I am not able to create Group on Microsoft Entra Admin Center

Hello Dhiraj Kumar (NON EA SC ALT)

Thank you for reaching out to Microsoft Q&A.

As discussed over teams, the “Insufficient privileges” error usually means your account doesn’t have the right role or your tenant has group-creation locked down for non-admins. Here’s how to straighten that out:

1. Check your admin role
   • You need at least one of these to create a group in the Entra admin center: • Global Administrator • Privileged Role Administrator (to create role-assignable groups) • Groups Administrator or User Administrator (for basic/security/365 groups)
   • Go to Azure portal → Microsoft Entra ID → Roles and administrators and verify which role(s) you’re assigned.
2. Verify tenant-level group-creation settings
   • Only Global Admins can toggle whether non-admin users can create security or Microsoft 365 groups.
   • In the portal go to Microsoft Entra ID → Groups → All groups → Settings (General) and check: • Users can create security groups in Azure portals • Users can create Office 365 groups in Azure portals
   • If those are OFF, non-admins will always get that insufficient-privileges error.
3. If you’re meant to be non-admin but still create groups
   • Ask a Global Admin to either enable group creation for non-admins (as per step 2) OR assign you one of the group-management roles listed above.
4. Try again
   • After your role or tenant settings change, sign out and back in, then go to Entra ID → Groups → All groups → New group to create.

Follow-up questions (to help narrow things down):

• Which Entra admin role is currently assigned to your user account?

• Are you creating a security group or a Microsoft 365 group?

• Have your Global Administrators disabled group creation for non-admin users?

• Do you have an Entra ID P1/P2 license (needed for role-assignable groups)?

Microsoft docs for your Reference: -

1. Manage groups in Microsoft Entra ID – Create and manage groups: https://docs.microsoft.com/azure/active-directory/fundamentals/active-directory-groups-create-azure-portal
2. Permissions needed to create groups: https://docs.microsoft.com/azure/active-directory/users-groups-roles/directory-assign-admin-roles
3. Manage who can create groups (tenant settings): https://docs.microsoft.com/azure/active-directory/users-groups-roles/groups-settings-v2-cmdlets#create-groups

If the resolution was helpful, kindly take a moment to accept answers and upvote it 👍 it as a token of appreciation.

Thank you for helping to improve Microsoft Q&A!