Azure AD Groups - chadmcox/Azure_Active_Directory GitHub Wiki

Groups

Group General Settings

(Click Here to open General Settings Blade)

Self Service Group Management

  • Owners can manage group membership requests in the Access Panel: Recommended Yes
  • Restrict user ability to access groups features in the Access Panel. Group and User Admin will have read-only access when the value of this setting is 'Yes': Recommended No

Security Groups

  • Users can create security groups in Azure portals, API or PowerShell: Recommended No

Microsoft 365 Groups

  • Users can create Microsoft 365 groups in Azure portals, API or PowerShell

Directory-wide Groups

Group Expiration Settings

Click Here to open Group Expiration Settings

  • Group lifetime (in days) : Recommended 365
  • Email contact for groups with no owners
  • Enable expiration for these Microsoft 365 groups