> For the complete documentation index, see [llms.txt](https://docs.cipp.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cipp.app/user-documentation/tenant/administration/tenants/groups.md).

# Tenant Groups

Lists your custom tenant groups and gives you the tools to create and maintain them. Tenant groups are logical groupings of managed tenants that can be selected anywhere CIPP asks for a tenant filter, which saves you picking the same set of tenants by hand every time. A group is either static, where you choose its members explicitly, or dynamic, where CIPP evaluates a set of rules against your tenants and works out the membership for you.

{% hint style="warning" %}
Creating, editing and deleting a group, and re-running a dynamic group's rules, all require a role with unrestricted tenant access, meaning **Allowed Tenants** left as `AllTenants` with nothing in **Blocked Tenants**. A role scoped to particular tenants or tenant groups is refused these actions. See [Setting Up SSO and Getting Access to CIPP](/setup/setting-up-cipp/roles.md).
{% endhint %}

## Action Buttons

<details>

<summary>Add Tenant Group</summary>

Opens a flyout to create a new tenant group. Set the group name, description, and group type, then either pick the initial member tenants for a static group or build the membership rules for a dynamic group. Dynamic groups also offer the option to exclude the partner tenant from the group even when the membership rules would otherwise include it. The fields are the same as those on the edit page, so see edit.md for the full detail on configuring a group.

</details>

<details>

<summary>Show Usage / Hide Usage</summary>

Toggles the Usage column in the table. Leaving it off keeps the page quicker to load, since working out usage means reading through your templates, tasks, rules, roles, and mappings. See the Usage entry under Table Details for what it reports.

</details>

<details>

<summary>Create Default Groups</summary>

Creates a predefined set of dynamic tenant groups provided by CIPP, intended as ready made starting points for standards templates. Any group whose name already exists is skipped rather than overwritten, so it is safe to run more than once. You are asked to confirm before the groups are created.

| Name                                      | What it matches                                                                                                                 |
| ----------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------- |
| Not Intune and Entra Premium Capable      | Tenants with neither a Microsoft Intune service plan nor a Microsoft Entra ID P1 service plan available.                        |
| Business Premium License available        | Tenants with at least one Microsoft 365 Business Premium licence available, including the no Teams, EEA, and donation variants. |
| Entra Premium Capable, Not Intune Capable | Tenants with a Microsoft Entra ID P1 service plan available but no Microsoft Intune service plan.                               |
| Entra ID Premium and Intune Capable       | Tenants with both Microsoft Intune and Microsoft Entra ID P1 service plans available.                                           |
| All Tenants (Excluding Partner)           | Every tenant managed through a GDAP or direct relationship, with the partner tenant itself excluded.                            |

</details>

<details>

<summary>View Logs</summary>

Opens a flyout showing CIPP's own log entries for tenant group activity, covering things like dynamic rule runs, group creation, and any failures encountered while processing them.

</details>

## How to Make a Dynamic Tenant Group

{% @storylane/embed subdomain="app" url="<https://app.storylane.io/share/idk6ryipa9ch>" linkValue="idk6ryipa9ch" %}

## Table Details

| Column      | Description                                                                                                                                                                                                                                                                    |
| ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| Name        | The name of the group.                                                                                                                                                                                                                                                         |
| Description | The description set for the group.                                                                                                                                                                                                                                             |
| Group Type  | Whether the group is `static`, with membership you set explicitly, or `dynamic`, with membership evaluated from rules.                                                                                                                                                         |
| Members     | The tenants currently in the group. For a dynamic group this reflects the last rule evaluation rather than a live check.                                                                                                                                                       |
| Usage       | Where the group is currently referenced elsewhere in CIPP, naming each item and how it is used. Covers standards templates, scheduled tasks, alert rules, custom roles, custom data mappings, and the rules of other dynamic groups. Only shown when Show Usage is toggled on. |

{% hint style="info" %}
Check the Usage column before deleting a group. A group that is still referenced by a standards template or a custom role will leave that reference pointing at nothing once removed.
{% endhint %}

## Table Actions

<table><thead><tr><th>Action</th><th>Description</th><th data-type="checkbox">Bulk Action Available</th></tr></thead><tbody><tr><td>Edit Group</td><td>Opens the edit.md page for the selected group, where you can change its name, description, and membership or rules.</td><td>false</td></tr><tr><td>Run Dynamic Rules</td><td>Forces an immediate re-evaluation of the group's membership rules rather than waiting for the next scheduled run. Only offered on groups with a dynamic group type. You are asked to confirm before the rules are run.</td><td>true</td></tr><tr><td>Delete Group</td><td>Permanently removes the selected group. You are asked to confirm before the group is deleted.</td><td>true</td></tr><tr><td>More Info</td><td>Opens the Extended Info flyout with the full details for the selected row.</td><td>false</td></tr></tbody></table>

***

## Feature Requests / Ideas

We value your feedback and ideas. Please raise any [feature requests](https://github.com/CyberDrain/CIPP/issues/new?template=feature.yml) on GitHub.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.cipp.app/user-documentation/tenant/administration/tenants/groups.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.