gather your Group ID, the approximate date of the conversion, and review your Azure AD audit logs to see if the previous membership criteria were recorded.
Manually Recreate the Dynamic Membership Rule
If you have a record of the original expression, the fastest way to restore functionality is to change the group type back and recreate the rule.
Microsoft Entra ID does not feature a direct 'undo' button for group type conversions. When a group is converted to Assigned, its dynamic rules are wiped. Reconstructing the rule manually is the primary recovery method.
Log in to the Microsoft Entra admin center using an administrator account.
Navigate to 'Groups' > 'All groups', and search for the group that was accidentally converted.
Go to the 'Properties' tab of the group, and change the 'Group type' back to 'Dynamic User' or 'Dynamic Device'.
Navigate to the 'Dynamic membership rules' section, enter your reconstructed original rule expression, and click 'Save'.
Seek Assistance from Microsoft Support
If the original rule cannot be reconstructed from logs, reach out to Microsoft experts for advanced recovery options.
Boost Your Productivity with WPS Office
While Azure AD manages your organization's identity and access, WPS Office provides a lightweight, free, and highly compatible suite for your daily document management needs. It offers a seamless transition with comprehensive support for standard Microsoft formats.
- 1. Download the installer: Visit the official WPS Office website and download the free version for your operating system.
- 2. Install WPS Office: Run the setup file and follow the straightforward on-screen instructions to complete the installation.
- 3. Open existing documents: Double-click any of your existing Word, Excel, or PowerPoint files to open and edit them instantly in WPS Office.
Frequently Asked Questions
Can I automatically undo a group conversion in Azure AD?
No, Microsoft Entra ID does not have a one-click 'undo' button for group type conversions. You must manually change the group type back and re-apply the dynamic membership rules.
Where can I find the old dynamic rules for my Entra ID group?
You can check the Azure AD Audit Logs. Look for 'Update group' events around the time the group was converted. The log details may contain the previous membership rule string in the modified properties.
What happens to current members when a dynamic group is changed to assigned?
When converted to Assigned, the current members usually remain in the group as static, assigned members. However, the group will no longer automatically evaluate user attributes to add or remove members.
