Entra ID – Dynamic group rule builder does not include ‘contains’ and ‘notcontains’

If you are using Microsoft Entra ID (aka Azure AD), you probably know that you can create dynamic groups to group users or devices based on rules.

Well, until now you could use a ‘contains’ or ‘notcontains’ operator when creating the rule using the rule builder.

This is no longer the case. The rule builder does not include anymore these operators.

That said, it does not mean you can’t use them, you will just have to manually edit the rule using the syntax builder to use them.

Existing rules using ‘contains’ or ‘notcontains’ will continue to work as before, if you have to edit them the same limitation will apply.

It seems the decision has been made to ‘remove’ these operators from the builder because they are less performant.


Leave a Comment

Your email address will not be published. Required fields are marked *

The reCAPTCHA verification period has expired. Please reload the page.