Groups, Memberships, Access Management

Group Types

Security Groups

Used to manage user and computer access to shared resources Can consist of:

Users Devices Service Principles Nested Groups SGs are owned by Users and/or Service Principals

Microsoft 365 Group

Provides collaboration opportunities between group members, providing access to shared services:

Mailboxes Calendars Files SharePoint sites
Also allows for users outside of the organization to be granted access. Members of an MS 365 Group can only be Users.  MS365 groups are owned by Users and/or Service Principals

 

Membership Types

Assigned

Allows you to add specific users as members of a group and have unique permissions

Dynamic User

Allows use of dynamic membership rules to automatically add or remove members If a User's attributes change, the system will determine if the new attributes meet the Dynamic Group rules for the directory 

Dynamic Device

Allows use of dynamic group rules to automatically add or remove devices If a device's attributes change, the system looks at the dynamic group rules and determines if the device meets requirements for the directory

 

Access Management in Entra ID