Managed Units (MUs) now support configuring membership rules for the following Azure AD resources in the Active Roles Console:
NOTE: Consider the following limitations when planning to add Azure resources to MUs:
You can add Azure contacts and Azure distribution groups to MUs only with the Include Explicitly membership rule.
You cannot add any Azure mailbox types and dynamic distribution groups to MUs.
Apart from adding or removing Azure resources to or from MUs, you cannot modify Azure resources in the Active Roles Console. To create, modify or delete Azure resources in your organization, use the available features of the Active Roles Web Interface.
For more information on the current limitations of querying Azure AD objects in MUs, see Creating Managed Units in the Active Roles Administration Guide.
For examples on using MUs and Access Templates (ATs) together to configure granular access to Azure AD resources, see Using rule-based and role-based tools for granular administration in the Active Roles Administration Guide.