Prioritizing Groups for Licenses & Roles Skip to main content
https://support.okta.com/help/answers?id=9062a000000bmt1qai&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
adm_OKTAO365 @crh.comadm_OKTAO365 @crh.com 

Prioritizing Groups for Licenses & Roles

Hello.

I created 3 security groups in AD, 2 for license (E3 / E5), one for role (Admin).
In Okta, syncrhonization with O365 seems to use only to the fist group where the user is present.

Ex John present in 2 groups (E3 and Admin by ex), Okta seems to apply only value for E3 group, what is the first on Priotizing group.

Does it mean we need to create groups for both License & Role ? 

Best regards.
Best Answer chosen by adm_OKTAO365 @crh.com
Kevin TurnerKevin Turner (Okta, Inc.)
There is an Early Access (EA) feature that provides the option for users to get a union of values across multiple group app assignments for array type attributes, instead of honoring group priority. Currently if this feature is not enabled it will take the priority from top down to bottom to add the users via their group membership to whatever role/license type. Contact support to see if the feature can be enabled or as you suggest create groups for multiple options as an alternative.

All Answers

Kevin TurnerKevin Turner (Okta, Inc.)
There is an Early Access (EA) feature that provides the option for users to get a union of values across multiple group app assignments for array type attributes, instead of honoring group priority. Currently if this feature is not enabled it will take the priority from top down to bottom to add the users via their group membership to whatever role/license type. Contact support to see if the feature can be enabled or as you suggest create groups for multiple options as an alternative.
This was selected as the best answer
adm_OKTAO365 @crh.comadm_OKTAO365 @crh.com
Thank Kevin. 
Robert JokicRobert Jokic
Has this been released yet? I am using O365 User Sync, and have assigned groups to match licensing to those groups. The problem I have is I would like to combine the group access so I do not have to keep moving users inbetween top level groups.