365 Cloud only group convert to AAD Synced

[Sheridan]

Is it possible to take a 365 cloud only group (for email distribution) and make it AAD synced? Ideally to match all of our other Salamander controlled AD groups which sync to Azure

 

We have a couple of groups that were accidentally created cloud only in the past, and I'd prefer them to be in AD but keep the same group name, I'm sure its not as simple as creating the relevant AD group and hoping AD Sync will replicate to the existing cloud only group!

[psydii]

Every so often I wonder this, then I remember I made them to apply some sort of setting/policy/access control to a cloud-only user. Why did I have a cloud-only user... well that's because I expressly did not want them to be able to log on to a Domain Joined computer.

All fun and games until I need to allow the cloud only user to send to a hybrid (i.e. AD managed) distribution list that has restrictions based on AD group membership.

 

Pretty much the only time I regret hybrid. The moment passes and on we go.

 

Sometimes I wonder if I were to security enabled the group-write-back group(s) I might be able to add the "cloud only" group to the equivalent on-prem group - but then I notice the cloud-only users isn't currently represented by an object in AD. Maybe I'll look into this again, maybe I wont.

[Sheridan]

I can see why cloud only accounts were created in some cases, but this is a distribution group and the other 90% of them are all AD based. I'd rather these sort of things were AD so a single source of truth!

[3s-gtech]

I don't think creating a matching AD group will work - its object ID will differ and it'll show as a different type.

 

Can you create the AD one, populate it, wait for it to sync, then retire the cloud one? You'll have to wait for it to free up the address.

[Sheridan]

Yeah I think this might be a summer job, as there's going to be a handful of these to convert!