| title | Create a Group to Manage Users | |
|---|---|---|
| description | Learn how to create a group in Microsoft Intune and add users to the groups. Use groups to manage user access to company resources and assign policies. | |
| author | nicholasswhite | |
| ms.author | nwhite | |
| ms.date | 01/14/2026 | |
| ms.topic | how-to | |
| ms.reviewer | mattcall | |
| ms.collection |
|
In this article, you use Intune to create a group based on an existing user. Use groups to manage your users and control your employees' access to your company resources. These resources can be part of your company's intranet or can be external resources, such as SharePoint sites, SaaS apps, or web apps.
[!INCLUDE intune-evaluate]
:::row::: :::column span="1"::: [!INCLUDE licensing] :::column-end::: :::column span="3":::
- A Microsoft Intune subscription. Sign up for a free trial account. :::column-end::: :::row-end:::
:::row::: :::column span="1"::: [!INCLUDE rbac] :::column-end::: :::column span="3":::
Sign in to the Microsoft Intune admin center with the following role:
- Built-in User Administrator Microsoft Entra role :::column-end::: :::row-end:::
When you create an Intune subscription, Intune automatically creates the All Users and All Devices groups. These groups have built-in optimizations. Use these groups when you want to apply policies to all users or all devices in your organization.
When you create your policies, assign your policies to these built-in groups or the groups you create.
For more information about using groups in Intune, like using filters, and assigning to user groups vs. device groups, see:
In this step, you create a group. You use this group later in another task in this evaluation series.
To create a group:
-
In the Microsoft Intune admin center, select Groups > New group.
-
In the Group type dropdown box, select Security.
-
In the Group name field, enter the name for the new group (for example, Contoso Testers).
-
Add a Group description for the group.
-
Set the Membership type to Assigned.
-
Under Members, select the link and add one or more members for the group from the list. If you created a user in Step 2 - Create a user in Intune and assign the user a license, you can add that user to this group.
:::image type="content" source="./media/quickstart-create-group/quickstart-use-groups-01.png" alt-text="Screenshot of creating a group in Microsoft Intune." lightbox="./media/quickstart-create-group/quickstart-use-groups-01.png":::
-
Choose Select > Create.
After you create the group, it appears in the list of All groups.
Note
By using the added support for soft-deleting groups by Microsoft Entra, Intune displays those groups as soft deleted in the admin center when they're in that state. When you soft-delete groups, the process removes their assignments. When you restore these groups, the process also restores any policy assignments.
In this article, you used Intune to create a group based on an existing user. For more information about adding groups to Intune, see Add groups to organize users and devices.
To continue evaluating Microsoft Intune, go to the next step:
[!div class="nextstepaction"] Step 4 - Set up automatic enrollment for Windows devices