

Users can request membership in a security group and that request goes to the group owner, rather than an IT administrator. Known as self-service group management, this feature allows group owners who are not assigned an administrative role to create and manage security groups. In this case, you can use:Īllow users to create and manage their own groupsĪzure AD allows groups that can be managed by group owners instead of IT administrators. You can also create and manage Azure AD groups that are separate from AD DS groups but can contain users and groups from AD DS.

Cloud-onlyĪD DS groups are synchronized with Microsoft 365 from AD DS, so you must use on-premises AD DS tools to manage these groups. The two overall models are cloud-only and hybrid. Where and how you can manage your user accounts depends on the identity model you want to use for your Microsoft 365. Plan for where and how you will manage your groups You can manage user accounts in the Microsoft 365 admin center, PowerShell, in Active Directory Domain Services (AD DS), or in the Azure Active Directory (Azure AD) admin center. You can manage Microsoft 365 groups in several different ways, depending on your configuration. This article applies to both Microsoft 365 Enterprise and Office 365 Enterprise.
