Everyone, All Users, and Authenticated Users in Azure Active Directory
I am using an Azure Analysis Services instance and need to grant access to all authenticated users in the domain. The problem is that I don't see any groups within our Azure AD tenant that resemble "everyone" or "authenticated users". It looks like this is something that can be accomplished with dynamic groups, but I wanted to check and see if maybe I'm overlooking a group that is already available in the tenant by default containing all authenticated users.
Thanks,
Eric Theil
Answer
From https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership:
Create an "All users" rule
You can create a group containing all users within a tenant using a membership rule. When users are added or removed from the tenant in the future, the group's membership is adjusted automatically.
The “All users” rule is constructed using single expression using the -ne operator and the null value. This rule adds B2B guest users as well as member users to the group.
user.objectid -ne null