Entra.Chat Entra.Chat

Microsoft Entra memberOf Retirement: What Admins Must Do

Aug 25, 2026 · 42m

Summary

Host Meryl Dyer is joined by Gregor Ramling, Rene Basel, and Eric Podroff to discuss the deprecation of the 'memberOf' attribute in Entra ID dynamic groups and the shift toward flat group structures. The panel explores workarounds for nested group limitations and highlights new features like sensitivity labels for security groups and agent user inclusion. They also promote the upcoming free Cloud Identity Summit in Frankfurt, where Eric Podroff will deliver the keynote on identity security trends.

Topics discussed

Intro and guest introductions: Gregor, Rene, and Eric Passkeys update: Default rollout and account recovery challenges Deprecation of 'memberOf' attribute in dynamic groups Workarounds for dynamic groups: PowerShell and Sync Rules The shift from nested groups to flat group structures in Entra Nested group limitations in GSA, Licensing, and new disable nesting property Moving away from AD-sourced groups to Entra-authoritative identity Editing dynamic group rules after deprecation deadline Beta feature: Sensitivity labels for security groups and guest access Agent users in dynamic groups and security risks of user-editable attributes Cloud Identity Summit overview and Eric's keynote announcement Eric's keynote: Identity as the security perimeter and industry focus Summit details: Free event, November 3rd in Frankfurt, and community feel
Listen ad-free on Castria