使用 Azure Active Directory 创建基本组并添成员Create a basic group and add members using Azure Active Directory

可以使用 Azure Active Directory (Azure AD) 门户创建基本组。You can create a basic group using the Azure Active Directory (Azure AD) portal. 对于本文而言,将由资源所有者(管理员)向单个资源中添加一个基本组,该组中将包括需要访问该资源的特定成员(员工)。For the purposes of this article, a basic group is added to a single resource by the resource owner (administrator) and includes specific members (employees) that need to access that resource. 有关更复杂的方案(包括动态成员身份和规则创建),请参阅 Azure Active Directory 用户管理文档For more complex scenarios, including dynamic memberships and rule creation, see the Azure Active Directory user management documentation.

组和成员身份类型Group and membership types

有多个组和成员身份类型。There are several group and membership types. 以下信息说明了每个组和成员身份类型及其使用原因,以帮助你确定创建组时要使用的选项。The following information explains each group and membership type and why they are used, to help you decide which options to use when you create a group.

组类型:Group types:

  • 安全性Security. 用来为一组用户管理成员和计算机对共享资源的访问权限。Used to manage member and computer access to shared resources for a group of users. 例如,你可以创建一个安全组来实施特定的安全策略。For example, you can create a security group for a specific security policy. 这样,你可以一次向所有成员授予一组权限,而不需要分别为每个成员添加权限。By doing it this way, you can give a set of permissions to all the members at once, instead of having to add permissions to each member individually. 安全组可以将用户、设备、组和服务主体作为其成员,而将用户和服务主体作为其所有者。A security group can have users, devices, groups and service principals as its members and users and service principals as its owners. 有关管理对资源的访问权限的详细信息,请参阅使用 Azure Active Directory 组管理对资源的访问权限For more info about managing access to resources, see Manage access to resources with Azure Active Directory groups.
  • Office 365Office 365. 通过向成员授予对共享邮箱、日历、文件、SharePoint 站点和其他内容的访问权限,提供了协作机会。Provides collaboration opportunities by giving members access to a shared mailbox, calendar, files, SharePoint site, and more. 此选项还允许向组织外部的人授予对该组的访问权限。This option also lets you give people outside of your organization access to the group. Office 365 组只能将用户作为其成员。An Office 365 group can have only users as its members. 用户和服务主体都可以是 Office 365 组的所有者。Both users and service principals can be owners of an Office 365 group. 有关 Office 365 组的详细信息,请参阅了解 Office 365 组For more info about Office 365 Groups, see Learn about Office 365 Groups.

成员身份类型:Membership types:

  • 已分配。Assigned. 允许将特定用户添加为该组的成员并获得独特权限。Lets you add specific users to be members of this group and to have unique permissions. 对于本文,我们将使用此选项。For the purposes of this article, we're using this option.

创建基本组并添加成员Create a basic group and add members

可以同时创建基本组并添加成员。You can create a basic group and add your members at the same time. 若要创建基本组并添加成员,请使用以下过程:To create a basic group and add members use the following procedure:

  1. 使用目录的全局管理员帐户登录到 Azure 门户Sign in to the Azure portal using a Global administrator account for the directory.

  2. 搜索并选择“Azure Active Directory”。Search for and select Azure Active Directory.

  3. 在“Active Directory”页面上,选择“组”,然后选择“新建组” 。On the Active Directory page, select Groups and then select New group.

    显示组的 Azure AD 页

  4. 将显示“新建组”窗格,必须填写必填信息。The New Group pane will appear and you must fill out the required information.

    “新建组”页面,其中填写了示例信息

  5. 选择预定义的“组类型”。Select a pre-defined Group type. 有关组类型的详细信息,请参阅组和成员身份类型For more information on group types, see Group and membership types.

  6. 创建并添加一个组名Create and add a Group name. 选择一个容易记住并对该组来说有意义的名称。Choose a name that you'll remember and that makes sense for the group. 将执行检查以确定另一个组是否已在使用该名称。A check will be performed to determine if the name is already in use by another group. 如果该名称已在使用中,为避免重复命名,系统将要求你更改组的名称。If the name is already in use, to avoid duplicate naming, you'll be asked to change the name of your group.

  7. 添加该组的组电子邮件地址,或保留自动填写的电子邮件地址。Add a Group email address for the group, or keep the email address that is filled in automatically.

  8. 组说明。Group description. 向组添加说明(可选)。Add an optional description to your group.

  9. 选择预定义的成员身份类型(必填)Select a pre-defined Membership type (required). 有关成员身份类型的详细信息,请参阅组和成员身份类型For more information on membership types, see Group and membership types.

  10. 选择“创建” 。Select Create. 随即将创建组,该组将准备就绪,可供添加成员。Your group is created and ready for you to add members.

  11. 从“组”页面选择“成员”区域,然后从“选择成员”页面中开始搜索要添加到组的成员 。Select the Members area from the Group page, and then begin searching for the members to add to your group from the Select members page.

    在组创建过程中选择你的组成员

  12. 完成添加成员后,选择“选择”。When you're done adding members, choose Select.

    “组概述”页面将更新,以显示当前添加到组的成员数。The Group Overview page updates to show the number of members who are now added to the group.

    “组概述”页面,其中突出显示了成员数

打开或关闭组欢迎电子邮件Turn on or off group welcome email

创建任何新的 Office 365 组时,会向添加到该组的所有用户发送欢迎通知。When any new Office 365 group is created, a welcome notification is sent to all users who are added to the group.

后续步骤Next steps