Intro – Office 365 Distribution Group vs. Security GroupWhile Office 365 is a powerful and extremely popular tool, the vastness of its features and options can be confusing! Today, we’ll explore the various permission group options in Office 365 and the difference between them. Making the right choice between these groups will help save you trouble down the road since it affects how to use groups. Choosing the appropriate permission group here in Office 365 will help you and your colleagues become more efficient. Show Office 365 Distribution GroupsAn Office 365 distribution group is a group of users that is mail-enabled (you can send emails to this group email account, and by doing that, all listed users will also be emailed automatically rather than having to email them all individually). Some advantages of using a distribution group for emailing is that you can set certain options, such as permitting emails to be sent to external users in the group:  An Office 365 Distribution Group will get it’s own dedicated email address, and when a user wants to send an email to a group of people, e.g., the finance department with seven employees, the user will send an email to the group he created called “Finance,” instead of sending it to each of the seven members individually. Visibility in the Global Address ListAnother advantage is that the distribution groups you have are visible in the global address list, which means all users can see and find this group in Outlook, for example. Then, users don’t need to create their own email groups because users share them. The first time the end user uses the distribution group, it gets cached in the Outlook profile so the next time the user won’t have to type the complete name or email address. Common QuestionsSo the common questions are: Outlook Contact GroupAn Outlook Contact Group is local to your machine, it is created using Microsoft Outlook and you can store multiple contacts into a ‘group’: Outlook Groups are more difficult to manage if you have multiple machines/devices. For example: a desktop PC and Laptop, local Outlook groups will not automatically sync between the computers. Outlook Contact Group vs Distribution Group
Dynamic Distribution GroupsDynamic Distribution Groups behave just like regular Distribution Groups above, however the memberships are automatically calculated. This is from Technet:“Unlike regular distribution groups that contain a defined set of members, the membership list for dynamic distribution groups is calculated each time a message is sent to the group, based on the filters and conditions that you define. When an email message is sent to a dynamic distribution group, it’s delivered to all recipients in the organization that match the criteria defined for that group.” Dynamic Distribution Groups are more Powerful (and can be more complex)For example, you can use PowerShell or the Office 365 Exchange Admin Center UI to create one of these and you have the options below to specify criteria that will dynamically build/grab the members. Benefits of Dynamic Distribution Groups? (over non-dynamic)This can be very useful when dealing with many users and many frequent changes/additions/removals of users, and helps prevent mistakes since these are just created once and the OU structure should normally not change very often. Both Distribution Groups and Dynamic Distribution Groups require maintenance. Maintenance for a regular Distribution Group can be delegated out to the users, the Dynamic Distribution Groups changes would require someone more technical, such as someone on the IT team to either change the logic inside the list, or change entries in AD for one or more users. Security GroupsThere are two types of security groups:
1. Security GroupA security group is used to assign permission to a set of users to grant access to things, such as to a SharePoint Site, Web Pages, an entire SharePoint List or Document Library, or even just some files, etc. Also, a security group is for users who may have a common set of permissions. In this way, an Administrator can assign certain permissions (such as for SharePoint Site access) to all users in this group instead of having to enter each person individually. Let’s say, for example, five members need the edit permission to a folder or SharePoint Library. The administrator can use a security group, which contains all the members who need access, instead of assigning the permissions to each user individually, and assign this Security Group to the folder or SharePoint Library. Easier to Manage Permissions/SecurityOnce the admin assigns permission to a security group, and in case the admin wants to give the same level of permission to more users, he/she can select the security group itself and add a member (or members) either from the Office 365 Admin Center, or using Exchange Admin Center, as show below: Office 365 Admin Center to Manage MembersBelow I have Office 365 groups listed, however your ‘Distribution Groups’ and ‘Security Groups’ can also be listed and managed here.
