# Add an Entra ID Group to Cloud

*Applies to: Patch My PC Cloud*

To add an Entra ID Security Group to Patch My PC (PMPC) Cloud:

1. Create the relevant group in Entra ID and add the relevant users.

{% hint style="info" %}
**Note**

We recommend you create an Entra ID group for each [PMPC Cloud User Role](https://docs.patchmypc.com/patch-my-pc-cloud/manage/manage-settings/manage-cloud-users/cloud-user-roles-reference) you plan to use.
{% endhint %}

2. In the PMPC Cloud portal, navigate to **Settings | Users**

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2F6fYN1UzC1gmDGSCqSjkz%2Fimage.png?alt=media&#x26;token=2e22c9a5-bc76-438d-828e-7cf7a51456a4" alt="Navigating to &#x27;Settings | Users&#x27;" width="563"><figcaption></figcaption></figure>

3. Click **Add Group**

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FPuJvp5kxJkViFfbLJWj0%2Fimage.png?alt=media&#x26;token=cb8e57d7-c383-4836-9d91-c73e4e8b22bc" alt="Clicking &#x27;Add Group&#x27;" width="563"><figcaption></figcaption></figure>

4. On the **Available Groups** screen, click the checkbox beside the relevant Entra ID Security Group you want to add, then select the PMPC Cloud role you want to assign to this group from the **Role** dropdown.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2F7nUoEisN6ef3QQeXfuaD%2Fimage.png?alt=media&#x26;token=11525383-8a17-44ee-99b4-d34d517f4a88" alt="Selecting the relevant Entra ID group to add and which role it will be assigned in PMPC Cloud"><figcaption></figcaption></figure>

{% hint style="info" %}
**Note**

If you assign an Entra ID Security Group the **Full Admin with Access Management** role, all of this group’s members will receive notifications such as access requests, new version notifications for Binary Free apps (if configured), claim ownership notifications, etc.
{% endhint %}

The selected Entra ID Security Group and the role you’ve assigned it appear in your portal

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FNO0dDQ0Y0GGAIg0rccXP%2Fimage.png?alt=media&#x26;token=b260e87c-f754-46c7-aa73-7dab30cd09e0" alt="The selected Entra ID Security Group and the role you’ve assigned it appear in your portal"><figcaption></figcaption></figure>

5. Repeat Step 4 to add any additional groups/roles.

{% hint style="warning" %}
**Important**

In the current release, you can add up to ten Entra ID Security Groups.
{% endhint %}

6. Click **Add**

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2F75ZSqTCZWmlDE1k0xbR1%2Fimage.png?alt=media&#x26;token=9605b2bf-fff4-4b19-b462-f468a359e9c1" alt="Clicking &#x27;Add&#x27;" width="375"><figcaption></figcaption></figure>

The portal auto-refreshes, showing that the selected groups have been added, and the **Success – Group created** notification is shown.

<figure><img src="https://3773699522-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-MX7dvS0r_4fc0AikgJS%2Fuploads%2FihRyfyEFNIIASJQgIkZo%2Fimage.png?alt=media&#x26;token=fffa2c21-d74a-4b32-8cbe-0b5eee511972" alt="Portal auto-refreshes, showing the selected groups have been added and the &#x27;Success – Group created&#x27; notification is shown" width="563"><figcaption></figcaption></figure>

When you add an Entra ID Security Group, the **Group role with id <*****entra\_id\_security\_group\_id*****> was created with role <*****user\_role*****>** event is written to the **Events** node.

{% hint style="info" %}
**Note**

If a user belongs to multiple Entra ID Security groups with different permission levels, their effective permissions will reflect the highest level granted across those groups, as they inherit the combined set of all assigned permissions—unless an explicit Deny takes precedence.

Likewise, if a user has been added directly to the portal using the [Add a User](https://docs.patchmypc.com/patch-my-pc-cloud/manage/manage-settings/manage-cloud-users/add-a-cloud-user) process and they are also a member of one or more Entra ID Security Groups assigned different roles, the same applies, i.e., their effective role will be a combination of all of the roles assigned to them directly in the portal and to any Entra ID Groups they are a member of.
{% endhint %}
