Two Identical Security Group Controls?

Jeremy 116 Reputation points

Can somebody clarify the distinction between these two setting in the Azure portal?

They seem to both control whether users can create security groups or not.

In User Settings: 'Users can create security groups'
User's image

In Groups General: 'Users can create security groups in Azure portals, API or PowerShell'

User's image

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,297 questions
0 comments No comments
{count} votes

Accepted answer
  1. Domooney-MSFT 2,311 Reputation points Microsoft Employee

    Hi Jeremy,

    Thank you for posting your query on Microsoft Q&A!

    The settings you shared both do the same thing, if you toggle this setting in one location it will also change in the other (takes 1-2 mins to reflect in the portal)

    Do let me know if you have any further queries and I would be happy to help.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Achraf Ben Alaya 971 Reputation points MVP

    Hi ,

    yes ; the first configuration controls whether or not normal users can create security groups via Azure AD interfaces; the second configuration expands this capability to allow creation via PowerShell or API.

    I hope this was helfpul .

    0 comments No comments