Tenant setup 03 β Security groups
π Complete tenant-setup cookbook in one PDF This article is part of the series. Full series + screenshots in one document: download PDF . (PDF is currently in Czech.
This article is part of the series. Full series + screenshots in one document: download PDF. (PDF is currently in Czech.)
However tedious it feels, having a system in your M365 configuration is absolutely critical. There are too many settings across the portals and most things can be configured in several places. Anything you do, anything you do to a group of people or devices, should be tagged with a so-called security group. Pick a naming convention up front so you don't get lost.
How to create a security group: there are several entry points, but I'll show you the Microsoft-recommended one β https://entra.microsoft.com/. Open Groups and create either an Assigned group (you add members manually β good for things that change rarely) or a Dynamic group (membership is computed from a query β Dynamic User or Dynamic Device).
Example dynamic device rule for HP devices: (device.deviceManufacturer -eq "HP"). Membership propagation can take 15β30 minutes even on small tenants, so don't panic if it isn't immediate.