{"id":18855,"date":"2024-02-19T14:43:21","date_gmt":"2024-02-19T13:43:21","guid":{"rendered":"https:\/\/staging.dynamicgroup.net\/?p=18855"},"modified":"2025-09-01T16:48:55","modified_gmt":"2025-09-01T14:48:55","slug":"synchronize-nested-ad-groups-in-entra-id","status":"publish","type":"post","link":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/","title":{"rendered":"Synchronize nested AD groups in Entra ID"},"content":{"rendered":"<p>It is now possible to synchronize nested AD groups in the cloud. There are a few points you should be aware of, however. In many environments, local AD structures and Entra ID are used at the same time. If user accounts and groups are synchronized, things quickly become complicated.<\/p>\n<p>It creates a lot of administrative work, but also security risks. For example, users are still members of groups for which they do not require access. However, the right planning and additional solutions can avoid such problems and simplify the maintenance of groups.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\"><p class=\"ez-toc-title\" style=\"cursor:inherit\">Index<\/p>\n<\/div><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#What-are-nested-groups-and-why-do-you-need-them\" >What are nested groups, and why do you need them?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#Special-features-of-nested-groups-in-AD\" >Special features of nested groups in AD<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#Special-features-of-nested-groups-in-Entra-ID\" >Special features of nested groups in Entra ID<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#Differences-between-nesting-in-Entra-ID-and-AD\" >Differences between nesting in Entra ID and AD<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#Restrictions-on-the-nesting-of-groups-in-Entra-ID\" >Restrictions on the nesting of groups in Entra ID<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#How-to-synchronize-nested-groups-from-AD-to-Entra-ID\" >How to synchronize nested groups from AD to Entra ID<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#Hybrid-use-of-nested-groups-DynamicGroup-and-DynamicSync\" >Hybrid use of nested groups: DynamicGroup and DynamicSync<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#About-FirstAttribute\" >About FirstAttribute<\/a><\/li><\/ul><\/nav><\/div>\n\n<h2><span class=\"ez-toc-section\" id=\"What-are-nested-groups-and-why-do-you-need-them\"><\/span>What are nested groups, and why do you need them?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span class=\"--l --r sentence_highlight\">Nested groups have been an important method of controlling authorizations in domains and Active Directory ever since Windows domains have existed. <\/span><span class=\"--l --r sentence_highlight\">If a group of employees requires common authorizations, it makes sense to assign them to a common group. <\/span><span class=\"--l sentence_highlight\">However, if there are other employees within these groups who require additional authorizations, it makes sense to include these employees in a group and subordinate them to another group.<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p>By subdividing the new group to the existing group, the employees also receive all the rights of the higher-level group. This<\/p>\n<ul>\n<li><span class=\" --l alignedSentenceHighlight-module--alignedSentenceHighlight--5ZnPy alignedSentenceHighlight-module--partialHighlightAnimationWeb--Mk8cZ bg-[#E1F0F5] text-[#25282D] sentence_highlight\">avoids duplicate configurations,<\/span><\/li>\n<li><span class=\" --l alignedSentenceHighlight-module--alignedSentenceHighlight--5ZnPy alignedSentenceHighlight-module--partialHighlightAnimationWeb--Mk8cZ bg-[#E1F0F5] text-[#25282D] sentence_highlight\">simplifies set-up and<\/span><\/li>\n<li><span class=\" --l --r alignedSentenceHighlight-module--alignedSentenceHighlight--5ZnPy alignedSentenceHighlight-module--partialHighlightAnimationWeb--Mk8cZ bg-[#E1F0F5] text-[#25282D] sentence_highlight\">ensures more order when assigning authorizations.<\/span><\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Special-features-of-nested-groups-in-AD\"><\/span>Special features of nested groups in AD<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Nested groups have various options and names in Active Directory:<\/p>\n<p><strong><img decoding=\"async\" class=\"wp-image-18910 alignright\" title=\"Special characteristics of nested AD groups\" src=\"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png\" alt=\"Special characteristics of nested AD groups\" width=\"218\" height=\"323\" srcset=\"https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png 571w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1-202x300.png 202w\" sizes=\"(max-width: 218px) 100vw, 218px\" \/>(Domain-)Local<\/strong> groups are used to summarize global groups or, in exceptional cases, directly for grouping users in domains or on individual servers. Local groups can therefore be used for authorizations on a local server or within an AD domain.