This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 57.99999999999999%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDE%3C/text%3E%3C/svg%3E)
Good afternoon.
I am trying to create a dynamic group in Entra ID of users who have the Microsoft Office Business Premium license. I have tried in the Groups area of Entra ID using the rule creation interface (assignedPlans.serviceID) and in Powershell using commands in the Microsoft Graph library. Nothing works, I get errors saying properties aren't supported or I get way too many results for a single user and single sku.
Has anyone successfully done this? I have the SKU and the SKU ID.
Organizing devices and users into groups for policy application
A cloud-based identity and access management service for securing user authentication and resource access
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 38%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
hth
Marcin
That's the exact membership rule I was using. I tried it in Powershell and using the group creation tool in Entra ID. The problem was it would return way too much data per user and when I tried to use something more specific, I would get the property not supported. I believe your code will work. I think it's the serviceplanID that I am using.
Thank you.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
@D E Thanks for your update.
If you want more help, it is suggested to contact Entra ID support. Here is the support link:
https://learn.microsoft.com/en-us/entra/fundamentals/how-to-get-support
Thanks for your understanding and hope everything goes well with you.
Hello D E,
We understand you wants to add dynamic group with users having Microsoft Office Business Premium license.
I tried the below syntax in my tenant and was able to create Dynamic User Group and I suggest you to try the same with your license plan as shown below.
user.assignedPlans -any (assignedPlan.servicePlanId -eq "cbdc14ab-d96c-4c30-b9f4-6ada7cdc1d46" -and assignedPlan.capabilityStatus -eq "Enabled")
You can refer below thread to get correct SKU IDs for Microsoft 365.
https://gist.github.com/mczerniawski/950e5c102c704d628ce38522ef4ad0f9
Hello D E,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Did you get a chance to review the syntax shared above.
Hello D E,
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
My apologies. I figured it out. The service plan id that I had was a that had several sub ids associated beneath it. I found a sub-service id that was unique to business premium and I got it to work. The syntax was correct. The service plan id was the problem.
thank you.
@D E Thanks for posting in our Q&A.
Based on my research, the rule may be:
(user.assignedPlans -any (assignedPlan.servicePlanId -eq "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX" -and assignedPlan.capabilityStatus -eq "Enabled"))
For more details, please refer to the following link:
https://cloudyhappypeople.com/2019/06/26/create-a-dynamic-rule-based-on-user-license-plan/
Note: Non-Microsoft link, just for the reference.
In addition, we can skip the PowerShell section in the above link to find the ServiceplanID info by going to this Microsoft Page. https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/licensing-service-plan-reference
Hope it will help.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
@D E Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.