How to set up self-service group management in Microsoft Entra ID

Self-service group management helps administrators delegate access rights to group owners, allowing them to create groups and approve or deny membership requests without the administrator's intervention. This reduces the administrator's workload and streamlines access management.

Follow the steps below to make a group available for user self-service.

1. Sign in to the Microsoft Entra admin center as at least a Groups Administrator.
2. Select Microsoft Entra ID.
3. Select All groups -> Groups, and then select General settings.
4. Set Owners can manage group membership requests in the Access Panel to Yes.
5. Set Restrict user ability to access groups features in the Access Panel to No.
6. Set Users can create security groups in Azure portals, API or PowerShell to Yes or No.
7. Set Users can create Microsoft 365 groups in Azure portals, API or PowerShell to Yes orNo.

Manage Entra ID groups and more with M365 Manager Plus

M365 Manager Plus is an extensive Microsoft 365 tool used for reporting, managing, monitoring, auditing, and creating alerts for critical incidents. With M365 Manager Plus, you can:

• Perform bulk operations like password resets and account unlock without using PowerShell scripts.
• Report and audit with over 700 pre-packaged reports to track changes and get better visibility on your services.
• Automate routine tasks like user provisioning, stale group cleanup, and mailbox management operations.
• Monitor the health of Microsoft 365 services and get notified on critical activities and outages.
• Create custom granular roles to delegate Microsoft 365 administration to technicians.