![Mastering Identity and Access Management with Microsoft Azure](https://wfqqreader-1252317822.image.myqcloud.com/cover/884/36698884/b_36698884.jpg)
Create the sales internal news group as an Office 365 (distribution group)
Log in as Doris.Sutton@domain.onmicrosoft.com to https://myapps.microsoft.com and create the Sales Internal News group as an Office 365 group. Check that the Group policy shows This group is open to join for all users:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/61b195ff-f796-4176-81a1-b48e058cd356.png?sign=1739279329-JXark9NUjoQx18eVSUZHEoIYDq5GJW1A-0-92a9a7e01626d3d43fb782fcc8518c3a)
Review the Join policy of your newly created group:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/1762e025-81fc-40b3-9b8e-1a1b5a2f475a.png?sign=1739279329-gVuKjQEpW1vSTmCuFE9jYKxqycNWBUsV-0-cdf3d972b92042c6624b31a50637929a)
In your Azure AD, under Groups, you will also find the newly created group:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/d826ab8f-8306-4a6b-805e-9735db6ea7d0.png?sign=1739279329-mnTy8IJHZWJAqhMJfW6MeqlhJRBAkF3i-0-90047a372be9f50dcbfc9457adf1f187)
Now, as the group owner, we change the group to request a managers' approval with the group policy setting:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/7d8134ac-00a8-4c61-a0c2-ce9268312fb4.png?sign=1739279329-sxcR8ss2rJwxyOgRpQ4tFsfa2xNyooWy-0-8bd741e6d9d19cf36e95c7945fa7e87e)
Test the new configuration and log in as Don.Hall@domain.onmicrosoft.com to https://myapps.microsoft.com. Navigate to groups. Choose Sales Internal News:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/5fbf00b9-cd83-4b37-855b-c48f568d86d8.png?sign=1739279329-VpCHIBgWq0igSw58tTtODZ4xJxSiiRjx-0-a62b5c2433244a4b0079ab4e6304bd6b)
Join the Sales Internal News group and type a Business justification, click Request, and the process should be started.
Log in as Doris.Sutton@domain.onmicrosoft.com to https://myapps.microsoft.com.
Check your inbox. You should have received the join request mail and a notification, shown in the Access Panel UI.
Click on this request and approve it:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/c00bfa0d-daa6-4736-8f1a-e4532cedab53.png?sign=1739279329-PARx1FThnqidlQhrdr98omCE9VJABoXI-0-953645771c1810012e0934db0fd6fa4b)
Log in as Don.Hall@domain.onmicrosoft.com on https://myapps.microsoft.com.
Check your inbox, and you should have received a successful approval message:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/0784e51d-3031-415b-b7cd-1e460b03824f.png?sign=1739279329-85elGWALlVuU7Gl0PRXAxexrQ1rKDJUG-0-97bfdfd3f6b9e99a60f72a2f9cd1d153)
Check your group membership, and you should be a member of the Sales Internal News group:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/87f8894f-57dd-4762-be3c-a14fe74f68e7.png?sign=1739279329-jZoPsrFAVxslQ7v2RoIEN1OVpZVbYbAY-0-b9169d57636b0c7a09ac53eea6aaa58e)
Next, we will configure dynamic group memberships.