-
- Enthusiast
- Posts: 78
- Liked: 4 times
- Joined: Sep 26, 2022 9:13 pm
- Full Name: Rajeev Mehta
- Contact:
Dynamic Group Support
Just want to check "I thought about using dynamic groups, but these are not supported with modern app-only authentication"; we are using dynamic groups with Mordern Authentication; we had used a script that puts users into seprate groups basis the object ID; and then there are multiple jobs which protect these multiple groups to independent repository and the backups are working.
-
- Product Manager
- Posts: 10107
- Liked: 2696 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: Dynamic Group Support
Hello Rajeev
- Dynamic Distribution groups are not supported --> https://learn.microsoft.com/en-us/excha ... te-new-eac
- Dynamic Azure AD security groups are supported --> https://learn.microsoft.com/en-us/azure ... reate-rule
Best,
Fabian
- Dynamic Distribution groups are not supported --> https://learn.microsoft.com/en-us/excha ... te-new-eac
- Dynamic Azure AD security groups are supported --> https://learn.microsoft.com/en-us/azure ... reate-rule
Best,
Fabian
Product Management Analyst @ Veeam Software
-
- Enthusiast
- Posts: 83
- Liked: 21 times
- Joined: Jan 17, 2022 10:31 am
- Full Name: Da Li
- Contact:
Re: Dynamic Group Support
We use indeed Azure Dynamic Groups succesful. Only the choice of selection seems a bit short.
So we decided to split the jobs on First Names.
Than the Dynamic Membership Rule Syntax looks like:
(user.displayName -startsWith "v") or (user.displayName -startsWith "w") or (user.displayName -startsWith "x") or (user.displayName -startsWith "y") or (user.displayName -startsWith "z") and (user.userType -eq "Member")
Do others use another method or selection?
So we decided to split the jobs on First Names.
Than the Dynamic Membership Rule Syntax looks like:
(user.displayName -startsWith "v") or (user.displayName -startsWith "w") or (user.displayName -startsWith "x") or (user.displayName -startsWith "y") or (user.displayName -startsWith "z") and (user.userType -eq "Member")
Do others use another method or selection?
-
- Lurker
- Posts: 1
- Liked: never
- Joined: Mar 18, 2024 1:26 pm
- Full Name: T Gieskes
- Contact:
Re: Dynamic Group Support
Hi,
i was checking out these groups to seperate users based on license.
but now i am noticing that when a user is no longer assoicaited with the dynamic security group i am not able to find the data in previous restore points.
is it so that when we are backing up a dynamic security group if the user leaves the group the Data is no longer available/Lost?
or did i set the group up wrong?
Thos Gieskes.
i was checking out these groups to seperate users based on license.
but now i am noticing that when a user is no longer assoicaited with the dynamic security group i am not able to find the data in previous restore points.
is it so that when we are backing up a dynamic security group if the user leaves the group the Data is no longer available/Lost?
or did i set the group up wrong?
Thos Gieskes.
-
- Veeam Software
- Posts: 3305
- Liked: 796 times
- Joined: Oct 21, 2011 11:22 am
- Full Name: Polina Vasileva
- Contact:
Re: Dynamic Group Support
Hi Thos,
If the user is no longer in the scope of a backup job, you can view their historical restore points by exploring an entire organization.
If the user is no longer in the scope of a backup job, you can view their historical restore points by exploring an entire organization.
-
- Enthusiast
- Posts: 41
- Liked: 3 times
- Joined: Apr 11, 2019 11:37 am
- Full Name: Dejan Ilic
- Contact:
Re: Dynamic Group Support
According to documentation (as I understand it) Dynamic Distribution Groups are supported groups in M365.
reference : https://helpcenter.veeam.com/docs/vbo36 ... =80#groups
But testing shows that I cannot find and select it in the GUI in v8.1
I would like to create a dynamic group of Resource Mailboxes and these are not users that can be added to a Dynamic Azure AD security group, but are addable to a Dynamic Distribution Group.
What are my options to create a job that would select all current and future Resource Mailboxes?
reference : https://helpcenter.veeam.com/docs/vbo36 ... =80#groups
But testing shows that I cannot find and select it in the GUI in v8.1
I would like to create a dynamic group of Resource Mailboxes and these are not users that can be added to a Dynamic Azure AD security group, but are addable to a Dynamic Distribution Group.
What are my options to create a job that would select all current and future Resource Mailboxes?
Mildur wrote: ↑Jul 18, 2023 7:02 am Hello Rajeev
- Dynamic Distribution groups are not supported --> https://learn.microsoft.com/en-us/excha ... te-new-eac
- Dynamic Azure AD security groups are supported --> https://learn.microsoft.com/en-us/azure ... reate-rule
Best,
Fabian
-
- Veeam Software
- Posts: 3305
- Liked: 796 times
- Joined: Oct 21, 2011 11:22 am
- Full Name: Polina Vasileva
- Contact:
Re: Dynamic Group Support
Hi Dejan,
Dynamic Distribution Groups are supported for on-premises and hybrid organizations. They are (or would be better to say were?) also supported for M365 tenants that are using basic authentication. With modern app-only auth Dynamic Distribution Groups are not supported.
Dynamic Distribution Groups are supported for on-premises and hybrid organizations. They are (or would be better to say were?) also supported for M365 tenants that are using basic authentication. With modern app-only auth Dynamic Distribution Groups are not supported.
-
- Enthusiast
- Posts: 41
- Liked: 3 times
- Joined: Apr 11, 2019 11:37 am
- Full Name: Dejan Ilic
- Contact:
Re: Dynamic Group Support
That is unfortunate as we use Modern Authentication so we have to look for alternatives.
It should probably be documented more clearly on the web page.
It should probably be documented more clearly on the web page.
-
- Veteran
- Posts: 293
- Liked: 25 times
- Joined: Mar 23, 2015 8:30 am
- Contact:
Re: Dynamic Group Support
I use Dynamic Azure AD groups as well to be able to catch all mailboxes, but unfortunately i still have too many warnings in the backupjob stating: "...Exchange account was not found...", my query for the dynamic groups looks like:
Does anyone have another/better idea to catch all mailboxes in a dynamic way or maybe an optimization to my above query to not get accounts with the "...Exchange account was not found..." warning?
thx,
sandsturm
we have four groups in total, where the first part in the query is different:(user.objectId -match "^[0-3].*") and (user.userType -match "Member") and (user.accountEnabled -eq true) and (user.assignedPlans -any (assignedPlan.servicePlanId -ne "" -and assignedPlan.capabilityStatus -eq "Enabled"))
the rest of the query is the same for all. The idea with the objectID is to not miss any active mailbox, but the downside is, that I see too much mailboxes and therefore a lot of warnings in each backupjob.job1: (user.objectId -match "^[0-3].*")...
job2: (user.objectId -match “^[4-7].*”) ...
job3: (user.objectId -match “^[8-9a-b].*”)...
job4: (user.objectId -match “^[c-f].*”)...
Does anyone have another/better idea to catch all mailboxes in a dynamic way or maybe an optimization to my above query to not get accounts with the "...Exchange account was not found..." warning?
thx,
sandsturm
Who is online
Users browsing this forum: No registered users and 26 guests