Microsoft Axes MemberOf Rule Operator in Entra ID Ahead of Retirement Deadline

Microsoft has announced that it will retire its MemberOf rule operator in Entra ID later this year. The feature, which was introduced as a preview feature, allows administrators to build dynamic groups, administrative units, or entitlement policies based on a user's membership in another group.

The company explained that the MemberOf operator can affect dynamic membership processing across a tenant even if there is only one rule operator in use. As a result, it is not recommended for production use and will be retired.

Organizations have until November 3, 2026 to update or replace affected configurations before the feature is fully deprecated on November 30, 2026.

The retirement of the MemberOf operator could impact several Microsoft Entra ID features, including dynamic membership groups, administrative units, and Entitlement Management auto-assignment policies. If not addressed, this could lead to outdated access management and governance challenges across the organization.