What is the difference between a Security group and a Distribution group?Unlike the distribution group, a security group can manage permissions for the users. The distribution group is used only to send emails to multiple users (who are members of that distribution group). Also, if you’re using synchronized identity through the AD, the security group is also used to assign permissions to users in the Active Directory. 2. Mail-Enabled Security GroupIf we mail-enable the security group, we can send e-mail to all members of that group. For example, if you create a security group that gives members access to the RBAC (Role-based Access control) roles in Office 365, you may want to send an email to that group to notify them about their permissions. Unlike a distribution group, a mail-enabled security group is used to BOTH manage permissions AND send emails to users. Office 365 GroupsThe latest addition to these ‘permission group’ options are ‘Office 365 Groups’. An Office 365 group is used to communicate, collaborate and schedule meetings or events with group members. Users can create, find and join groups right from their inboxes. Once users create a group or join a group, they can start sharing files and collaborate with each other. Office 365 Groups add an Azure AD Group (similar to a Security Group) as well as a SharePoint site (for sharing documents and other information), as well as a ‘group’ email address, similar to a Distribution List. The ‘group email address’ will also appear in the Global Address List (on by default) and therefore will show up in Outlook for everyone in your organization. Similar to Distribution ListsAs mentioned above, it is worth repeating that Office 365 groups support group emails, like a distribution list, and appear in the Global Address List. So a user can send an email to the Office 365 group email account, and all members will receive the email (instead of having to email all users individually). You can also configure the addresses to be available only to internal organization members or allowed to be emailed by external users. Office 365 groups also allow you to use the group to set and apply permissions, like a security group. In addition, an Office 365 group has collaboration and social features built into it as shown above. Office 365 Groups – are Social: Private and PublicWhen users first create an Office 365 group, they can choose to make the group public or private. Earlier in Office 365, they couldn’t change the privacy settings after they created the group. Now, users can change the privacy settings on an Office 365 group, in Outlook on the web, after they’ve created it. For example, a user creates a group for the human resources team in their company and made it a public group, but now, the user would like to make it a private group. They can easily change the privacy settings in a few steps as shown below:
You can use your Office 365 with Microsoft Teams to manage tasks using Planner, open files in SharePoint, set calendar dates for the teams, discuss projects and channels using chat, video or voice calling, which is built on top of Skype. To learn more about Microsoft Teams, visit here: https://teams.microsoft.com As an end user, you own any existing Office 365 group and can add it to Microsoft Teams here https://teams.microsoft.com. Otherwise, if you create a team from within the Microsoft Teams application or the team’s website here https://teams.microsoft.com, it automatically creates an Office 365 group with the same name for you. For example:
Note: if you opt out of an existing Office 365 group that you own, and you create a new team in Microsoft Teams, it will also create an Office 365 group as well. With Teams Integration, a company can empower individuals and teams to collaborate for teamwork, offer a chat-based work space and customization options. The screenshot below shows a glimpse of Teams Integration with Office 365 Groups:
Some How-to’s about Office 365 Groups for AdministratorsTeam site created by Office 365 Groups—not found in Site Collections List in SharePoint Administration Site?How do you find the Office 365 Group SharePoint Team site? “Classic SharePoint Administration” By default, in Office 365 Administration under ‘SharePoint Admin Center Classic view’, team sites created with Office 365 group are hidden and not visible. It will only list SharePoint sites that are NOT associated with Office 365 Groups. Bah! Don’t Fret! Use the new SharePoint Administration Center to view your Office 365 Group SharePoint sites: As an admin, to view these sites, the administrator can use PowerShell (shown below) commands: This is the same way you would access and get information from normal team sites as well.
Connect SPOService: https://mycompany-admin.sharepoint.com Note: In this case, the Office 365 group that I created was “test12” After running this command, it will list all the sites that are hidden or visible in the SharePoint admin center (including the one that’s part of an Office 365 group, in this case it’s test23).
Get SPOSite Identity https://mycompany.sharepoint.com/sites/test23
Get SPOSite Identity https://mycompany.sharepoint.com/sites/test23 |f1
Note: This is only going to remove the group team site. (ii) As an administrator, how do I remove an Office 365 group using PowerShell? a) Connect PowerShell to an exchange online $credential = get-credential $ExchangeSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $credential -Authentication Basic -AllowRedirection Import-PSSession $session b) Run the command below to get all the Office 365 groups listed Get-unifiedgroup c) Use the PowerShell command below to remove any of these Office 365 groups Remove-unifiedgroup -identity (iii) How do you hide an Office 365 group from the Global Address List/GAL? Set-UnifiedGroup -Identity * -HiddenFromAddressListsEnabled $true (iv) How do I create a library in an Office 365 group team site? Navigate to the team site > New > document library Limitations of Office 365 Groups
Despite these limitations, Office 365 groups support advanced security and compliance features, as well as a huge number of benefits listed above. Summary about Office 365 Groups vs other optionsThe use of Office 365 Groups is an effective way to quickly set up team and project members to use a collaboration tool. They are perfect not only for enterprise customers but also small and medium-sized businesses. Office 365 vs Distribution List vs Contact Group comparison
Another Comparison: Office 365 Groups vs Distribution Lists
Chris Ang (New York, NY USA) is a SharePoint Architect with 20 years experience in programming and network infrastructure. Can you send an email to a security group?First of all Security Groups don't have an associated email address. Hence it is not possible to sent emails to Security Group. You should use a Distribution Group.
Which group is used with email application?You can use distribution groups only with e-mail applications such as Microsoft Exchange Server to send e-mail to collections of users.
When would you use a mailYou can use mail-enabled security groups to distribute messages as well as grant access permissions to resources in Exchange and Active Directory. You can create, modify, and remove mail-enabled security groups in the Exchange admin center (EAC) or in the Exchange Management Shell.
What is the purpose of using security group?Security groups are a way to collect user accounts, computer accounts, and other groups into manageable units. In the Windows Server operating system, several built-in accounts and security groups are preconfigured with the appropriate rights and permissions to perform specific tasks.
|
