Two Identical Security Group Controls?

Jeremy 116 Reputation points
2024-03-19T14:47:03.6533333+00:00

Can somebody clarify the distinction between these two setting in the Azure portal?

They seem to both control whether users can create security groups or not.

In User Settings: 'Users can create security groups'
User's image

In Groups General: 'Users can create security groups in Azure portals, API or PowerShell'

User's image

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,297 questions
0 comments No comments
{count} votes

Accepted answer
  1. Domooney-MSFT 2,311 Reputation points Microsoft Employee
    2024-03-19T14:59:16+00:00

    Hi Jeremy,

    Thank you for posting your query on Microsoft Q&A!

    The settings you shared both do the same thing, if you toggle this setting in one location it will also change in the other (takes 1-2 mins to reflect in the portal)

    Do let me know if you have any further queries and I would be happy to help.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    1 person found this answer helpful.
    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Achraf Ben Alaya 971 Reputation points MVP
    2024-03-19T15:43:09.7433333+00:00

    Hi ,

    yes ; the first configuration controls whether or not normal users can create security groups via Azure AD interfaces; the second configuration expands this capability to allow creation via PowerShell or API.

    I hope this was helfpul .

    0 comments No comments