(9) Creating Dynamic Groups with Visio 365 User Licensing

Dynamic Groups in Azure AD are truly an amazing feature. It lets you manage a large group of users without the need to manually add every one of them in a specific group.

As the documentation says you can use the assignedPlans multi-valued property to create a group based on licenses. The AssignedPlans property has three values:

• capabilityStatus

• service

• servicePlanId

To get started with with your creating your own Dynamic Group with Visio 365 User Licensing:

1. Run PowerShell as Administrator

2. Next in the PowerShell field, enter in: connect-azuread then press Enter, enter your credentials followed by approving MFA.

3. Enter in: Get-AzureAdSubscribedSKU, press Enter and this will provide you the list of Object IDs

4. Optional, entering in: Get-AzureADSubscribedsku - objectid "EnterInID" you can see the consumed units.

Note: Remove the "EnterinID" and enter in what is shown within your PowerShell screen.

5. To get the ServicePlanID, enter in: Get-AzureADSubscribedsku -objectid "EnterinID" | select -expand serviceplans

Note: Remove the "EnterinID" and enter in what is shown within your PowerShell screen.

6. Obtain the required Service Plan ID for your Visio plan.

7. Navigate to https://endpoint.microsoft.com/#blade/Microsoft_AAD_IAM/AddGroupBlade. Create a group with the following:

Group Type: Security

Group Name: To define that group

Group Description: To define the description

Membership type: Dynamic User

Select Add Dynamic query with the following:

user.assignedPlans -any (assignedPlan.servicePlanId -eq "Enter in Service Plan ID" -and assignedPlan.capabilityStatus -eq "Enabled")

8. Select OK, then select Save then select Create.

9. It will then create the Azure AD Dynamic Group based on Visio licenses.