Microsoft Endpoint Manager – Users, Groups and Licenses

Let me explain how to create users manually. Go to Microsoft Endpoint Manager (MEM) admin center and select Users – All users (Preview) – New user:

Provide information about the user and choose the domain – your Intune subscription domain or custom domain we configured previously:

You can auto-generate a password or create your own:

If you need to assign a specific role you can click on User and choose one or more from 70 available built-in roles:

In this case I leave it as default. Then we need to configure location and job info if needed:

At the end click Create.

Later we will assign objects like apps or policies on Azure AD security group, not on users, so we need to create at minimum, one security group. Go to Groups – All groups (Preview) – New group:

We can assign a Intune license on a user one by one, but a more optimal way is to create a security group and assign a license on a group means all members will be licensed. If you do not assign an Intune license on a user, this user cannot enroll his device into your Intune tenant. Give the group a name, membership type – Assignment, and group type – Security:

Click on No members selected and search for the user you created:

Click Select, then Create. In All groups you can find a security group you created:

The next step is to assign Intune licenses. Select the group you created, Licenses – Assignments:

Deselect licenses you do not need and leave Intune license:

Then click Save.

If you check Licenses of the user we created, you will see the Microsoft Intune license is inherited from the group:

You can also create multiple users by importing them from .csv. Go to All users (Preview) – Bulk operations – Bulk create:

Download pre-configured .csv:

Add information about users you want to create:

Save the file and upload it by clicking Submit:

Then click Refresh and you will see all imported users:

If you prefer PowerShell run the command below:

Install-Module MSOnline
New-MsolUser -DisplayName “Michael Jones” -FirstName Michael -LastName Jones -UserPrincipalName -Password Power1234



Contact Us

On Key

More Posts

Security Best Practices in SharePoint
Office 365

Security Best Practices in SharePoint

Microsoft SharePoint is an online collaboration platform that integrates with Microsoft Office. You can use it to store, organize, share, and access information online. SharePoint enables collaboration and content management and ultimately allows your teams to

Read More »
The Ultimate Guide to Microsoft Intune - Article by WME
Active Directory

The Ultimate Guide to Microsoft Intune

The corporate world is evolving fast. And with that, mobile devices are spreading everywhere. As we venture into the year 2024, they have already claimed a substantial 55% share of the total corporate device ecosystem. You

Read More »
Protecting Microsoft 365 from on-Premises Attacks
Cloud Security

How to Protect Microsoft 365 from On-Premises Attacks?

Microsoft 365 is diverse enough to enrich the capabilities of many types of private businesses. It complements users, applications, networks, devices, and whatnot. However, Microsoft 365 cybersecurity is often compromised and there are countless ways that

Read More »
Benefits of SharePoint Business Process Automation - Article by WME
Office 365

Benefits of SharePoint Business Process Automation

Modern businesses are relentlessly looking for ways to innovate themselves. SharePoint Business Process Automation (BPA) is one such technology that is making their lives easier. No doubt, SharePoint is a whole world of productivity that’s allowing

Read More »
Be assured of everything

Get WME Services

Stay ahead of the competition with our Professional IT offerings.