Filtering groups sync when role assignments limit per subscription is hit

Large enterprise organizations that have over 2 million devices and 1.2 million users in over 1600 locations were forced to turn off group sync as the users and groups could not be completed every 30 minutes. It seems that a full group sync is not necessary when using Graph API and targeted groups can be filtered. We have 219K+ groups and the sync never completes.

There are ways to target groups and significantly reduce sync time in Graph.

var graphClient = new GraphServiceClient(clientSecretCredential, scopes);

var graphApiResult = await graphClient.Groups.GetAsync((requestConfiguration) =>

{

    requestConfiguration.QueryParameters.Search = ($"\"displayName:Devices\"");

    requestConfiguration.Headers.Add("ConsistencyLevel", "eventual");

});