Skip to main content

Articles in this section

See more
Print

Family Groups rule (Microsoft 365 security groups)

  • Updated

Family Groups rule (Microsoft 365 security groups)

Family Groups are a set of Active Directory or Microsoft 365 groups that are created based on the attributes of the Active Directory or Microsoft 365 users that will be placed in those groups.

This article describes the settings of Family Groups for Microsoft 365 security groups. For more details please see the Configuration of Family Groups article.

Rule Settings

Family & Group Settings

Setting name Description
Create groups in Specify Azure Admin Unit, where the new groups will be created or leave it empty.
Group name template The group name template defines the format of the created Microsoft 365 group names.
Existing groups Specify the action to take when a group with the same name already exists in the Azure AD and this group was created not by Family Groups rule.
Cleanup empty groups If set to yes, groups created by this Family that no longer contain any objects with the corresponding group by attribute value will be removed.
Advanced Groups Settings
Groups owner

Specify the default Microsoft 365 connection account or select an explicit Microsoft 365 family as a group owner.

Connection account as owner

Specify if the connection account should be always added as a group owner or only when explicitly selected.

Groups description

Specify family groups description.

Membership Rule

Member Queries
Command Depending on the selected source system which contains objects to be grouped: Hybrid or Microsoft 365, configure the corresponding membership command AD Users Membership Rule Command (Microsoft 365) or Microsoft 365 Users Membership Rule Command.
Group by properties
Property

Specify the user property based on which the groups will be created.

NOTE: You can add up to three properties. Groups will be created for each value combination.

Create group for null value Specify if an empty user property will count as one of the possible values and a group will be created containing all users with an empty group by property attribute.
Exclude these values Specify user attributes' unique values that are ignored when creating family groups. Separate values using semicolons. For example, if you list London, a group will not be created for London if the group by the property is a city.
Value transformation

Use this setting for these scenarios:

  1. To replace one symbol with another when groups will be created. For example, a user has an attribute with a special symbol like Fußball and you need to replace the symbol with something more standard. You should write: Fußball~Fussball This means that every instance of the attribute with a value Fußball will be transformed to Fussball and the group will be created with the transformed name.
  2. Aggregate multiple possible values into a single value group. For example, users may have City attributes values written like NYC, New York City, NY. To put them all in a single group for attribute New York you should write: NYC~New York; New York City~New York; NY~New York Users with the following attributes will be made members of the group: - NYC - New York City - NY - New York

Enforce/Schedule

This section defines the schedule for how often to run the rule.

To get more information about this section, please see the Rule Enforce/Schedule section article.

Output

This section defines the output format of this rule.

To get more information about this section, please see the Rule Output section article.

Change History

Version Notes
10.2.0  The Family Groups have been updated with grouping by multiple attributes.
9.3.0   The Microsoft 365 Family Groups have been introduced in the product.

© Copyright 2013-2026 Cayosoft Inc. All rights reserved.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request
Return to top

Related articles

Comments

0 comments

Please sign in to leave a comment.