Account Discovery
In brief
The account discovery preview documentation now explains how to view discovered groups’ member counts and membership lists.
What Entra admins need to know
Administrators can review group memberships directly from discovery results; no required action is stated.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
The comparison below shows only the changed extract. Use the full-page view for complete context.
This classification gives you visibility into who has access to your applications and helps you identify identities that should be governed, reassigned, or removed.
Prerequisites
Assigned identities match a user or group in Microsoft Entra ID that's already assigned to the application. These identities are fully managed by the provisioning service. No action is needed unless you want to review or update their attribute mappings.
Review group memberships
You can view the number of members in each discovered group and review its membership.
- Find the discovered group in the discovery results.
- Review the member count for the group.
- Select the member count to view the list of members in the group.
Assign correlated users to your enterprise application and/or access packages
After discovering users in your application, you can assign those users to the enterprise application or an access package. Download the Assign-CorrelatedUsers.ps1 file and run it in PowerShell 7.x to assign users.
@@ -25,7 +25,7 @@ Account discovery retrieves users and groups from a target application and class This classification gives you visibility into who has access to your applications and helps you identify identities that should be governed, reassigned, or removed. > [!IMPORTANT]-> Group discovery is currently in preview.+> Group discovery, including group memberships, is currently in preview. > This information relates to a prerelease product that might be substantially modified before release. Microsoft makes no warranties, expressed or implied, with respect to the information provided here. ## Prerequisites@@ -91,6 +91,14 @@ Unassigned identities match a user or group in Microsoft Entra ID based on the m Assigned identities match a user or group in Microsoft Entra ID that's already assigned to the application. These identities are fully managed by the provisioning service. No action is needed unless you want to review or update their attribute mappings. +### Review group memberships++You can view the number of members in each discovered group and review its membership.++1. Find the discovered group in the discovery results.+1. Review the member count for the group.+1. Select the member count to view the list of members in the group.+ ## Assign correlated users to your enterprise application and/or access packages After [discovering](~/identity/app-provisioning/how-to-account-discovery.md) users in your application, you can assign those users to the enterprise application or an access package. [Download](https://aka.ms/AssignCorrelatedUsersPowerShell) the `Assign-CorrelatedUsers.ps1` file and run it in PowerShell 7.x to assign users. 