O365 Group Management Best Practices in RapidIdentity

Prev Next

Office 365 Group Management

RapidIdentity allows for groups designated with the RapidIdentity Roles module to be synced to Office 365 via the Microsoft Graph API.

Note

Microsoft is deprecating distribution lists and planning to replace them with Microsoft 365 Groups.

Microsoft Group Types

Microsoft documentation outlines the following supported groups that can be used via the API.
Working with groups in Microsoft Graph - Microsoft Graph v1.0 - Microsoft Docs

Type Use case mailEnabled securityEnabled Created and managed via API
Microsoft 365 groups Facilitating user collaboration with shared Microsoft online resources TRUE true or false Yes
Security groups Controlling user access to in-app resources FALSE TRUE Yes
Mail-enabled security groups Controlling user access to in-app resources with a shared group mailbox TRUE TRUE No
Distribution groups (deprecated) Distributing mail to the members of the group. It is recommended to use Microsoft 365 groups due to the richer set of resources they provide TRUE FALSE No

Distribution Groups

Even though distribution groups are available within Microsoft 365, the ability to manage them is not available due to the benefits of Microsoft 365 groups. It is suggested to convert these groups to Microsoft 365 groups as per Microsoft's documentation.

If there is still a requirement to manage distribution groups, please discuss options with your project success manager as an additional agent will be required.

RapidIdentity Recommendations

Based on Microsoft's documentation, there are only two groups that are supported natively with the product and that is Microsoft 365 and security groups. Microsoft 365 groups are the suggestion, as they allow for security and the ability to be a mail group. If groups are not meant to be emailed to, then security groups should be used. The purpose of security groups is to limit access to resources in Office 365 (e.g., Sharepoint folders).