\u00a0<\/p>\n<p>Local groups automatically become domain-local groups in the Active Directory. The difference is that these groups can be seen on all member systems of the domain. The advantage is that a local group only needs to be defined once per domain. This group can contain various global groups that are granted access to resources on the respective servers.<\/p>\n<p><strong>Global groups<\/strong> are visible and usable in the complete overall structure, but can only contain members from their own domain. However, global groups can be members of local and universal groups. You can also nest global groups, i.e. include other global groups in a higher-level group. This allows you to create flexible authorization models.<\/p>\n<p>There are also <strong>universal groups<\/strong>. All information about membership of universal groups is stored on the global catalog servers in Active Directory. Universal groups are available in all domains of the overall structure and can contain members from all domains.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Special-features-of-nested-groups-in-Entra-ID\"><\/span>Special features of nested groups in Entra ID<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Differences-between-nesting-in-Entra-ID-and-AD\"><\/span><span class=\"--l --r sentence_highlight\">Differences between nesting in Entra ID and AD<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span class=\"--l --r sentence_highlight\">In Entra ID Active Directory (Entra ID)\/Entra ID, it is also generally possible to nest groups. <\/span><span class=\"--l --r sentence_highlight\">This means that you can add a group as a member of another group. <\/span><span class=\"--l sentence_highlight\">This functionality can be very useful to simplify the management of users and access to resources, just like in Active Directory.<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p><span class=\"--l --r sentence_highlight\"><strong>However, nested groups in Entra ID do not work in the same way as in Active Directory.<\/strong> <\/span><span class=\"--l --r sentence_highlight\"><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>There<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>are<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>no<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>local<\/strong><\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>,<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>universal<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>and<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>global<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>groups<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>with<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>their<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>different<\/strong><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>possibilities<\/strong><\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><strong>.<\/strong><\/span> <\/span><span class=\"--l --r sentence_highlight\"><strong>In Entra ID there are only groups.<\/strong> <\/span><span class=\"--l sentence_highlight\"><strong>These groups can be members of other groups.<\/strong><\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p><span class=\"--l --r sentence_highlight\">If a group has another group as a member, all members of the subordinate group inherit the access rights and role assignments of the parent group. <\/span><span class=\"--l --r sentence_highlight\">This works in exactly the same way as in Active Directory, but <strong>without the distinction between local, global and universal groups<\/strong>. <\/span><span class=\"--l sentence_highlight\">This distinction does not exist in Entra ID.<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p><span class=\"--l --r sentence_highlight\">For example, you could have a parent group called &#8220;Paris&#8221; with several subordinate groups for different departments, for example &#8220;Marketing&#8221; and &#8220;Sales&#8221;. <\/span><span class=\"--l --r sentence_highlight\">Each of these subordinate groups inherits the access rights and role assignments of the parent group, &#8220;Paris&#8221;. <\/span><span class=\"--l --r sentence_highlight\">At the same time, you can assign additional rights to the members of the subordinate groups that only apply to the members of this group.<\/span><\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-18919\" title=\"Entra ID groups are members of other groups.\" src=\"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-Gruppen-in-Entra-ID-1-e1707898745858.png\" alt=\"Entra ID groups are members of other groups.\" width=\"646\" height=\"322\" \/><\/p>\n<h3><span class=\"ez-toc-section\" id=\"Restrictions-on-the-nesting-of-groups-in-Entra-ID\"><\/span><span class=\"--l sentence_highlight\">Restrictions on the nesting of groups in Entra ID<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p><span class=\"--l --r sentence_highlight\">However, there are some restrictions on the nesting of Entra ID groups. <\/span><span class=\"--l --r sentence_highlight\"><strong>For example, security groups in Entra ID support nesting, whereas this is not the case with Microsoft 365 groups.