How to deactivate auto-approval on self-service group memberships?

Gerrit 0 Reputation points
2023-01-28T13:23:13.1+00:00

Hey,

in Azure AD I activated self-service membership for an AAD security group. But now everbody can join the group directly with hint that it was auto-approved. How can I switch to owner-approval necessary?

BR

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,466 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. JimmySalian-2011 41,916 Reputation points
    2023-01-28T14:04:32.08+00:00

    Hi,

    Do you have AD p1 or p2 license? As this is required and also check the process to disable you will have to click on the toggle button for approval process. - https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-self-service-management

    Hope this helps.

    JS

    ==

    Please Accept the answer if the information helped you. This will help us and others in the community as well.


  2. JamesTran-MSFT 36,371 Reputation points Microsoft Employee
    2023-02-07T21:34:52.47+00:00

    @Gerrit

    Thank you for your post and I apologize for the delayed response!

    I understand that you set up self-service group management in Azure Active Directory. After setting this up, all of your users are able to join the Azure AD Group since they're auto approved. However, you're looking for a way to switch the self-service group management feature so that only the Owner of the Azure AD Group can approve the request to join.

    To switch to owner-approval for a security group in Azure AD

    I hope this helps!

    If you have any other questions, please let me know.