Is it possible to set Azure AD directory role via group membership?

Question

Users in Azure AD can have a Directory role of "User", "Global administrator", or "Limited administrator."

Is it possible to grant these roles via group membership?

Answer 1

For now , you cannot assign Directory roles to Azure AD Group.

You can only assign directory to users. See more details about Assigning administrator roles in Azure Active Directory in this document.

Also, you may want to use RBAC to control access to resouces for dictory users and groups. With RBAC, you can assign access to groups and users. The below screenshot shows how to assign access to one Azure AD Group:

See more details about how to assign access to one group in this document.

Hope this helps!

Answer 2

Groups are meant for resource access management. We can’t do operations related to user permissions with the help of groups.