Two Identical Security Group Controls?

Question

Can somebody clarify the distinction between these two setting in the Azure portal?

They seem to both control whether users can create security groups or not.

In User Settings: 'Users can create security groups'

In Groups General: 'Users can create security groups in Azure portals, API or PowerShell'

Answer 1

Hi Jeremy,

Thank you for posting your query on Microsoft Q&A!

The settings you shared both do the same thing, if you toggle this setting in one location it will also change in the other (takes 1-2 mins to reflect in the portal)

Do let me know if you have any further queries and I would be happy to help.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Hi ,

yes ; the first configuration controls whether or not normal users can create security groups via Azure AD interfaces; the second configuration expands this capability to allow creation via PowerShell or API.

I hope this was helfpul .