Assigning roles to groups imported from Microsoft Entra ID

2026-03-03Last updated

To allocate the correct permissions that users require to perform their day-to-day tasks, you must assign roles to the groups imported from Microsoft Entra ID into Security Center SaaS.

Before you begin

Set up automatic user provisioning.

Procedure

  1. In the Configuration task, click Users.
    On the Users page, if a yellow dot is visible beside the Groups tab, action is required for one or more groups.
    Groups tab in the Configuration task with a yellow dot indicating that action is required for one or more groups.
  2. Click the Groups tab.
    Note:
    Groups that are automatically provisioned are displayed with Microsoft Entra ID in the Source column.
  3. In the Roles column, look for groups that don’t have a role specified and click Assign role and select a role.
    Groups tab in the Configuration task showing the assign role option and a group with no role assigned.

After you finish

(Optional) Modify group synchronization settings.