<\/strong> <\/span><span class=\"--l sentence_highlight\">\u00a0<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p><span class=\"--l --r sentence_highlight\"><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">In<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">addition<\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">,<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">for<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">certain<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">types<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">of<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">resources<\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">,<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">such<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">as<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">enterprise<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">applications<\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">,<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">special<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">configurations<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">are<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">required<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">to<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">support<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">the<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">nesting<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">of<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">groups<\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">.<\/span> <\/span><span class=\"--l sentence_highlight\">Therefore, it is important to understand the specific requirements and restrictions for nesting groups in your environment and how to assign permissions based on each group.<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p><span class=\"--l --r sentence_highlight\">Microsoft regularly brings out new releases. <\/span><span class=\"--l --r sentence_highlight\">Here is a more detailed list of what is possible or not with groups in Entra ID: <a title=\"https:\/\/learn.microsoft.com\/de-de\/entra\/identity\/users\/directory-service-limits-restrictions\" href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/users\/directory-service-limits-restrictions\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Service Limits and Restrictions &#8211; Microsoft Entra ID | Microsoft Learn<\/a><\/span><\/p>\n<p><img decoding=\"async\" class=\"alignnone wp-image-18944 size-full\" title=\"Restrictions on the nesting of groups in Entra ID\" src=\"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions.png\" alt=\"Restrictions on the nesting of groups in Entra ID\" width=\"4123\" height=\"901\" srcset=\"https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions.png 4123w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions-300x66.png 300w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions-1024x224.png 1024w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions-768x168.png 768w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions-1536x336.png 1536w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions-2048x448.png 2048w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Current-restrictions-800x175.png 800w\" sizes=\"(max-width: 4123px) 100vw, 4123px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"How-to-synchronize-nested-groups-from-AD-to-Entra-ID\"><\/span>How to synchronize nested groups from AD to Entra ID<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Nested groups from Active Directory can be synchronized to Entra ID via Entra ID Connect. Here, Entra ID Connect transfers the local groups to groups in Entra ID. These groups can be used to assign authorizations. You will find more information about Entra ID Connect in the following articles \u00a0&#8220;<a href=\"https:\/\/activedirectoryfaq.com\/2021\/07\/install-azure-ad-connect\/\" target=\"_blank\" rel=\"noopener\">Install Entra ID Connect<\/a>&#8221; and &#8220;<a href=\"https:\/\/activedirectoryfaq.com\/2021\/08\/azure-ad-connect-and-azure-ad-connect-cloud-sync\/\" target=\"_blank\" rel=\"noopener\">Entra ID Connect and Entra ID Connect Cloud Sync<\/a>&#8220;. No group resolution is required for the synchronization of nested AD groups.