Maintain control of your Microsoft 365 data
Post Reply
rtheseeker
Enthusiast
Posts: 78
Liked: 4 times
Joined: Sep 26, 2022 9:13 pm
Full Name: Rajeev Mehta
Contact:

Dynamic Group Support

Post by rtheseeker »

Just want to check "I thought about using dynamic groups, but these are not supported with modern app-only authentication"; we are using dynamic groups with Mordern Authentication; we had used a script that puts users into seprate groups basis the object ID; and then there are multiple jobs which protect these multiple groups to independent repository and the backups are working.
Mildur
Product Manager
Posts: 10107
Liked: 2696 times
Joined: May 13, 2017 4:51 pm
Full Name: Fabian K.
Location: Switzerland
Contact:

Re: Dynamic Group Support

Post by Mildur »

Hello Rajeev

- Dynamic Distribution groups are not supported --> https://learn.microsoft.com/en-us/excha ... te-new-eac

- Dynamic Azure AD security groups are supported --> https://learn.microsoft.com/en-us/azure ... reate-rule

Best,
Fabian
Product Management Analyst @ Veeam Software
dali@iae.nl
Enthusiast
Posts: 83
Liked: 21 times
Joined: Jan 17, 2022 10:31 am
Full Name: Da Li
Contact:

Re: Dynamic Group Support

Post by dali@iae.nl »

We use indeed Azure Dynamic Groups succesful. Only the choice of selection seems a bit short.
So we decided to split the jobs on First Names.
Than the Dynamic Membership Rule Syntax looks like:
(user.displayName -startsWith "v") or (user.displayName -startsWith "w") or (user.displayName -startsWith "x") or (user.displayName -startsWith "y") or (user.displayName -startsWith "z") and (user.userType -eq "Member")

Do others use another method or selection?
tgieskes
Lurker
Posts: 1
Liked: never
Joined: Mar 18, 2024 1:26 pm
Full Name: T Gieskes
Contact:

Re: Dynamic Group Support

Post by tgieskes »

Hi,

i was checking out these groups to seperate users based on license.
but now i am noticing that when a user is no longer assoicaited with the dynamic security group i am not able to find the data in previous restore points.

is it so that when we are backing up a dynamic security group if the user leaves the group the Data is no longer available/Lost?

or did i set the group up wrong?

Thos Gieskes.
Polina
Veeam Software
Posts: 3305
Liked: 796 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Dynamic Group Support

Post by Polina »

Hi Thos,

If the user is no longer in the scope of a backup job, you can view their historical restore points by exploring an entire organization.
dejan.ilic
Enthusiast
Posts: 41
Liked: 3 times
Joined: Apr 11, 2019 11:37 am
Full Name: Dejan Ilic
Contact:

Re: Dynamic Group Support

Post by dejan.ilic »

According to documentation (as I understand it) Dynamic Distribution Groups are supported groups in M365.
reference : https://helpcenter.veeam.com/docs/vbo36 ... =80#groups

But testing shows that I cannot find and select it in the GUI in v8.1
I would like to create a dynamic group of Resource Mailboxes and these are not users that can be added to a Dynamic Azure AD security group, but are addable to a Dynamic Distribution Group.

What are my options to create a job that would select all current and future Resource Mailboxes?

Mildur wrote: Jul 18, 2023 7:02 am Hello Rajeev

- Dynamic Distribution groups are not supported --> https://learn.microsoft.com/en-us/excha ... te-new-eac

- Dynamic Azure AD security groups are supported --> https://learn.microsoft.com/en-us/azure ... reate-rule

Best,
Fabian
Polina
Veeam Software
Posts: 3305
Liked: 796 times
Joined: Oct 21, 2011 11:22 am
Full Name: Polina Vasileva
Contact:

Re: Dynamic Group Support

Post by Polina »

Hi Dejan,

Dynamic Distribution Groups are supported for on-premises and hybrid organizations. They are (or would be better to say were?) also supported for M365 tenants that are using basic authentication. With modern app-only auth Dynamic Distribution Groups are not supported.
dejan.ilic
Enthusiast
Posts: 41
Liked: 3 times
Joined: Apr 11, 2019 11:37 am
Full Name: Dejan Ilic
Contact:

Re: Dynamic Group Support

Post by dejan.ilic »

That is unfortunate as we use Modern Authentication so we have to look for alternatives.
It should probably be documented more clearly on the web page.
sandsturm
Veteran
Posts: 293
Liked: 25 times
Joined: Mar 23, 2015 8:30 am
Contact:

Re: Dynamic Group Support

Post by sandsturm »

I use Dynamic Azure AD groups as well to be able to catch all mailboxes, but unfortunately i still have too many warnings in the backupjob stating: "...Exchange account was not found...", my query for the dynamic groups looks like:
(user.objectId -match "^[0-3].*") and (user.userType -match "Member") and (user.accountEnabled -eq true) and (user.assignedPlans -any (assignedPlan.servicePlanId -ne "" -and assignedPlan.capabilityStatus -eq "Enabled"))
we have four groups in total, where the first part in the query is different:
job1: (user.objectId -match "^[0-3].*")...
job2: (user.objectId -match “^[4-7].*”) ...
job3: (user.objectId -match “^[8-9a-b].*”)...
job4: (user.objectId -match “^[c-f].*”)...
the rest of the query is the same for all. The idea with the objectID is to not miss any active mailbox, but the downside is, that I see too much mailboxes and therefore a lot of warnings in each backupjob.
Does anyone have another/better idea to catch all mailboxes in a dynamic way or maybe an optimization to my above query to not get accounts with the "...Exchange account was not found..." warning?

thx,
sandsturm
Post Reply

Who is online

Users browsing this forum: No registered users and 26 guests