Understanding Microsoft 365 Groups: A Comprehensive Guide
Cloud and systems engineer with a strong foundation in networking, automation, and infrastructure design. I write about real-world challenges, best practices, and evolving trends in cloud computing, system administration, and network architecture.
🔑 What are Groups in Microsoft 365?
Groups allow organizations to manage users collectively instead of assigning permissions one by one.
A group = a set of users (Microsoft Entra ID accounts) + permissions/resources tied to that group.
Benefits:
Centralized access management (SharePoint, OneDrive, Teams, Planner, etc.).
Easy collaboration (shared mailbox, files, calendars).
Simplifies conditional access and security.
🏷️ Types of Groups in Microsoft 365
| Group Type | Description | When to Use | Where to Create |
| Microsoft 365 Group | Email + shared workspace (mailbox, calendar, SharePoint site, Planner, Teams, OneNote). Recommended for collaboration. | When team collaboration + distribution list features are needed. | Admin center, Entra ID, Outlook, Teams, SharePoint, Planner, Viva Engage |
| Distribution Group (List) | Used for sending email notifications to multiple people. No collaboration features. | When you only need group email distribution. | Admin center, Exchange admin center |
| Mail-Enabled Security Group | Acts as both security group (permissions) + distribution list (mail). | When you need both email distribution + access control. | Admin center, Exchange admin center |
| Security Group | For assigning permissions to resources (SharePoint, OneDrive, apps). No mailbox. | When you only need permissions, no email. | Admin center, Entra admin center |
| Dynamic Distribution Group | Membership auto-managed based on rules (e.g., all users in “HR Department”). Email-only, no Teams/SharePoint. | When group membership should update automatically. | Exchange admin center, PowerShell |
| Shared Mailbox | Single mailbox used by multiple users (e.g., support@contoso.com). | When a group of people must send/receive emails from one address. | Admin center, Entra admin center |
📂 Collaboration Spaces with Microsoft 365 Groups
When you create a Microsoft 365 Group, you also get:
Shared Outlook inbox
Shared Outlook calendar
SharePoint team site + document library
Planner board
Power BI workspace
Yammer/Viva Engage group (if created from there)
Microsoft Teams (if created in Teams)
OneNote notebook
⚠️ Note: Teams and Viva Engage can’t be connected to the same group.
🔄 Microsoft 365 Groups + Teams Integration
A Team = Microsoft 365 Group + collaboration features (chat, channels, etc.).
Creating a Team in Teams automatically creates an M365 group (if not already existing).
If you create a group in Outlook or SharePoint, you can later connect it to Teams.
Group mailbox visibility:
Created in Teams → Mailbox hidden in Outlook.
Created in Outlook → Mailbox visible.
Can be changed with PowerShell:
Set-UnifiedGroup -Identity "GroupName" -HiddenFromExchangeClientsEnabled $false
👥 Group Membership Management
Removing someone from a Team → Removes them from the linked M365 group instantly.
Removing someone from the Group (via Admin Center, Entra, or PowerShell) → Access revoked, but Teams client may take up to 24 hours to reflect.
Best practice ✅: Manage membership directly in Teams for faster sync across workloads.
🗑️ Deleting Groups & Teams
Deleting an M365 Group →
Removes mailbox alias (Outlook/OWA).
Marks associated SharePoint site for deletion.
Takes ~20 min to reflect in Outlook.
Deleting a Team →
- Removed immediately from Teams app.
Removing users from group linked to Teams → Delay (~2 hours) before the team disappears for removed members.
⚙️ PowerShell Commands (Quick Reference)
Create Microsoft 365 Group
New-UnifiedGroup -DisplayName "Sales Team" -Alias "sales" -EmailAddresses "sales@contoso.com"Add Member to Group
Add-UnifiedGroupLinks -Identity "Sales Team" -LinkType Members -Links user@contoso.comRemove Member from Group
Remove-UnifiedGroupLinks -Identity "Sales Team" -LinkType Members -Links user@contoso.comDelete Group
Remove-UnifiedGroup -Identity "Sales Team"
✅ Best Practices for Study & Real-World Use
Use Microsoft 365 Groups for most collaboration needs.
Use Security Groups when only permissions are needed.
Use Distribution Groups for email-only scenarios.
Use Dynamic Distribution Groups to automate membership.
Manage Teams membership inside Teams for faster updates.
Regularly review groups for stale/unused ones → reduce clutter + security risks.
⚡ Quick Memory Trick for Exams:
M365 Group = “Collaboration + Email”
Distribution Group = “Email only”
Mail-enabled Security Group = “Permissions + Email”
Security Group = “Permissions only”
Dynamic Distribution = “Email + Auto-membership”
Shared Mailbox = “Shared Email Identity”
