Skip to main content

Microsoft Entra ID

Audience: M365 Administrators, Platform Engineering, Distributed Unit IT

Purpose: Identity and access management foundations for Microsoft 365

Overview​

Microsoft Entra ID (formerly Azure Active Directory) is the identity backbone of the Microsoft 365 ecosystem. This section covers enterprise identity patterns, scope group naming conventions, and governance practices that apply across all M365 services.

ResourceDescription
Scope Groups & NamingNaming conventions for DSG, USG, CSG, FSG, and other scope groups
Entra Admin CenterMicrosoft Entra administration portal

Key Concepts​

Scope Groups​

Scope groups are the foundation for access control across Microsoft 365:

  • DSG - Device Scope Groups (Intune device targeting)
  • USG - User Scope Groups (User-based policies)
  • CSG - Cloud Scope Groups (Cloud resource access)
  • FSG - File Scope Groups (SharePoint/OneDrive permissions)
  • ESG - Endpoint Scope Groups
  • PSG - Policy Scope Groups
  • RSG - Resource Scope Groups

See Scope Groups & Naming for complete naming conventions.