SOLVED

Adding Azure AD groups to Office 365 groups

%3CLINGO-SUB%20id%3D%22lingo-sub-97996%22%20slang%3D%22en-US%22%3EAdding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-97996%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20it%2C%20one%20way%20or%20the%20other%2C%20possible%20to%20add%20groups%20from%20Azure%20AD%20to%20a%20Office%20365%20group%3F%20Or%20is%20it%20possible%20to%20make%26nbsp%3Ban%20Azure%20AD%20group%20(synced%20from%20AD)%20behave%20as%20an%20Office%20365%20Group%3F%20The%20reason%20I%20ask%2C%20is%20because%20I%20want%20to%20use%20this%20group%20in%20Stream.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-97996%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGroups%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%20Groups%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-299524%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-299524%22%20slang%3D%22en-US%22%3EI%20am%20having%20a%20azure%20AD%20group%20which%20contains%20100%20members.%20Instead%20of%20adding%20100%20members%20as%20group%20members%2C%20i%20want%20to%20add%20azure%20AD%20as%20group%20member.%20But%20while%20searching%20for%20group%20it%20is%20not%20giving%20me%20azure%20AD%20group.%20Azure%20AD%20doesn't%20have%20email%2C%20is%20that%20the%20reason%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-112565%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112565%22%20slang%3D%22en-US%22%3EI%20found%20a%20difference!%3CBR%20%2F%3EVia%20PowerShell%20is%20visible%20that%20a%20group%20created%20in%20AzureAD%20with%20Office%20features%2C%20with%20the%20command%20Get-AzureADGroup%20-ObjectId%20...%20at%20SecurityEnabled%20has%20True.%20In%20an%20Office%20Group%20created%20at%20portal.office.com%2C%20the%20SecurityEnabled%20value%20is%20False.%3CBR%20%2F%3E%3CBR%20%2F%3EWhy%20is%20there%20a%20difference%20while%20the%20outcome%20is%20both%20an%20Office%20Group%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-112492%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112492%22%20slang%3D%22en-US%22%3E%3CP%3EVasil%2C%20thanks%20for%20the%20reply.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20try%20to%20explain%20it%20as%20clearly%20as%20possible.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20Azure%20AD%20you%20can%20create%20groups.%20These%20groups%20can%20provide%20your%20Office%20features.%20This%20group%20can%20also%20be%20used%20to%20distribute%20licenses.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20the%20Office365%20Admin%20Center%2C%20you%20can%20create%20Office%20Groups.%20I%20can%20not%20use%20the%20group%20I%20create%20here%20to%20distribute%20licenses.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAzure%20Portal%20-%26gt%3B%20Azure%20Active%20Directory%20-%26gt%3B%20Users%20and%20Groups%20-%26gt%3B%20All%20Groups%20-%26gt%3B%20%2B%20New%20Group.%20There%20i%20have%20the%20option%20%22Enable%20Office%20features%22%20Yes%20or%20No.%20i%20chose%20Yes.%20The%20group%20i%20create%20here%20i%20can%20use%20for%20the%20distribution%20of%20licenses.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Eoffice.com%20-%26gt%3B%20Admin%20Center%20-%26gt%3B%20Groups%20-%26gt%3B%20Groups%20-%26gt%3B%20%2B%20Create%20group%20-%26gt%3B%20Type%20Office%20365-group.%20The%20group%20i%20create%20here%20a%20can't%20use%20for%20the%20distribution%20of%20licenses.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20is%20the%20difference%20between%20the%20groups%3F%20Both%20groups%20have%20full%20Office%20Group%20features.%20Nor%20can%20I%20find%20a%20difference%20between%20the%20groups.%20I%20only%20notice%20that%20there%20is%20a%20difference%20because%20I%20can%20do%20some%20licenses%20with%20one%20group%20and%20not%20with%20the%20other%20group.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-112173%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112173%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20have%20to%20be%20more%20specofic%20here%2C%20both%20places%20allow%20you%20to%20create%20a%20variety%20of%20group%20types.%20The%20easiest%20way%20to%20tell%20the%20group%20type%20via%20PowerShell%20is%20to%20check%20the%20recipienttypedetails%20proerty%2C%20but%20that's%20only%20available%20for%20groups%20recognized%20by%20Exchange%20Online.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-112160%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-112160%22%20slang%3D%22en-US%22%3E%3CP%3EWhen%20I%E2%80%99m%20in%20Azure%20AD%20and%20I%20create%20a%20group%20there%20I%20have%20the%20ability%20to%20enable%20Office%20functions.%20When%20I%20do%20this%2C%20I%20have%20a%20Group.%20This%20G(g)roup%20has%20the%20same%20functionalities%20as%20a%20Group%20made%20in%20the%20O365%20portal.%20However%2C%20I%20can%20now%20also%20use%20the%20G(g)roup%2C%20made%20in%20Azure%20AD%2C%20for%20the%20license%20piece.%3C%2FP%3E%3CP%3EWhen%20I%20compare%20in%20PowerShell%20a%20group%20created%20in%20Azure%20AD%20and%20in%20the%20O365%20Portal%2C%20I%20do%20not%20see%20any%20differences%20except%20the%20alias.%3C%2FP%3E%3CP%3EHow%20can%20I%20see%20the%20difference%20between%20a%20G(g)roup%20made%20in%20Azure%20AD%20and%20a%20Group%20made%20in%20the%20O365%20Portal.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-102930%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-102930%22%20slang%3D%22en-US%22%3E%3CP%3EDidn't%20I%20read%20somewhere%20that%20this%20is%20on%20the%20roadmap%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-98074%22%20slang%3D%22en-US%22%3ERe%3A%20Adding%20Azure%20AD%20groups%20to%20Office%20365%20groups%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-98074%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20cannot%20nest%20other%20Group%20types%20inside%20of%20O365%20Group.%20The%20Stream%20relationship%20with%20Groups%20is%20unfortunate%20in%20this%20regards...%3C%2FP%3E%3C%2FLINGO-BODY%3E
Frequent Contributor

