Entra ID stops processing MemberOf dynamic rules on 3 November

Entra ID stops processing MemberOf dynamic rules on 3 November

5 October 2026: Microsoft has sent a final reminder that the MemberOf rule operator in Entra ID is being retired on 3 November 2026. From that day, dynamic groups, dynamic administrative units and entitlement management auto-assignment policies that use MemberOf stop processing changes and stay frozen in their last state.

Not yet independently verified. Single vendor source: Microsoft's Message Center notice, read through a public archive copy. We will add independent confirmation when we find it. We will update this when it can be confirmed, and remove this note.

Microsoft first announced the end of the operator's public preview in a notice dated 5 August. It says that during the preview it saw MemberOf rules affect dynamic membership processing across a whole tenant, even when only one such rule existed, and that the operator is not recommended for production use.

The risk is stale access rather than an outage. Microsoft lists what can go wrong once the rules freeze: new users may not receive the access or licences they need, former users may keep access or licences that should have been removed, and Conditional Access policies that depend on dynamic group membership may act on out-of-date lists. Teams, SharePoint and group-based licensing, which read the same membership, are affected in the same way. Existing membership data is not deleted.

Microsoft's checklist differs by object type. For dynamic groups, export the groups from the Entra admin center and find the rules that contain MemberOf. For dynamic administrative units and auto-assignment policies, use Microsoft Graph PowerShell to find them. In each case the replacement is a supported rule operator, or assigned membership where no dynamic rule can express the same logic. Microsoft also suggests removing groups and units that are no longer needed, and checking membership and administrative scope after every change.

The notice gives the action deadline as 3 November 2026 for the worldwide cloud.

Company profile on TrustList: Microsoft

Sources

• Microsoft 365 Message Center MC1488834: final reminder to replace MemberOf rule operator configurations (archive copy), 5 October 2026
• Microsoft 365 Message Center MC1448379: Replace MemberOf rules by November 3, 2026 (archive copy of the August notice), 5 August 2026