Create Dynamic Group for all licensed Users (user.userType -eq "member") and (user.department -ne "NotSupport") and (user.accountEnabled -eq true) and (user.assignedPlans -any (assignedPlan.servicePlanId -ne "" -and assignedPlan.capabilityStatus -eq "Enabled")) this requires that the user type is set to "member." That can be removed.