This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 84%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ET%3C/text%3E%3C/svg%3E)
Hello,
We have custom AD Connect rule created where we are synchronizing employeeType from AD On Premises to Azure AD. We had the rule created about 2 years ago. We see employeeType in Azure AD GUI for each employee, no issues there. Now we are trying to create Dynamic Group and pull all the employees with employeeType = Employee, but for some reason it only sees the value of that field for one person. For everyone else that field is coming up as blank, even though that field is populated for everyone in AD and Azure AD. Any ideas why that is?
Thats not a supported attribute to filter on for dynamic groups:
https://zcusa.951200.xyz/en-us/entra/identity/users/groups-dynamic-membership#supported-properties
It’s not available by default that’s why we had to use custom sync rule and to extend the schema. I guess what is confusing the fact that it is available to select as an option from the drop down. If it’s not supported why is it available to select? And how is it working for one employee and not the rest?
You should have not needed to do that. What version of Entra connect are you on? The EmployeeType attribute is synced by default over a year and a half ago:
https://zcusa.951200.xyz/en-us/entra/identity/hybrid/connect/reference-connect-version-history#2210
I can't tell you why it works for one account, but its not supported to use that attribute right now. :(
I dont see that as an option when I create a dynamic group in the portal.
So it looks like this functional change was released right after we created our custom rule. I don't know what version we were running at that point. Currently we are on 2.3.8.0 version. Does this mean our custom rule is obsolete now?
When I create new group, I choose Membership type -> Dynamic User, then I click on Add dynamic query. I do not see employeeType as an option to select in Property drop down. However, I click on Get custom extension properties, enter application ID that was created when we extended the schema for our custom rule, then I am able to select extension_appID_employeeType.
What you are saying this should not work because employeeType now syncs by default?