<\/p>\n<p><img decoding=\"async\" class=\"aligncenter wp-image-18934\" title=\"Synchronize nested AD groups in Entra ID\" src=\"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren.png\" alt=\"Synchronize nested AD groups in Entra ID\" width=\"689\" height=\"351\" srcset=\"https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren.png 4312w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren-300x153.png 300w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren-1024x522.png 1024w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren-768x391.png 768w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren-1536x783.png 1536w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren-2048x1043.png 2048w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Verschachtelte-AD-Gruppen-in-Entra-ID-synchronisieren-800x408.png 800w\" sizes=\"(max-width: 689px) 100vw, 689px\" \/><\/p>\n<p><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">To<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">adjust<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">the<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">synchronization<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">of<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">group<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">memberships<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">from<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">groups<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">in<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">Active<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">Directory<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">with<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">Entra<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">ID<\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">,<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">the<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">tools<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><a title=\"https:\/\/dynamicgroup.net\/de\" href=\"https:\/\/dynamicgroup.net\/de\" rel=\"noopener noreferrer nofollow\">DynamicGroup<\/a><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><a title=\"https:\/\/dynamicgroup.net\/de\" href=\"https:\/\/dynamicgroup.net\/de\" rel=\"noopener noreferrer nofollow\">and<\/a><\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><a title=\"https:\/\/dynamicgroup.net\/de\" href=\"https:\/\/dynamicgroup.net\/de\" rel=\"noopener noreferrer nofollow\">DynamicSync<\/a><\/span>\u00a0<span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">are<\/span> <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">helpful. <\/span>This makes it possible to control group memberships much more efficiently, especially when synchronizing between AD and Entra ID.\u00a0<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Hybrid-use-of-nested-groups-DynamicGroup-and-DynamicSync\"><\/span><span class=\"--l sentence_highlight\">Hybrid use of nested groups: DynamicGroup and DynamicSync<\/span><span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p><span class=\"--l sentence_highlight\">If groups are used in the local AD and in Entra ID, and if AD groups also have to be synchronized in Entra ID, administration quickly becomes complicated. Difficult administration can mean loss of time and security risks.<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p><span class=\"--l --r sentence_highlight\"><a title=\"https:\/\/dynamicgroup.net\/de\/dynamische-gruppen-in-active-directory\/\" href=\"https:\/\/dynamicgroup.net\/dynamic-groups-in-active-directory\/\" rel=\"noopener noreferrer nofollow\">DynamicGroup<\/a> <\/span><span class=\"--l --r sentence_highlight\">offers the advantage that companies can say goodbye to the complicated concept of different group types in AD. DynamicGroup automates the management of memberships in groups by doing this dynamically on the basis of attributes. <\/span><span class=\"--l sentence_highlight\">This saves a lot of configuration and planning work.<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p><span class=\"--l --r sentence_highlight\"><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><img decoding=\"async\" class=\"alignright wp-image-18948\" title=\"Group management in Entra ID with DynamicSync\" src=\"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/DynamicGroupSync-USP-en-768x464-1.png\" alt=\"Group management in Entra ID with DynamicSync\" width=\"371\" height=\"224\" srcset=\"https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/DynamicGroupSync-USP-en-768x464-1.png 768w, https:\/\/www.dynamicgroup.net\/wp-content\/uploads\/2024\/02\/DynamicGroupSync-USP-en-768x464-1-300x181.png 300w\" sizes=\"(max-width: 371px) 100vw, 371px\" \/><\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">In hybrid environments,<\/span> it makes sense to combine <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">DynamicGroup<\/span> and <span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\"><a title=\"https:\/\/dynamicgroup.net\/de\/dynamicsync\/\" href=\"https:\/\/dynamicgroup.net\/dynamicsync\/\" rel=\"noopener noreferrer nofollow\">DynamicSync<\/a><\/span><span class=\"--l --r hover:bg-[#B4DAE8] hover:dark:bg-blue-next-600\">.<\/span> <\/span> <span class=\"--l sentence_highlight\">In this case, DynamicGroup ensures that the group memberships are not only maintained in Active Directory, but also in parallel in Entra ID via dynamic group memberships.