azureazure-active-directorygroup-membership

How to add a security group as a member of another security group in Azure AD B2C tenant?


I have 2 security groups in AzureAD(B2C tenant) and I want one to be a member of another group. In the GUI, the group is not found when I try to add a new member. I tried to do this with terraform (via Microsoft Graph) and this fails as well.

Microsoft documentation suggests that this is possible.

Is there something I am missing, or does it require e.g. Premium account (nothing like that is mentioned in the docs)?


Solution

  • Azure AD nested groups is not supported in Azure AD B2C tenant. Azure AD B2C tenant nested groups

    However you can add an existing Security group to another existing Security group in regular AzureAD tenant (also known as nested groups), creating a member group (subgroup) and a parent group.

    You do not need to have AzureAD Premium account in .

    You can add security group into another security group using following steps:

    Here is a screenshot from my AzureAD enter image description here

    enter image description here

    https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-groups-membership-azure-portal#add-a-group-to-another-group