Ii) Azure AD Join (For Organization Owned Devices) I) Azure AD Registered (For Personal Devices) A user with either of the following role can enable and disable devices in Azure AD: Here we are discussing those devices/systems which can be joined with Azure AD and can be managed using Azure MDM (Mobile Device Management) tools. Then you can add users and / or groups in that AU.

Note: Now, it will take some time to show you the newly created AU. Step-2: Go to the default tenant of your Azure AD Note: Please note that Administrative Units (AUs) can be created / managed / removed either by 'Global Administrator' or 'Privileged Role Administrator'.Ħ- How to create an Administrative Unit (AU)?: This helps in reducing the organizational complexity by logically segregating the users to better manage and control administrative tasks to be performed on different set of users. The AUs are used to organize Azure AD users and to delegate administrative permissions. These are similar to the organizational units (OUs) used in one-premises AD. So, whenever a user becomes a member of this dynamic group appropriate licenses will be allocated and pre-defined AD RBAC (role based access control) role(s) will be assigned to him/her.

Note: Under the dynamic group membership type, the license distribution and role assignment can be automated.

Owner of this group can add / remove licenses, update dynamic membership rules In this type of membership, users are added dynamically to the groups based on the AD users properties. In this type of membership, group owners can add or remove users from group manually. This type is applicable when we have Microsoft 365 licenses and we want to create Microsoft 365 groups for SharePoint Online, Exchange Online etc.įollowing two types of groups membership types are there in Azure AD: These are similar to the security groups managed in on-premises AD to control access / permissions for users, applications etc. To see how users and groups can be created in Azure AD using PowerShell, see my following article on LinkedIn:Īzure Active Directory: Create Users and Groups Using PowerShell 3-Azure AD Group Typesįollowing two types of groups are there in Azure AD: To managed above mentioned types of accounts in Azure AD, either of the following user roles are required:

Admin azure login