Topics Map > Campus Services > Office 365

Office 365 - Use of Security Groups to Manage Permissions

What is a mail-enabled security group?

Mail-enabled security groups allow you to streamline the process for assigning and managing multiple permissions for a service.

What do you need to do?

  •  Create a security group
      1. Create a Manifest folder if you do not already have one: Manifest - Request a Manifest Folder.
      2. Create a Manifest group: Manifest - Create a Group.
      3. Add at least one member to the group: Manifest - Manage Group Members. Note: at this time, only user NetIDs can be added to the Manifest group; service accounts cannot be added as members.
      4. Request the group be AD-synced and wait for confirmation that the group has been synced successfully: Manifest - Publish Group to Active Directory Services
      5. Wait 24 hours after confirmation that your group has been synced to AD before moving to the next step and contacting the Office 365 Team.
      6. After at least 24 hours have passed since receiving confirmation that your group has been synced to AD, send an email to Office 365 Document and Support Team with the UUID and Group ID, and request an Office 365 Security Group be created.

        Note: The UUID can be found in the url of the Manifest group. The Group ID will be displayed as the "Name" for this Manifest group.

        As an example, here is a Manifest group url: https://manifest.services.wisc.edu/Group/Index/280abc5d36544efghi8j4k5lmn296770.

        • The UUID is: 280abc5d36544efghi8j4k5lmn296770.
        • The Group ID is: uw:org:<dept>:<group_name></group_name></dept>.

        If the link above (in step 6) does not open a new mail message on your computer/device, please send an email manually with the following details:

        • To: wiscit@doit.wisc.edu
        • Subject: Office 365 request - security group to manage permissions (63382)
        • Body: include all the information listed above

More information on this feature/process

  • All security groups are hidden from the GAL (and can’t be shown), so only Outlook on the Web will recognize them. Mail folder/calendar/resource permissions to a security group must first be assigned via Outlook on the web. You can paste in the email address when assigning the permissions and select “use this address” since it won’t be in the GAL.
  • Once security group permissions are assigned in Outlook on the web, instead of seeing UUID@wisc.edu, you will see the Manifest Group ID.
  • To manage the members of the security group, use Manifest. Please wait 60 minutes for these changes to be reflected within Office 365.
  • If you want to setup a data driven Manifest group, please contact Manifest team.
  • Even though security groups can be used as a mailing list, it is not recommended due to some of its limitations. If your primary goal is to email a group of users, choose from one of these distribution list options.
  • Once the process has been completed, this group will be published to Microsoft Azure.

See Also:



Keywords:microsoft office365 o365 manifest resources calendars folders email assign requesting ad active directory syncing onedrive data service accounts storage   Doc ID:63382
Owner:O365 S.Group:Office 365
Created:2016-05-12 14:05 CSTUpdated:2020-11-13 07:25 CST
Sites:DoIT Help Desk, DoIT Tech Store, Office 365
Feedback:  2   1