Today we will discuss how to create groups in Intune. Groups are used to control which devices or users receive your organization’s custom configurations, policies, applications, or permissions.

For instance, when we uploaded our SQL Server 2022 .intunewin package, we decided that the application would only be installed to in a group called Install – SQL Server 2022 Dev Edition.

Let’s break it down ↓

1. Login to the Intune Admin Center then click on the Groups section.

2. Click New Group.

3. On the New Group page, the type of group can be configured, along with the Owners and Members of the group.

• Group Type
  • Security – Can be users or devices. Use this to deploy applications or policies.
  • Microsoft 365 – Can only be users. Used for SharePoint sites, shared mailboxes, calendar, etc.
    
    *When you create a Microsoft Team in the Microsoft 365 Admin Center, that group is automatically created as a Microsoft 365 group along with an associated email address.
    
• Group Name
  • Create a custom name for your group.
    
• Microsoft Entra Roles
  • Assign roles which delegate permissions across your organization to the group.
    
    *Example roles are Exchange Administrator, Groups Administrator, and Intune Administrator.
    
• Membership Type
  • Assigned – Manually assign users, groups, devices, or enterprise applications to the group.
  • Dynamic User – Use a query to automatically assign users to the group.
  • Dynamic Device – Use a query to automatically assign devices to the group.
    
    *Using a dynamic membership type makes the group a dynamic group versus an assigned group.
    
• Owners
  • Intune user who can make changes to the group once it is created.
    
• Members
  • Users, devices, groups, etc. who will receive the policy, configuration, or application the group is assigned to.

4. Once all the mandatory fields denoted with * are filled out, click Create. The group is created and shown in the Groups section of the Intune Admin Center.