You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert

99
99
100
100
1. Select the group **MDM policy – West**.
101
101
@@ -108,7 +108,7 @@ Now that you’ve found the group, you can view all the assigned members.
108
108
109
109
Select **Members** from the **Manage** area, and then review the complete list of member names assigned to that specific group, including _Alain Charon_.
110
110
111
-

111
+

112
112
113
113
## Clean up resources
114
114
The group you just created is used in other articles in the Azure AD Fundamentals documentation. If you'd rather not use this group, you can delete it and its assigned members using the following steps:
@@ -123,7 +123,7 @@ The group you just created is used in other articles in the Azure AD Fundamental
123
123
124
124
The group and its associated members are deleted.
125
125
126
-

126
+

127
127
128
128
>[!Important]
129
129
>This doesn't delete the user Alain Charon, just his membership in the deleted group.
# What is group-based licensing in Azure Active Directory?
21
21
22
-
Microsoft paid cloud services, such as Microsoft 365, Enterprise Mobility + Security, Dynamics 365, and other similar products, require licenses. These licenses are assigned to each user who needs access to these services. To manage licenses, administrators use one of the management portals (Office or Azure) and PowerShell cmdlets. Azure Azure AD is the underlying infrastructure that supports identity management for all Microsoft cloud services. Azure AD stores information about license assignment states for users.
22
+
Microsoft paid cloud services, such as Microsoft 365, Enterprise Mobility + Security, Dynamics 365, and other similar products, require licenses. These licenses are assigned to each user who needs access to these services. To manage licenses, administrators use one of the management portals (Office or Azure) and PowerShell cmdlets. Azure AD is the underlying infrastructure that supports identity management for all Microsoft cloud services. Azure AD stores information about license assignment states for users.
23
23
24
24
Azure AD includes group-based licensing, which allows you to assign one or more product licenses to a group. Azure AD ensures that the licenses are assigned to all members of the group. Any new members who join the group are assigned the appropriate licenses. When they leave the group, those licenses are removed. This licensing management eliminates the need for automating license management via PowerShell to reflect changes in the organization and departmental structure on a per-user basis.
Copy file name to clipboardExpand all lines: articles/active-directory/fundamentals/concept-learn-about-groups.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -63,7 +63,7 @@ After creating an Azure AD group, you need to grant it the appropriate access. E
63
63
64
64
Azure AD helps you give access to your organization's resources by providing access rights to a single user or to an entire Azure AD group. Using groups lets the resource owner or Azure AD directory owner assign a set of access permissions to all the members of the group. The resource or directory owner can also give management rights to someone such as a department manager or a help desk administrator, letting that person add and remove members. For more information about how to manage group owners, see the [Manage groups](how-to-manage-groups.md) article.
65
65
66
-

66
+

67
67
68
68
### Ways to assign access rights
69
69
@@ -77,7 +77,7 @@ After creating a group, you need to decide how to assign access rights. Explore
77
77
78
78
-**External authority assignment.** Access comes from an external source, such as an on-premises directory or a SaaS app. In this situation, the resource owner assigns a group to provide access to the resource and then the external source manages the group members.
79
79
80
-

80
+

81
81
82
82
### Can users join groups without being assigned?
83
83
The group owner can let users find their own groups to join, instead of assigning them. The owner can also set up the group to automatically accept all users that join or to require approval.
Copy file name to clipboardExpand all lines: articles/active-directory/fundamentals/how-to-manage-groups.md
+16-9Lines changed: 16 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,7 +32,7 @@ To create a basic group and add members:
32
32
33
33
1. Go to **Azure Active Directory** > **Groups** > **New group**.
34
34
35
-

35
+

36
36
37
37
1. Select a **Group type**. For more information on group types, see the [learn about groups and membership types](concept-learn-about-groups.md) article.
38
38
@@ -57,7 +57,7 @@ To create a basic group and add members:
57
57
1. Select the link under **Owners** or **Members** to populate a list of every user in your directory.
58
58
1. Choose users from the list and then select the **Select** button at the bottom of the window.
59
59
60
-

60
+

61
61
62
62
1. Select **Create**. Your group is created and ready for you to manage other settings.
63
63
@@ -80,7 +80,7 @@ Need to add multiple members at one time? Learn about the [add members in bulk](
80
80
81
81
1. Select either **Members** or **Owners**.
82
82
83
-

83
+

84
84
85
85
1. Select **+ Add** (members or owners).
86
86
@@ -98,7 +98,7 @@ Need to add multiple members at one time? Learn about the [add members in bulk](
98
98
99
99
1. Check the box next to a name from the list and select the **Remove** button.
100
100
101
-

101
+

102
102
103
103
## Edit group settings
104
104
Using Azure AD, you can edit a group's name, description, or membership type. You'll need the **Groups Administrator** or **User Administrator** role to edit a group's settings.
@@ -113,7 +113,7 @@ To edit your group settings:
113
113
114
114
1. Select **Properties** from the side menu.
115
115
116
-

116
+

117
117
118
118
1. Update the **General settings** information as needed, including:
119
119
@@ -130,8 +130,15 @@ To edit your group settings:
130
130
## Add or remove a group from another group
131
131
You can add an existing Security group to another Security group (also known as nested groups), creating a member group (subgroup) and a parent group. The member group inherits the attributes and properties of the parent group, saving you configuration time. You'll need the **Groups Administrator** or **User Administrator** role to edit group membership.
132
132
133
-
>[!Important]
134
-
>We currently don't support:<ul><li>Adding groups to a group synced with on-premises Active Directory.</li><li>Adding Security groups to Microsoft 365 groups.</li><li>Adding Microsoft 365 groups to Security groups or other Microsoft 365 groups.</li><li>Assigning apps to nested groups.</li><li>Applying licenses to nested groups.</li><li>Adding distribution groups in nesting scenarios.</li><li>Adding security groups as members of mail-enabled security groups</li><li> Adding groups as members of a role-assignable group.</li></ul>
133
+
We currently don't support:
134
+
- Adding groups to a group synced with on-premises Active Directory.
135
+
- Adding Security groups to Microsoft 365 groups.
136
+
- Adding Microsoft 365 groups to Security groups or other Microsoft 365 groups.
137
+
- Assigning apps to nested groups.
138
+
- Applying licenses to nested groups.
139
+
- Adding distribution groups in nesting scenarios.
140
+
- Adding security groups as members of mail-enabled security groups.
141
+
- Adding groups as members of a role-assignable group.
135
142
136
143
### Add a group to another group
137
144
@@ -152,7 +159,7 @@ You can add an existing Security group to another Security group (also known as
152
159
153
160
For this exercise, we're adding "MDM policy - West" to the "MDM policy - All org" group, so "MDM - policy - West" inherits all the properties and configurations of the "MDM policy - All org" group.
154
161
155
-

162
+

156
163
157
164
Now you can review the "MDM policy - West - Group memberships" page to see the group and member relationship.
158
165
@@ -171,7 +178,7 @@ You can remove an existing Security group from another Security group; however,
171
178
172
179
For this exercise, we're now going to remove "MDM policy - West" from the "MDM policy - All org" group.
173
180
174
-

181
+

175
182
176
183
## Delete a group
177
184
You can delete an Azure AD group for any number of reasons, but typically it will be because you:
0 commit comments