<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
System Status
Announcements
Announcements
Search
Search
Select Language
Knowledge Base
Knowledge Articles
Support Videos ↗
Documentation
Product Documentation ↗
Developer Documentation ↗
Product Release Notes ↗
Community
Events & Webinars
Okta Ideas ↗
Resources
Product Hub
Customer Success Hub
Product Release Update
Learning
Okta Learning ↗
Get Support
Open a Case
HomeCommunityForum
0D50Z00008G7V3mSAFOkta Classic EngineOkta Integration NetworkAnswered2025-07-11T09:00:11.000Z2017-02-27T09:24:34.000Z2019-09-17T09:51:46.000Z

j5v7c (j5v7c) asked a question.

Edited by varun.kavoori1.5210444522562532E12 September 5, 2018 at 1:20 AM
Prioritizing Groups for Licenses & Roles
Hello.

 

I created 3 security groups in AD, 2 for license (E3 / E5), one for role (Admin).

In Okta, syncrhonization with O365 seems to use only to the fist group where the user is present.

 

Ex John present in 2 groups (E3 and Admin by ex), Okta seems to apply only value for E3 group, what is the first on Priotizing group.

 

Does it mean we need to create groups for both License & Role ? 

 

Best regards.
  • 4 answers
  • 1.48K views

  • j5v7c (j5v7c)

    There is an Early Access (EA) feature that provides the option for users to get a union of values across multiple group app assignments for array type attributes, instead of honoring group priority. Currently if this feature is not enabled it will take the priority from top down to bottom to add the users via their group membership to whatever role/license type. Contact support to see if the feature can be enabled or as you suggest create groups for multiple options as an alternative.
    Expand Post
    Selected as Best

  • j5v7c (j5v7c)

    There is an Early Access (EA) feature that provides the option for users to get a union of values across multiple group app assignments for array type attributes, instead of honoring group priority. Currently if this feature is not enabled it will take the priority from top down to bottom to add the users via their group membership to whatever role/license type. Contact support to see if the feature can be enabled or as you suggest create groups for multiple options as an alternative.
    Expand Post
    Selected as Best

  • k7rw5 (k7rw5)

    Has this been released yet? I am using O365 User Sync, and have assigned groups to match licensing to those groups. The problem I have is I would like to combine the group access so I do not have to keep moving users inbetween top level groups.
This question is closed.
Loading
Prioritizing Groups for Licenses & Roles