Question

You are a Microsoft Entra administrator at Contoso. The HR department wants a security group that always contains all users whose department attribute is exactly 'Sales' and whose account is enabled, without any manual maintenance. New Sales hires and departures happen weekly. You must create a group whose membership updates automatically based on user attributes. Which action should you take?

Accepted Answer

Create a security group with membership type 'Dynamic User' and a rule of (user.department -eq "Sales") -and (user.accountEnabled -eq true).

Answer

Create a security group with membership type 'Assigned' and configure an access review to add Sales users each week.

Answer

Create a Microsoft 365 group with membership type 'Dynamic Device' and a rule of (device.department -eq "Sales").

Answer

Create a security group with membership type 'Assigned' and use a PowerShell scheduled task to add Sales users nightly.