Permission & Access Issues

How to Automatically Add New Employees to SharePoint Security Groups

Amos Gikunda Oct 8, 2026 869 views

Question details

The organization needs a way to automate location-based access to SharePoint resources for new employees.

How to Automatically Add Employees to SharePoint Security Groups

Product: Microsoft SharePoint
Device & OS: not provided
Scenario: HR provides weekly lists of new employees, and administrators want to automate assigning them to location-specific SharePoint groups instead of doing it manually.
Observed behavior: Currently, administrators must manually add new employees to SharePoint security groups, which is a time-consuming process prone to human error.

Before you start

Ensure you have SharePoint Administrator or Global Administrator privileges, as well as access to Microsoft Entra ID (formerly Azure AD) or Power Automate to modify automated security group policies.

Solution 1Recommended

Set Up Microsoft Entra ID Dynamic Security Groups

Create dynamic groups in Entra ID that automatically add or remove users based on their location attribute, then assign these groups to SharePoint.

Using Microsoft Entra ID (Azure AD) dynamic groups is the most robust method for automating access. Once configured, group membership updates automatically when HR updates a user's profile location.

Access Microsoft Entra ID

Create a New Group

Navigate to 'Groups' > 'All groups', and select 'New group'. Set the group type to 'Security'.

Configure Dynamic Membership

Change the 'Membership type' from Assigned to 'Dynamic User'.

Build the Dynamic Query

Click 'Add dynamic query' and set the rule based on the 'Location' or 'Country' attribute (e.g., user.country -eq "US"). Save the group.

Assign Group to SharePoint

Navigate to your SharePoint site, open 'Site permissions', and grant the desired access level (e.g., Read, Edit) to the newly created Entra ID dynamic group.

Set Up Microsoft Entra ID Dynamic Security Groups

License Requirement: Microsoft Entra ID P1 or P2 licenses are required for the tenant to create and manage dynamic user groups.

Solution 2

Automate Group Assignment with Power Automate

Build a custom Power Automate flow that triggers when a new user is created or added to an HR list, automatically assigning them to the correct SharePoint site group.

Free Microsoft Office alternative

Looking for a Lightweight Alternative for Document Collaboration?

While SharePoint manages complex enterprise permissions, WPS Office provides a streamlined, highly compatible platform for everyday document editing and team collaboration without the heavy administrative overhead.

1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the downloaded installer and follow the on-screen prompts to complete the quick setup process.
3. Open and Collaborate: Launch WPS Office, sign in to your account, and instantly open your existing Microsoft Office files to start collaborating.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Built-in cloud collaboration tools for real-time document editing.Lightweight installation and intuitive interface familiar to Office users.Free basic version available for seamless team migration.

microsoft office alternative - wps office

Frequently Asked Questions

Can I use standard SharePoint groups for automated location-based access?

No. Standard SharePoint groups require manual user management. To fully automate membership based on user attributes like location or department, you must utilize Microsoft Entra ID dynamic groups or a Power Automate flow.

How often do Microsoft Entra ID dynamic groups update their membership?

Dynamic group memberships are typically processed and updated automatically within a few minutes after a user's attribute (like location) is changed in the directory. However, for very large organizations, it can occasionally take up to 24 hours to reflect across all services.

Do I need a premium license to use Power Automate for SharePoint permissions?

Using the 'Send an HTTP request to SharePoint' action in Power Automate is generally included in standard Microsoft 365 licensing and does not require a premium Power Automate license, making it a cost-effective alternative to Entra ID P1.

Document & File Issues