Sunday, May 2, 2021

Azure Active Directory Dynamic Groups for AutoPilot and Group Tags

 

Introduction:
In Azure Active Directory (Azure AD), you can create dynamic membership rules to automatically update groups. To quote Microsoft "Dynamic group membership reduces the administrative overhead of adding and removing users".. Or devices. This blog is to detail the properties and syntax needed to create dynamic membership rules for AutoPilot devices and assign deployment and ESP profiles. 


I wanted to create a group of all AutoPilot registered devices that has a specific Group tag 'PAW'. The intention being to assign a specific AutoPilot deployment profile/ESP and a set of configuration but only to defined computers and not all AutoPilot registered devices. 
Group tags will be created for different departments so they receive specific policy, apps, config per department i.e. Finance, HR, IT services etc.

Within my list of AutoPilot devices (see how to populate AutoPilot list) I clicked on a device and gave it the group tag 'PAW'.


Within Graph Explorer this Group Tag name can be found within the 'PhsicalIds' properties and will form the basis of our dynamic query.

https://graph.microsoft.com/beta/devices/deviceid_1234#######################




Now I need to create a Azure AD Group that only includes AutoPilot registered devices with the PAW group tag.

How to create an Azure AD Group?

Within Azure/Endpoint Manager select groups > New Group.
Enter a Group names
Ensure Dynamic Device is selected within the drop down
Select 'Add dynamic query' to input query syntax





The following query is well documented to populate a group with all AutoPilot registered devices.

(device.devicePhysicalIDs -any _ -contains "[ZTDId]")

By using the 'and' operator we are now adding an additional parameter that must be found within Azure AD to be listed in the group.

As seen within Graph Explorer the OrderID propery now details 'PAW' which can be discovered with the following query.

(device.devicePhysicalIDs -any _ -contains "[ZTDId]") and (device.devicePhysicalIds -any _ -eq "[OrderID]:PAW")







7 comments:

  1. Honestly speaking, I am not getting it because I do not have much knowledge about Azure. However, I want to go in deep, but I do not have enough time to do that because I have to find a qualitative research methodology writing service for my brother. Otherwise, he would become angry at me.

    ReplyDelete
  2. This comment has been removed by the author.

    ReplyDelete
  3. It was nice to read your blog. If anyone needs case study help then visit to our website:- Assignment Help Australia . We provide all type of case study assignments for MBA, Nursing, Laws and Engineering students.

    You can visit us at the given link:-
    Case Study Help
    Assignment Help
    MBA Assignment Help
    Assignment Samples
    Case Study Writers

    ReplyDelete

  4. Mycasestudyhelp.com is most rated and trusted assignment help services provider in the world.
    We are provide all assignment writing services for nursing all subjected like pharmacology,human anatomy and physiology etc. at affordable prices.
    It is not copy paste 100% plagiarism free and proper content.
    nursing case study help

    ReplyDelete
  5. Awesome blog. I enjoyed reading your articles. This is truly a great read for me. I have bookmarked it and I am looking forward to reading new articles. Keep up the good work!
    step change debt relief order

    ReplyDelete
  6. Hey friend, it is very well written article, thank you for the valuable and useful information you provide in this post. Keep up the good work! FYI, How to know if your dog is having a heat stroke , IDFC FIRST Classic Credit Card review
    , The Charismatic Charlie Wade by Lord Leaf Download,10 lines on my ambition in life

    ReplyDelete