Microsoft Entra ID Governance
ArchitectureRoad To The Cloud Implement
In brief
The guidance now links to a different Microsoft Entra Cloud Sync article for provisioning groups to Active Directory Domain Services.
What Entra admins need to know
Administrators using this guidance will be directed to the updated configuration instructions; no action is required.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
- Attribute-based application provisioning with scoping filters or What is Microsoft Entra entitlement management (for application access)
Groups
A cloud-first approach for groups involves creating new groups in the cloud. If you need them on-premises, provision groups to Active Directory Domain Services (AD DS) by using Microsoft Entra Cloud Syncprovision groups to Active Directory Domain Services (AD DS) by using Microsoft Entra Cloud Sync. Convert the Group Source of Authority (SOA) of existing on-premises groups to manage them from Microsoft Entra.
These links provide more information about groups:
@@ -45,7 +45,7 @@ These links provide more information on this topic but aren't specific to changi - [Attribute-based application provisioning with scoping filters](/entra/identity/app-provisioning/define-conditional-rules-for-provisioning-user-accounts) or [What is Microsoft Entra entitlement management](/entra/id-governance/entitlement-management-overview) (for application access) ## Groups-A cloud-first approach for groups involves creating new groups in the cloud. If you need them on-premises, [provision groups to Active Directory Domain Services (AD DS) by using Microsoft Entra Cloud Sync](/entra/identity/hybrid/cloud-sync/tutorial-group-provisioning). Convert the Group Source of Authority (SOA) of existing on-premises groups to manage them from Microsoft Entra. +A cloud-first approach for groups involves creating new groups in the cloud. If you need them on-premises, [provision groups to Active Directory Domain Services (AD DS) by using Microsoft Entra Cloud Sync](/entra/identity/hybrid/cloud-sync/how-to-configure-entra-to-active-directory). Convert the Group Source of Authority (SOA) of existing on-premises groups to manage them from Microsoft Entra. These links provide more information about groups: