
Microsoft Is Retiring the MemberOf Rule for Entra ID Dynamic Groups — Act Before November 2026
The MemberOf rule operator for dynamic groups in Entra ID is being retired. After November 3, 2026, any dynamic group, administrative unit, or entitlement management policy that still uses MemberOf just stops updating. Membership freezes in its last known state, no migration, no fallback.
This affects group-based licensing, Conditional Access targeting, Teams and SharePoint access, and access package assignments. For entitlement management policies, processing actually stops a week earlier on October 27.
You can find all affected groups with a single PowerShell command using a server-side Graph filter. The article also covers your replacement options and includes a practical example for group-based licensing without MemberOf.
More info: https://lazyadmin.nl/office-365/microsoft-entra-id-is-retiring-the-memberof-rule-for-dynamic-groups/