Modifying the User Groups Synchronized from On-Premise AD

Hi Friends,

I have Synchronized Users & User Groups from my On-Premise AD to Azure AD.

As you all know, User Groups synced from On-Premise AD will be having their "Source" as "Windows server AD" while User Groups Created in Azure Ad have their "SOURCE" as "Cloud".

I Can add / remove users to/from any USER GROUP created in AZURE CLOUD while I'm not able to add / remove users to/from USER GROUPS synced from On-Premise AD.

Why is it so ??

And, USERS or USER GROUPS created in Azure AD are not synchronized back into On-Premise AD.

My question is , does the synchronization is BI-DIRECTIONAL i.e from AZURE-AD to ON-PREMISE AD and vice versa or it happens in just one direction i.e ON PREMISE AD to AZURE - AD ??

Hi Pradeep,

Users created in Azure AD are not synced by to On-Premise AD, this is designed by Microsoft considering security and compliance aspects into consideration.

There was a uservoice request to have similar functionality developed, however it is declined. PFB link.

https://feedback.azure.com/forums/169401-azure-active-directory/suggestions/6455327-sync-azure-active-directory-down-to-on-premises-ad

To summarize, synchronization is not bidirectional. If you need make changes in the OnPrem AD and that will be synched back to AAD.

In case you are using Workday, synching is possible as explained in below post:

https://techcommunity.microsoft.com/t5/Azure-Active-Directory/Sync-Azure-AD-to-onPremise-AD-user-properties/m-p/309331