Forum Discussion

Oz Oscroft's avatar
Oz Oscroft
Iron Contributor
Aug 15, 2017

How to create an Azure AD security group for use in SharePoint

Hi all,

Everywhere I read, I'm being given great advice to setup security groups in Azure AD to then use in SharePoint groups.  I understand the pros and cons of this approach and it's perfect for us in theory.  However, when I go to Azure AD > Users & Groups > All Groups > New Group, I don't see an option to create a security group (it just creates a new O365 Group in its entirety).  When I go to Group Settings in the same place, everything is greyed out.  This page appears to include the "Users can create security groups" setting (currently set to No).  I thought I was a Global Admin so why is this greyed out?

Any help gratefully appreciated.

Thanks, Oz

  • Oz Oscroft's avatar
    Oz Oscroft
    Iron Contributor

    Thanks both.  As it turns out, I was simply looking in the wrong place!  As I wanted to create an Azure AD security group I was trying to do so in the Azure Admin Portal (https://portal.azure.com/) ... silly me ... I should have been doing it in the Office 365 Admin Portal (https://portal.office.com/).

    Go to Groups > Groups > Add a group and it's all there - just choose the option you want in the Type field.

    This post really helped (along with the link in it to the Office website): https://threewill.com/office-365-groups-vs-azure-ad-security-groups/

    Hope it helps others too.

  • And by the way, I would recommend you to create e-mail enabled security groups if creating Office 365 Groups is not an option for you
  • Simply make sure to select NO for the "Enable Office features" toggle. Or, just use PowerShell - New-MsolGroup or New-AzureADGroup.

Resources