Skip to main content

1.Groups Job Group

The jobs in the 1.Groups group identify group conditions and areas of administrative concern within Microsoft Entra ID, such as toxic group conditions or synchronization issues.

1.Groups Job Group in the Jobs Tree

The jobs in the 1.Groups Job Group are:

  • AAD_CircularNesting Job – Identifies circularly-nested groups within Microsoft Entra ID. Circular nesting can complicate determining effective access to resources
  • AAD_DuplicateGroups Job – Identifies duplicate groups within Microsoft Entra ID. Duplicate groups contain the same group membership as one another and are suitable candidates for cleanup
  • AAD_EmptyGroups Job – Identifies empty groups within Microsoft Entra ID which are suitable candidates for consolidation or cleanup
  • AAD_GroupDirSync Job – Summarizes on-premises Active Directory syncing in the audited Microsoft Entra ID environment
  • AAD_LargestGroups Job – Identifies groups with large effective member counts. These types of groups can make it difficult to determine who has access to resources through them, or how much access they grant
  • AAD_NestedGroups Job – Identifies nested groups within Microsoft Entra ID and provides details such as the levels of nesting. While Microsoft Entra ID lets you nest certain types of groups within other groups, Microsoft recommends nesting doesn't go beyond two levels to avoid difficulties in understanding effective membership and access.
  • AAD_ProbableOwners Job – Determines potential owners for Microsoft Entra ID Groups, which you can use to perform automated membership reviews and enable self-service group management and membership requests
  • AAD_StaleGroups Job – Identifies Microsoft Entra ID groups that contain potentially stale users. Users are considered stale if they have never logged onto the domain, have not logged onto the domain in the past 30 days, or are disabled. These group memberships should be reviewed and possibly removed.