![Mastering Identity and Access Management with Microsoft Azure](https://wfqqreader-1252317822.image.myqcloud.com/cover/884/36698884/b_36698884.jpg)
Create the sales internal news group as an Office 365 (distribution group)
Log in as Doris.Sutton@domain.onmicrosoft.com to https://myapps.microsoft.com and create the Sales Internal News group as an Office 365 group. Check that the Group policy shows This group is open to join for all users:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/61b195ff-f796-4176-81a1-b48e058cd356.png?sign=1739289419-vrILZRnHTSLrIySDFtdfdJVYusGYYqvZ-0-2807031bb39af8783ab51899fc3a0b96)
Review the Join policy of your newly created group:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/1762e025-81fc-40b3-9b8e-1a1b5a2f475a.png?sign=1739289419-1aoBZmyti6tosnCevNxQKX61DtW6H7bp-0-00b1efbe4ace85b46d53fc3025c20e9c)
In your Azure AD, under Groups, you will also find the newly created group:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/d826ab8f-8306-4a6b-805e-9735db6ea7d0.png?sign=1739289419-FMgo88wX3Xv0KTkm0NkPWr3d5AWSz8Pp-0-c420c1c279c3cebe377bd4bd5f81e3d5)
Now, as the group owner, we change the group to request a managers' approval with the group policy setting:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/7d8134ac-00a8-4c61-a0c2-ce9268312fb4.png?sign=1739289419-9SI8RavA5T50UuZ3XdSFOT01B8iHuU17-0-74082786151f869eb1e36f51a632a13e)
Test the new configuration and log in as Don.Hall@domain.onmicrosoft.com to https://myapps.microsoft.com. Navigate to groups. Choose Sales Internal News:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/5fbf00b9-cd83-4b37-855b-c48f568d86d8.png?sign=1739289419-6zZBz91PMLUs42CZ4Iyp3W3kp6uglE45-0-02382b33c03429452e00b37c8781434d)
Join the Sales Internal News group and type a Business justification, click Request, and the process should be started.
Log in as Doris.Sutton@domain.onmicrosoft.com to https://myapps.microsoft.com.
Check your inbox. You should have received the join request mail and a notification, shown in the Access Panel UI.
Click on this request and approve it:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/c00bfa0d-daa6-4736-8f1a-e4532cedab53.png?sign=1739289419-LXhAKaPO69LRbFO5YGHXUXpmIr0tiQWK-0-9bcd5a357b463e0d0f37537665067292)
Log in as Don.Hall@domain.onmicrosoft.com on https://myapps.microsoft.com.
Check your inbox, and you should have received a successful approval message:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/0784e51d-3031-415b-b7cd-1e460b03824f.png?sign=1739289419-UeoqR7jS2I5wbJJwK3O6A2ALXGiziHyO-0-7cbc3a8995e542a9c6779783a8fdd5d9)
Check your group membership, and you should be a member of the Sales Internal News group:
![](https://epubservercos.yuewen.com/1A2C27/19470381808825406/epubprivate/OEBPS/Images/87f8894f-57dd-4762-be3c-a14fe74f68e7.png?sign=1739289419-ZGtXyubqu0jROr8E9UqhWvvB2ziA5zeJ-0-4de7932dfa27316e708829500f2b0915)
Next, we will configure dynamic group memberships.