Part 3 - Office365 -Identity and Access - Users, Groups & Devices

In this blog, we will explore the identity management section of Azure AD.

Create AD Groups

There are three groups in Azure

Security Group – eg: Marketing Any users in the Marketing group, will gain access to that group
Microsoft365 – provides collaboration options such as access to a shared mailbox, files, SharePoint site, etc.
Dynamic Group – Allows grouping of users based on location, department, etc

Let’s begin by creating a dynamic group in Azure for our Norfolk Office

We will choose Dynamic Group as we will want to group users later based on the office location they work

Every group should have a group owner so we’ve added one here.

Creating Users

Since we choose to add users dynamically via their office location, our users will be automatically added to the group when the office location is set to Norfolk.

Password Reset Registration

Self-service password resets can be done via the below tab

We will add email/phone authentication

Notify users about events on password resets

Assigning Users to Groups

Go to groups, add memberships and choose to add the user. As a group owner we can add members into a group.

Assigning Licenses to Individual Users

Microsoft 365 licenses can be applied at the individual user level or at the group so here is the method to assign licenses at a user level.

Add the license required

Our license is thus entitled to the user.

Assigning Licenses to Groups

Rather than assigning licenses at an individual user level, it’s much faster and recommended to do the assignment at the group level and this happens under the licenses tab at the Group level. When you add a member to this group, you get licenses automatically, and when you remove the user losses his licenses as well.