Synchronize groups with Microsoft Entra ID groups
Application task

You can import Microsoft Entra ID groups to D365 FO. Synchronize Microsoft Entra ID group members, to load the imported groups to Security and compliance studio. If a member of an imported Microsoft Entra ID group exists as a user in D365 FO, the user is linked to the group in Security and compliance studio. So, members of Microsoft Entra ID groups who do not exist as a user in D365 FO, are not shown in the Security and compliance studio.

After you imported a Microsoft Entra ID group, changes can be made to its members on the Azure Portal. Members can be added to or removed from the Microsoft Entra ID group. Usually, it is required that these changes are also applied to the imported groups in D365 FO. 

To keep the setup in Security and compliance studio up to date, you are advised to synchronize the Microsoft Entra ID group members daily.

On synchronize of Microsoft Entra ID group members:

• Groups that are imported from Microsoft Entra ID are loaded to the Security and compliance studio.
• Members who are added to a Microsoft Entra ID group, are also added to the related group in the Security and compliance studio. A Microsoft Entra ID group member is only added to an imported group if it exists as a user in D365 FO.
• Members who are removed from a Microsoft Entra ID group, are also removed from the related group in the Security and compliance studio. A Microsoft Entra ID group member is only removed from an imported group if it exists as a user in D365 FO.

If a previously imported Microsoft Entra ID group is deleted in Microsoft Entra ID, the related group is disabled in D365 FO on synchronization of imported groups. On synchronization of Microsoft Entra ID group members, the linked users are disabled for this group in the Security and compliance studio.