web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

Community site session details

Community site session details

Session Id :
Power Platform Community / Forums / Power Apps / AAD Security Group Tea...
Power Apps
Unanswered

AAD Security Group Teams sync

(0) ShareShare
ReportReport
Posted on by 6

Dear experts.

Has anyone yet seen official information about when AAD Security Group Teams in Dynamics get synced with the linked AAD groups?
What are the pre-requisites for users included in the AAD group to be synced to the Team (license assigned etc)?
What is the point in time (schedule) and trigger for the sync?

 

Thanks for any hints!

I have the same question (0)
  • Devikumari Krishna Profile Picture
    988 Super User 2024 Season 1 on at

    Hi @AlexK_CH ,

    Are you asking about AAD group - security/office 365. ? Users added to this group should have valid license for the accessing application (powerapps/Dynamics 365..) respectively.

    Once you add users to this group the sync is nearly real time.

    please refer the link - Manage group teams - Power Platform | Microsoft Docs

     

    -------------------------------------------------------------------------
    If I have answered your question, please mark your post as Solved.
    If you like my response, please give it a Thumbs Up.

    My Blog: Dynamics 365 Key Topics – https://d365topicsbydk.com/


    My YouTube Channel : https://www.youtube.com/channel/UCxSIryP2ah2VpEFr-Z72t1A

     

    Regards
    Devi

  • AlexK_CH Profile Picture
    6 on at

    Dear Devi

    Thanks for the quick answer!!
    Indeed, what i was looking for. From a user point of view, there remains one question:
    When using per app licenses, a user might not have a license assigned until accessing the system. Without that, the user will not be synced to the AAD Teams, which have Security Roles assigned. Therefore, a user e.g. cannot be set as an owner of an element where permissions are required. "Planning" upfront the user accessing a system is therefore not possible. How do you tackle this circumstance? With additional local Teams where you manually add the users until they access the systems and then are synced to the proper AAD Teams?

    And last one: once they access the system, will they more or less "real time" appear in the applicable AAD Teams?

    Is that also the case when they have a license already or is it really about "accessing" the system?

     

    Thanks a ton and KR

  • Verified answer
    Devikumari Krishna Profile Picture
    988 Super User 2024 Season 1 on at

    Hi @AlexK_CH ,

     

    Please find my responses below,

     

    When using per app licenses, a user might not have a license assigned until accessing the system. Without that, the user will not be synced to the AAD Teams, which have Security Roles assigned. Therefore, a user e.g. cannot be set as an owner of an element where permissions are required. "Planning" upfront the user accessing a system is therefore not possible. How do you tackle this circumstance? With additional local Teams where you manually add the users until they access the systems and then are synced to the proper AAD Teams? - In this case , if its canvas App you can add your User as Guest user in your Azure AD. Please see below link for more details -

    https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/share-app-guests

     

    If you are expecting the user to be in Data verse then you need to have User In Office 365 and Assign Proper License to get it done. Gmail account cannot Access Direct Model-Driven App

     

    And last one: once they access the system, will they more or less "real time" appear in the applicable AAD Teams? Is that also the case when they have a license already or is it really about "accessing" the system?

     - Yes once they access the system the sync is real time.

     

    -------------------------------------------------------------------------
    If I have answered your question, please mark your post as Solved.
    If you like my response, please give it a Thumbs Up.

     

    My Blog: Dynamics 365 Key Topics – https://d365topicsbydk.com/


    My YouTube Channel : https://www.youtube.com/channel/UCxSIryP2ah2VpEFr-Z72t1A

     

    Regards
    Devi

  • AlexK_CH Profile Picture
    6 on at

    Thanks a ton @DeviKrishna 
    Unfortunately, it is a model driven app so i guess the manual inclusion of the user in applicable teams must be done to enable upfront planning (setting as owner with permissions).
    For the AAD sc good to hear, will experience it soon once the solution goes live.
    KR, Alex

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Forum hierarchy changes are complete!

In our never-ending quest to improve we are simplifying the forum hierarchy…

Ajay Kumar Gannamaneni – Community Spotlight

We are honored to recognize Ajay Kumar Gannamaneni as our Community Spotlight for December…

Leaderboard > Power Apps

#1
WarrenBelz Profile Picture

WarrenBelz 717 Most Valuable Professional

#2
Michael E. Gernaey Profile Picture

Michael E. Gernaey 329 Super User 2025 Season 2

#3
Power Platform 1919 Profile Picture

Power Platform 1919 268

Last 30 days Overall leaderboard