Is it, one way or the other, possible to add groups from Azure AD to a Office 365 group? Or is it possible to make an Azure AD group (synced from AD) behave as an Office 365 Group? The reason I ask, is because I want to use this group in Stream.

7 Replies
best response confirmed by Juan Carlos González Martín (MVP)
Solution

You cannot nest other Group types inside of O365 Group. The Stream relationship with Groups is unfortunate in this regards...

Didn't I read somewhere that this is on the roadmap?

When I’m in Azure AD and I create a group there I have the ability to enable Office functions. When I do this, I have a Group. This G(g)roup has the same functionalities as a Group made in the O365 portal. However, I can now also use the G(g)roup, made in Azure AD, for the license piece.

When I compare in PowerShell a group created in Azure AD and in the O365 Portal, I do not see any differences except the alias.

How can I see the difference between a G(g)roup made in Azure AD and a Group made in the O365 Portal.

You have to be more specofic here, both places allow you to create a variety of group types. The easiest way to tell the group type via PowerShell is to check the recipienttypedetails proerty, but that's only available for groups recognized by Exchange Online.

Vasil, thanks for the reply.

 

I try to explain it as clearly as possible.

 

In Azure AD you can create groups. These groups can provide your Office features. This group can also be used to distribute licenses.

 

In the Office365 Admin Center, you can create Office Groups. I can not use the group I create here to distribute licenses.

 

Azure Portal -> Azure Active Directory -> Users and Groups -> All Groups -> + New Group. There i have the option "Enable Office features" Yes or No. i chose Yes. The group i create here i can use for the distribution of licenses.

 

office.com -> Admin Center -> Groups -> Groups -> + Create group -> Type Office 365-group. The group i create here a can't use for the distribution of licenses.

 

What is the difference between the groups? Both groups have full Office Group features. Nor can I find a difference between the groups. I only notice that there is a difference because I can do some licenses with one group and not with the other group.

I found a difference!
Via PowerShell is visible that a group created in AzureAD with Office features, with the command Get-AzureADGroup -ObjectId ... at SecurityEnabled has True. In an Office Group created at portal.office.com, the SecurityEnabled value is False.

Why is there a difference while the outcome is both an Office Group?
I am having a azure AD group which contains 100 members. Instead of adding 100 members as group members, i want to add azure AD as group member. But while searching for group it is not giving me azure AD group. Azure AD doesn't have email, is that the reason?