<\/span><span class=\"--r sentence_highlight\"><br \/>\n<\/span><\/p>\n<p>This automates the management of groups in hybrid environments. The advantage of using both tools is that the group memberships always match. DynamicSync ensures that local AD groups can continue to be used in Entra ID. It maximizes security in the entire environment, provides more flexibility and simplifies administration.<\/p>\n<p style=\"text-align: left;\"><a href=\"https:\/\/dynamicgroup.net\/download\/\" target=\"_blank\" rel=\"noopener noreferrer\"><button class=\"ButtonBeratung2 aligncenter\">Try DynamicGroup<\/button><\/a><\/p>\n<hr \/>\n<h2><span class=\"ez-toc-section\" id=\"About-FirstAttribute\"><\/span>About FirstAttribute<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FirstAttribute is an independent cloud services and software company focused on Identity &amp; Access Management (IAM) for AD and M365\/Entra ID. You can learn more about our team at <a href=\"https:\/\/dynamicgroup.net\/company\/\" target=\"_blank\" rel=\"noopener\">Company<\/a>.<\/p>\n<p><a href=\"https:\/\/dynamicgroup.net\/dynamic-groups-in-active-directory\/\">DynamicGroup<\/a> has been a popular tool for AD administrators for many years to manage group memberships in AD in a coordinated and secure way. The application is used worldwide by companies in a wide range of industries. Continuous updates ensure that the application remains up to the growing demands in IT and does exactly what it promises.<\/p>\n<p><a href=\"https:\/\/dynamicgroup.net\/dynamicsync\/\" target=\"_blank\" rel=\"noopener\">DynamicSync<\/a> is an automation software for cloud groups. As a pure cloud service (SaaS), DynamicSync specializes in dynamic and automatic group synchronization in Entra ID.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>It is now possible to synchronize nested AD groups in the cloud. There are a few points you should be [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1451,1446],"tags":[1447],"class_list":["post-18855","post","type-post","status-publish","format-standard","hentry","category-dynamicgroup-3","category-dynamicsync-2","tag-nested-groups"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.3 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Synchronize nested AD groups in Entra ID - FirstWare DynamicGroup<\/title>\n<meta name=\"description\" content=\"Synchronize nested AD groups in Entra ID. | Better understand nested AD and Entra ID groups. | DynamicSync as a solution\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Synchronize nested AD groups in Entra ID - FirstWare DynamicGroup\" \/>\n<meta property=\"og:description\" content=\"Synchronize nested AD groups in Entra ID. | Better understand nested AD and Entra ID groups. | DynamicSync as a solution\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/\" \/>\n<meta property=\"og:site_name\" content=\"FirstWare DynamicGroup\" \/>\n<meta property=\"article:published_time\" content=\"2024-02-19T13:43:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-01T14:48:55+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png\" \/>\n<meta name=\"author\" content=\"Sophia Tunui\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Sophia Tunui\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/\"},\"author\":{\"name\":\"Sophia Tunui\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#\\\/schema\\\/person\\\/e167a093efb5e1da8f585595e4d6f6ba\"},\"headline\":\"Synchronize nested AD groups in Entra ID\",\"datePublished\":\"2024-02-19T13:43:21+00:00\",\"dateModified\":\"2025-09-01T14:48:55+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/\"},\"wordCount\":1192,\"publisher\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dynamicgroup.net\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png\",\"keywords\":[\"nested groups\"],\"articleSection\":[\"DynamicGroup\",\"DynamicSync\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/\",\"url\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/\",\"name\":\"Synchronize nested AD groups in Entra ID - FirstWare DynamicGroup\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dynamicgroup.net\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png\",\"datePublished\":\"2024-02-19T13:43:21+00:00\",\"dateModified\":\"2025-09-01T14:48:55+00:00\",\"description\":\"Synchronize nested AD groups in Entra ID. | Better understand nested AD and Entra ID groups. | DynamicSync as a solution\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/#primaryimage\",\"url\":\"https:\\\/\\\/dynamicgroup.net\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png\",\"contentUrl\":\"https:\\\/\\\/dynamicgroup.net\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/news\\\/synchronize-nested-ad-groups-in-entra-id\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Synchronize nested AD groups in Entra ID\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/\",\"name\":\"FirstWare DynamicGroup\",\"description\":\"Active Directory Group Automation\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#organization\",\"name\":\"FirstAttribute\",\"url\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/dynamicgroup.net\\\/wp-content\\\/uploads\\\/2017\\\/10\\\/FIRSTATTRIBUTE-Logo2013-final.png\",\"contentUrl\":\"https:\\\/\\\/dynamicgroup.net\\\/wp-content\\\/uploads\\\/2017\\\/10\\\/FIRSTATTRIBUTE-Logo2013-final.png\",\"width\":483,\"height\":100,\"caption\":\"FirstAttribute\"},\"image\":{\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.dynamicgroup.net\\\/en\\\/#\\\/schema\\\/person\\\/e167a093efb5e1da8f585595e4d6f6ba\",\"name\":\"Sophia Tunui\",\"sameAs\":[\"http:\\\/\\\/firstattribute.