Why Can't I Manage Cloud Security Groups in Azure?
Asked by
TechWiz42
Hey everyone! I'm reaching out for some clarification about managing Cloud Security Groups in my Azure Tenant. Even though I've been granted both Group Administrator and User Administrator roles, I'm running into issues when trying to add or remove members from these groups. Here's what I know:
- Group Administrators seem to have no trouble managing groups.
- Security group owners can add or remove members without any issues.
- I'm able to handle O365 Groups just fine with the same permissions.
- Members can be added or removed from Cloud Based Security Groups in the O365 Admin Portal.
The problem arises specifically with Azure Roles. Both User Administrators and Group Administrators can't manage Cloud Based Security Groups in the Azure Portal, and I'm not referring to On-Prem AD or Mail Enabled groups. Is this the expected behavior? I've searched official documentation but haven't been able to find a clear answer.
Answers
Yeah, I've had a similar issue before. It's often related to role assignments in Azure. Ensure that the group you’re trying to manage has the right permissions set up for admin roles. If they don’t, that could be why changes are getting blocked.
Reply to this answer
Have you checked if those groups are configured to allow admin role assignments? Sometimes there are specific settings that need to be enabled for full access, even for admins. It might be worth verifying that setting in your Azure Portal.
Reply to this answer
Add your answer
Answers are reviewed before publication.
Related Discussions