Self Service Password and Group Management

With employees becoming increasingly remote workers, cases of expired or forgotten passwords have become particularly troublesome for IT departments. It directly affects productivity. Self-service Password Reset (SSPR) gives employees the ability to change or reset their password and unlock their accounts with no administrator or help desk involvement. This ability reduces help desk calls and loss of productivity when an employee cannot sign-in to their device or application.

Before one can unlock their account or reset password, it is required to register for the service. The registration process captures additional methods to verify user authenticity when the service is used later. The methods available are:

Mobile app notification
Mobile app code
OTP on Mobile phone
Alternate Email

Same is the case for Group Management. Self-service group management enable users to create and manage their own security groups or Microsoft 365 groups in Azure Active Directory (Azure AD). The owner of the group can approve or deny membership requests, and can delegate control of group membership. By default, administrators manage the requests to create, add, remove users from groups. This mundane task adds no value to the organisation, is prone to errors, and also affects productivity. Azure AD simplifies group management by providing self-service capabilities in the following ways:

Delegated group management - Example: A user who manages access to a SaaS application that the company uses
Self-service group management - Example: Two users with SharePoint Online sites wanting to give each other's teams access to their sites

If your organisation has invested in Azure Active Directory Premium, you have what it takes to have this implemented in your enterprise.