Security Policy Errors

How to Allow Security Group Owners to Manage Members in Microsoft Entra

WPS Editor Sep 25, 2026 869 views

Question details

The user wants to enable security group owners to manage group memberships autonomously, allowing them to add or remove users without requiring an administrator.

How to Allow Security Group Owners to Manage Members in Microsoft Entra

Product: Microsoft Entra
Device & OS: not provided
Scenario: A security group owner needs to manage their group members directly through a self-service portal.
Observed behavior: Currently, managing security group members requires an administrator's intervention, but the goal is to shift this responsibility to the group owners using the My Groups portal.

Before you start

Ensure you have the exact credentials of the designated group owner's account and verify that the tenant administrator has enabled self-service group management.

Solution 1Recommended

Manage Security Group Members via Microsoft Entra My Groups Portal

Group owners can use the My Groups portal to handle self-service membership changes directly.

The My Groups portal provides a dedicated and secure interface for group owners to add or remove members, bypassing the need for IT administrator assistance, provided that the tenant's security policies permit self-service management.

Access the My Groups Portal

Navigate to the My Groups portal at https://myaccount.microsoft.com/groups in your web browser.

Sign In

Select the Security Group

Under the 'Groups I own' section, locate and select the specific security group you wish to manage.

Manage Memberships

Click on 'Members' to view the current user list. Use the 'Add members' button to invite new users or the 'Remove' button next to a user's name to revoke their group access.

Manage Security Group Members via Microsoft Entra My Groups Portal

Admin Configuration Required: If the options to add or remove members are disabled or not visible, an identity administrator must first enable self-service group management within the Microsoft Entra admin center.

Solution 2

Enable Self-Service Group Management (For Administrators)

If owners cannot manage their groups, administrators must adjust the tenant settings to permit self-service.

Free Microsoft Office alternative

Streamline Your IT Documentation with WPS Office

While managing Microsoft Entra security groups requires specific administrative portals, handling your IT documentation, user guides, and policies shouldn't be complex. WPS Office is a free, lightweight suite that is fully compatible with Microsoft Office formats, offering a familiar interface to keep your team productive.

Fully compatible with Microsoft Word, Excel, and PowerPoint formats (.docx, .xlsx, .pptx).Lightweight design ensures fast loading times for large IT reports and policy documents.Familiar, easy-to-use tabbed interface allows seamless migration from Microsoft Office.Free built-in PDF editing tools for secure sharing of security protocols and user guidelines.

microsoft office alternative - wps office

Frequently Asked Questions

Why can't I see the 'Add members' button in the My Groups portal?

The button may be missing if you are not officially assigned as the owner of the security group, or if the tenant administrator has not yet enabled self-service group management policies in Microsoft Entra.

Can a regular member add other users to a Microsoft Entra security group?

No, only users with the explicitly assigned Group Owner role or higher administrative privileges can add or remove members within a Microsoft Entra security group.

Does self-service management work for synchronized on-premises groups?

No, security groups that are synchronized from an on-premises Active Directory must be managed on-premises. Self-service group management in Microsoft Entra only applies to cloud-only groups.

Microsoft Office Security Issues