Create a dynamic group containing all Azure AD Premium users

To create a dynamic group containing all Azure AD Premium users:

1. In a browser, visit Microsoft Entra (Azure Active Directory) at https://entra.microsoft.com/ and sign-in with a Global or User Administrator account.
   
   
2. Expand Groups then click All groups. Click New group.
   
   
   
   
3. In Group type ensure Security is selected. In Group name and Group description enter a suitable name and description for the group. For Azure AD roles can be assigned to the group, select No. In Membership type ensure Dynamic User is selected. Add an Owner to the group and then click Add dynamic query.
   
   
   
   
4. Click Edit above the Rule syntax box.
   
   
   
   
5. In the Edit rule syntax blade, under Rule syntax, enter the below statement then click OK.
   
   

   user.assignedPlans -any (assignedPlan.servicePlanId -eq "41781fb2-bc02-4b7c-bd55-b576c07bb09d" -and assignedPlan.capabilityStatus -eq "Enabled")

   
   
   
   
6. The rule syntax will be added. If you want to test the rule, click Validate Rules (Preview).
   
   
   
   
7. Click Add Users and then select a mixture of users that do and do not have Azure AD licenses assigned to them. When a number of users have been added to the Selected users section of the Add users blade, click Select.
   
   
   
   
8. The users you have selected will then be evaluated against the syntax and display whether they match.
   
   
   
   
9. Click Save to complete editing the dynamic query.
   
   
   
   
10. Back at the New Group page, click Create to save the dynamic user group.
    
    

Microsoft Entra may take a few minutes to populate the members of a newly created dynamic user group.

When a user has their Azure AD license (be it standalone or part of a subscription such as Microsoft Business Premium or Microsoft E3) added or removed, the user account will automatically be added or removed from this group.

Also see:

Manage rules for dynamic membership groups in Microsoft Entra ID
https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership

Product names and service plan identifiers for licensing
https://learn.microsoft.com/en-us/entra/identity/users/licensing-service-plan-reference