Add groups in Intune

Intune uses Azure Active Directory (AD) groups to manage devices and users. As an Intune admin, you can set up groups to suit your organizational needs. Create groups to organize users or devices by geographic location, department, or hardware characteristics. Use groups to manage tasks at scale. For example, you can set policies for many users or deploy apps to a set of devices.

This topic explains how to add groups for use in Intune.

You can add the following types of groups:

  • Assigned groups - Manually add users or devices into a static group
  • Dynamic groups - (Using Azure Active Directory Premium) Let you dynamically build either user or device groups defined with either simple or advanced rules

Add a new group

Use the following steps to create a new group.

  1. In the Azure portal, go Groups and then choose New group in the All groups blade. Screenshot of the Azure portal with New Group selected
  2. Specify the Name and Description of the new group. These properties only appear in the management portal and are not displayed to users.

  3. Choose Membership type:

    • Assigned to create group with manually assigned members. Learn more about Azure AD assigned groups.
    • Dynamic User to create a user group defined with a Dynamic query.
    • Dynamic Device to create a device group defined with a Dynamic query.

    Screenshot of Intune group properties with Name, Description, Membership type, Enable Office features, and Members

    Azure AD lets you create dynamic groups based on rules that define membership. Learn to create attribute-based dynamic groups.

  4. You can select Enable Office features to give user group members access to shared Office 365 apps. Learn more about Office 365 Groups.

  5. Choose Create to add the new group.

See also