Edit

Share via

Step 3: Create a Group to Manage Users

In this article, you use Intune to create a group based on an existing user. Groups are used to manage your users and control your employees' access to your company resources. These resources can be part of your company's intranet or can be external resources, such as SharePoint sites, SaaS apps, or web apps.

Note

Use the information provided in this series of topics to try and evaluate Microsoft Intune. When you're ready, follow the complete process to set up Intune. For more information, see Set up Microsoft Intune.

If you don't have an Intune subscription, sign up for a free trial account.

Note

Intune provides precreated All Users and All Devices groups in the console with built-in optimizations for your convenience.

Prerequisites

Sign in to the Microsoft Intune admin center

Sign in to Microsoft Intune admin center as the built-in User Administrator Microsoft Entra role.

If you created an Intune Trial subscription, the account that created the subscription is a Microsoft Entra Global Administrator.

Caution

The Global Administrator built-in role is a privileged Microsoft Entra role, and has more permissions than needed for Intune. To reduce risk, don't use the Global Administrator role to manage Intune.

Assign the least-privileged role that can complete the task. For more information on the built-in roles and what they can do, see Role-based access control (RBAC) with Intune and Built-in role permissions for Intune.

Create a group

You create a group that is used later in this evaluation series. To create a group:

  1. Once you open the Microsoft Intune admin center, select Groups > New group.

  2. In the Group type dropdown box, select Security.

  3. In the Group name field, enter the name for the new group (for example, Contoso Testers).

  4. Add a Group description for the group.

  5. Set the Membership type to Assigned.

  6. Under Members, select the link and add one or more members for the group from the list.

    Screenshot of creating a group in Microsoft Intune

  7. Choose Select > Create.

Once you create the group, it appears in the list of All groups.

Note

With the added support for soft-deleting groups by Microsoft Entra, Intune displays those groups as soft deleted in the console when they are in that state. When groups are soft-deleted, their assignments are removed. Any restoration of the groups restores the assignments to those groups.

Next steps

In this article, you used Intune to create a group based on an existing user. For more information about adding groups to Intune, see Add groups to organize users and devices.

To continue to evaluate Microsoft Intune, go to the next step:

Step 4 - Set up automatic enrollment for Windows devices

  • Last updated on