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Synchronize nested AD groups in Entra ID - FirstWare DynamicGroup","description":"Synchronize nested AD groups in Entra ID. | Better understand nested AD and Entra ID groups. | DynamicSync as a solution","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/","og_locale":"en_US","og_type":"article","og_title":"Synchronize nested AD groups in Entra ID - FirstWare DynamicGroup","og_description":"Synchronize nested AD groups in Entra ID. | Better understand nested AD and Entra ID groups. | DynamicSync as a solution","og_url":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/","og_site_name":"FirstWare DynamicGroup","article_published_time":"2024-02-19T13:43:21+00:00","article_modified_time":"2025-09-01T14:48:55+00:00","og_image":[{"url":"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png","type":"","width":"","height":""}],"author":"Sophia Tunui","twitter_misc":{"Written by":"Sophia Tunui","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#article","isPartOf":{"@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/"},"author":{"name":"Sophia Tunui","@id":"https:\/\/www.dynamicgroup.net\/en\/#\/schema\/person\/e167a093efb5e1da8f585595e4d6f6ba"},"headline":"Synchronize nested AD groups in Entra ID","datePublished":"2024-02-19T13:43:21+00:00","dateModified":"2025-09-01T14:48:55+00:00","mainEntityOfPage":{"@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/"},"wordCount":1192,"publisher":{"@id":"https:\/\/www.dynamicgroup.net\/en\/#organization"},"image":{"@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#primaryimage"},"thumbnailUrl":"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png","keywords":["nested groups"],"articleSection":["DynamicGroup","DynamicSync"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/","url":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/","name":"Synchronize nested AD groups in Entra ID - FirstWare DynamicGroup","isPartOf":{"@id":"https:\/\/www.dynamicgroup.net\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#primaryimage"},"image":{"@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#primaryimage"},"thumbnailUrl":"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png","datePublished":"2024-02-19T13:43:21+00:00","dateModified":"2025-09-01T14:48:55+00:00","description":"Synchronize nested AD groups in Entra ID. | Better understand nested AD and Entra ID groups. | DynamicSync as a solution","breadcrumb":{"@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#primaryimage","url":"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png","contentUrl":"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2024\/02\/Active-Directory-verschachtelte-Gruppen-uebersicht-neu-1.png"},{"@type":"BreadcrumbList","@id":"https:\/\/www.dynamicgroup.net\/en\/news\/synchronize-nested-ad-groups-in-entra-id\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/www.dynamicgroup.net\/en\/"},{"@type":"ListItem","position":2,"name":"Synchronize nested AD groups in Entra ID"}]},{"@type":"WebSite","@id":"https:\/\/www.dynamicgroup.net\/en\/#website","url":"https:\/\/www.dynamicgroup.net\/en\/","name":"FirstWare DynamicGroup","description":"Active Directory Group Automation","publisher":{"@id":"https:\/\/www.dynamicgroup.net\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.dynamicgroup.net\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.dynamicgroup.net\/en\/#organization","name":"FirstAttribute","url":"https:\/\/www.dynamicgroup.net\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.dynamicgroup.net\/en\/#\/schema\/logo\/image\/","url":"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2017\/10\/FIRSTATTRIBUTE-Logo2013-final.png","contentUrl":"https:\/\/dynamicgroup.net\/wp-content\/uploads\/2017\/10\/FIRSTATTRIBUTE-Logo2013-final.png","width":483,"height":100,"caption":"FirstAttribute"},"image":{"@id":"https:\/\/www.dynamicgroup.net\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.dynamicgroup.net\/en\/#\/schema\/person\/e167a093efb5e1da8f585595e4d6f6ba","name":"Sophia Tunui","sameAs":["http:\/\/firstattribute.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/posts\/18855","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/comments?post=18855"}],"version-history":[{"count":0,"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/posts\/18855\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/media?parent=18855"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/categories?post=18855"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dynamicgroup.net\/en\/wp-json\/wp\/v2\/tags?post=18855"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}