Users and groups: security vs Microsoft 365 groups, assigned vs dynamic membership rules, bulk operations

Users in Microsoft Entra ID come in two main kinds: cloud-only users created directly in Entra, and synchronized users whose source of authority is on-premises Active Directory. You can edit cloud-only users in the portal, but most attributes of synced users must be changed on-premises. Each user also has a userType of Member or Guest. Deleted users go to a soft-deleted state for 30 days, during which you can restore them with their group memberships and licenses.