Manage Groups
When you click a tenant name on the User management page, you switch to the tenant level.
On the User management > Groups page of a specific tenant, you can find groups in different types.
- **Microsoft 365** **Groups**
- **Distribution** **groups**
- **Security** **groups**
- **Mail-enabled** **security** **groups**
You can identify a group’s type from the Source column of the group list.
- **Cloud** – Indicates that the group is stored and managed exclusively within Microsoft Entra ID (cloud-only), with no on-premises association.
- **On-premises** – Indicates that the group is hosted and managed in an on-premises Active Directory (AD) environment, without synchronization to the cloud.
- **Hybrid** – Indicates that the group is synchronized between an on-premises AD and Microsoft Entra ID. This synchronization is typically managed via directory synchronization tools like Azure AD Connect.
During Azure AD Connect setup, administrators can choose which organizational units (OU) to synchronize with the cloud. If a newly created group (security group or distribution group) resides in an OU designated for synchronization, the group will be classified and managed as a hybrid group.
On the User management > Groups page of a specific tenant, you can perform the following operations to manage groups.
- Create a group – For detailed instructions, refer to [Create a Group](#missing-link).
- Edit a group – For detailed instructions, refer to [Edit a Group](#missing-link).
- Delete a group – For detailed instructions, refer to [Delete a Group](#missing-link).
