Create an Entra ID dynamic user group matching the domain name of User Principal Names

To create a dynamic group containing all Azure AD Premium users: 

1. In a browser, visit Microsoft Entra (Azure Active Directory) at https://entra.microsoft.com/ and sign-in with a Global or User Administrator account.
   
   
2. Expand Groups then click All groups. Click New group.
   
   
   
   
3. In Group type ensure Security is selected. In Group name and Group description enter a suitable name and description for the group. For Azure AD roles can be assigned to the group, select No. In Membership type ensure Dynamic User is selected. Add an Owner to the group and then click Add dynamic query.
   
   
   
   
4. Click Edit above the Rule syntax box.
   
   
   
   
5. In the Edit rule syntax blade, under Rule syntax, enter the below statement then click OK.
   
   

   (user.userPrincipalName -match "^[A-Z0-9._%+-]+@domainname.com")

   
   Replacing "domainname.com" with the UPN domain name you want to match.
   
   

6. The rule syntax will be added. If you want to test the rule, click Validate Rules (Preview).
   
   
   
   
7. Click Add Users and then select a mixture of users that do and do not have Azure AD licenses assigned to them. When a number of users have been added to the Selected users section of the Add users blade, click Select.
   
   
   
   
8. The users you have selected will then be evaluated against the syntax and display whether they match.
   
   
   
   
9. Click Save to complete editing the dynamic query.
   
   
   
   
10. Back at the New Group page, click Create to save the dynamic user group.
    
    
    

Microsoft Entra may take a few minutes to populate the members of a newly created dynamic user group.