Creating a new group in intune

In the Intune admin center, all groups are actually Microsoft Entra ID groups. For use with Intune, groups must be security-enabled and can use Assigned, Dynamic User, or Dynamic Device membership.

If only Microsoft 365 appears as the group type and membership is greyed out, the behavior is typically due to how and where the group is being created/managed:

1. Groups created from the Intune admin center use the Entra “New group” pane
   When creating groups for Intune, use:
   • Microsoft Intune admin center → Groups → New group.
     In this pane, Group type must be set to Security for Intune-supported groups, and Membership type can then be:
   • Assigned – manually add users/devices.
   • Dynamic User – automatic user membership via rules.
   • Dynamic Device – automatic device membership via rules.
2. Intune requires security-enabled groups
   Intune does not support standard (non–security-enabled) Microsoft 365 groups for assignments. The documentation explicitly states that:
   • Groups used with Intune must be Security groups.
   • Default Microsoft 365 groups are not security-enabled and are not supported by Intune.
3. Membership options depend on group type and configuration
   In the Intune “New group” pane:
   • If Membership type is Assigned, members are added via No members selected (Users/Devices/Groups tabs). If this is greyed out, it usually indicates the group is not being created as a security group in the correct pane.
   • If Membership type is Dynamic User or Dynamic Device, membership is controlled by a dynamic query, not manual add; manual add is not available for those types.
4. Permissions and RBAC can affect what is editable
   • Any Entra user can create groups by default, but only the creator, owners, or users with appropriate Entra RBAC (for example, Groups Administrator) can edit group properties and membership.
   • If the account does not have rights on an existing group, membership controls can appear disabled.

To resolve the issue:

1. In the Microsoft Intune admin center, go to Groups → New group and ensure:
   • Group type = Security.
   • Membership type = Assigned if manual membership is needed.
2. Confirm the account is either:
   • The creator/owner of the group, or
   • Assigned an Entra role such as Groups Administrator if editing groups created by others.

References:

• Step 3 - Create a group to manage users
• Use groups to organize users and devices for Microsoft Intune