Add Group

Create a new group in Microsoft Entra ID. Choose from Security Groups, Microsoft 365 Groups, or Distribution Lists depending on your needs.

Creating a Group

Click “Add Group” and configure the following settings:

Group Type

Select the type of group to create:

• Security — For access control and license assignment
• M365 — For collaboration with shared mailbox, SharePoint site, and Teams
• Distribution — For email-only distribution

Group Name

Display name for the group. For M365 groups, this also creates the email alias.

Description

Optional description for self-service discovery. Helps users find and understand the group’s purpose.

Membership Type

• Assigned — Manual membership management by owners
• Dynamic — Rule-based automatic membership (requires Azure AD Premium P1)

Owners

Users who can manage group membership. At least one owner is required. Best practice: assign at least two owners.

Members

Initial members to add (can add more later). For dynamic groups, preview the rule results before creating.

M365 Group Options

When creating an M365 group, additional settings are available:

• Privacy — Public (discoverable) or Private
• Create Team — Automatically provision a Teams team
• Send Copies — Members receive email in personal inbox
• Allow External Senders — Receive email from outside org

Dynamic Group Rules

When selecting Dynamic membership, define rules based on user or device attributes:

// All Sales department members
(user.department -eq "Sales")

// All managers
(user.jobTitle -contains "Manager")

// All US employees
(user.usageLocation -eq "US")

// All Windows devices
(device.deviceOSType -eq "Windows")

API Reference

• POST /api/user-management-identity/groups — Create new group
• GET /api/user-management-identity/groups — List groups with type filter