Microsoft Entra memberOf Retirement: What Admins Must Do
Aug 25, 2026 · 42m
Summary
Host Meryl Dyer is joined by Gregor Ramling, Rene Basel, and Eric Podroff to discuss the deprecation of the 'memberOf' attribute in Entra ID dynamic groups and the shift toward flat group structures. The panel explores workarounds for nested group limitations and highlights new features like sensitivity labels for security groups and agent user inclusion. They also promote the upcoming free Cloud Identity Summit in Frankfurt, where Eric Podroff will deliver the keynote on identity security trends.
Topics discussed
Intro and guest introductions: Gregor, Rene, and Eric
Passkeys update: Default rollout and account recovery challenges
Deprecation of 'memberOf' attribute in dynamic groups
Workarounds for dynamic groups: PowerShell and Sync Rules
The shift from nested groups to flat group structures in Entra
Nested group limitations in GSA, Licensing, and new disable nesting property
Moving away from AD-sourced groups to Entra-authoritative identity
Editing dynamic group rules after deprecation deadline
Beta feature: Sensitivity labels for security groups and guest access
Agent users in dynamic groups and security risks of user-editable attributes
Cloud Identity Summit overview and Eric's keynote announcement
Eric's keynote: Identity as the security perimeter and industry focus
Summit details: Free event, November 3rd in Frankfurt, and community feel
Listen ad-free on Castria