Chat now with support
Chat with Support

On Demand Group Management Current - Release Notes


New features

  • Added ability to create on-premises groups.
    • The Settings page now includes a new tile "Organizational Units" where you can configure the default OU for the on-premises groups created in Group Management.
  • Added a new group setting "Group Creation Template for Self-Service" on Settings > Policies.
    • This setting is a part of the group category, and defines location, type, scope, and domain for groups created through self-service.
    • Users can now select a template to apply the defined values when they create a group in the self-service portal.
  • Added support for Europe and Canada Azure regions.


New features

  • Added support for hybrid environment: Group Management not only supports pure Azure environment, but also manages groups from on-premises AD domains that are integrated with an Azure AD using Azure AD Connect.
    NOTE: An agent must be installed in your local network to manage on-premises groups. Before the installation, the agent installer must be extracted to a folder, and ensure that the file bin\OPGMService.exe in the folder is unblocked.
  • Moved tenant settings to the organization level.
    • The settings are now shared across all the directories added to your organization.
    • Added default approval process for self-services.
  • Added a new step to the attestation process for group owners. The group owner now has the option to remove group members after selecting to keep the group.
  • Added capabilities to the role Group Management administrator:
    • Approve or reject a request on behalf of the current approver.
    • Cancel a request on behalf of the requester.
  • Redesigned Dashboard.
  • Redesigned the Activities tab in the admin portal.
    • Added a new sub tab "Admin Approvals" to show all the requests pending approval by Group Management administrator.
    • Renamed the sub tab "Admin Services" to "Admin Attestations".
    • Renamed the sub tab "Auto Services" to "Auto Attestations".
  • Changed the page where users are redirected to after logging in to the self-service portal. The My Approvals page now opens after users log in successfully.

Deprecated features

  • Resource management: Removed all features and settings related to the resource management.
  • User management: Removed all features and settings related to the user management.
  • Role management: Removed the "Roles" and "Directory Administrators" tiles from the Settings page.
  • Notification service: Removed the notification Inbox at the top right of the page.


New features

  • Support for security groups and distribution groups in on-premiese AD domains:
    • Introduced group roles Owner and Member for management purpose.
    • Users can now join or leave a group as group member via self-services.
    • Existing groups can be categorized for automatic attestations.
  • Enhancements for Azure ADs:
    • Introduced the Service Account setting for creating mail-enabled security groups and distribution lists.
    • Added ability to suspend or resume a resource.
  • Group Management now supports for these Azure regions:
    • United States
    • Europe

Resolved issues

Resolved Issue Issue ID
Cannot create mail-enabled security groups in Group Management. 626
Distribution Lists cannot be created successfully via Graph API. 573


New features

  • Group management:
    • Support for Office 365 groups, security groups (including mail-enabled security groups), and distribution lists.
    • Introduced group roles Owner and Member for management purpose.
  •  Resource management:
    • Permissions to a resource in Group Management are managed by roles, and custom roles can be created and assigned to users.
    • Resource permissions can be granted to the roles directly within Group Management for resources of these built-in types: Office 365 License, Microsoft OneDrive and GM.
  • Group Management roles:
    • Global Administrator: Manages global settings and directory administrators for all the directories within an organization.
    • Directory Administrator: Accesses to all the administrative features for a directory, such as defining self-service approval processes, setting policies for users, groups, and resources in the directory.
    • General User: Uses self-services to create, join/leave, and attest a group or a resource.
  • Regular synchronization between Group Management and Azure AD at a specified interval.
    • Synchronization direction can be set for users and groups separately.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating