Entra
Entra memberOf rules stop updating
November 3, 2026 · In 18 days
Microsoft · high confidence · Last verified October 15, 2026
What breaks
Dynamic groups, dynamic administrative units, and entitlement-management auto-assignment policies that use the memberOf operator stop updating and stay in their last known state. Access, licensing, and Conditional Access that depend on those memberships can go stale.
Who is affected
- Tenants with dynamic membership groups whose rule uses memberOf
- Dynamic administrative units that use memberOf
- Entitlement management automatic assignment policies that use memberOf
- Conditional Access, group-based licensing, Teams, and SharePoint access that target those groups
Source notes
Microsoft Learn says the public preview of the memberOf operator is ending. After November 3, 2026, configurations that still use it stop updating. Microsoft’s stated reason is scale: during preview, memberOf could slow dynamic membership processing for every group in the tenant.
The page tells admins to export dynamic groups and find rules that contain memberOf, replace the operator or convert the group to assigned membership, and validate membership afterward. The same steps apply to dynamic administrative units and access-package auto-assignment policies.
Learn also says memberOf was not intended for production, is limited to the public cloud, and is not supported in the rule-builder UI. No Message Center ID is printed on this Learn page, so this card does not cite one.
Sources
Microsoft Learn: dynamic membership groups with the memberOf operator