An organization wants group membership updated automatically based on user attributes like department or job title. Which Entra ID feature provides this — and which license tier does it require?
A.Assigned groups — Free tier
Assigned groups are manual membership — the opposite of attribute-driven.
B.Dynamic groups — Entra ID P1
Dynamic groups = automatic rule-based membership, P1+. Correct.
C.Administrative units — Free tier
Administrative units restrict admin scope — they don't automate membership.
D.Security groups — any tier
Security group is a type (vs M365 group), not a membership mechanism.
Why this answer
Dynamic group membership uses attribute-based rules to add/remove members automatically — a Premium feature requiring Entra ID P1 (each dynamic-member user needs a P1 license). Assigned groups are manual; administrative units scope admin delegation.
Correct answer: B · Last reviewed 2026-02-14
Official AWS references
Practice this interactively
Answer without seeing the solution first in the Identity & Governance practice session.
Practice Identity & Governance