We have an Entra External (B2C) tenant that we need signed up users to be automatically added to a group/role. How do we achieve that?

Question

We created a Entra External (B2C) tenant for users to sign up on our app and their details logged. Using this article: https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-user-flow-sign-up-sign-in-customers we can create the user flow but we need them to automatically be assigned to a group so they get the right role as we use this role to authenticate with our API. How can we automate this please?

Answer 1

Hi @Luke Ashton

Thank you for posting your question on Microsoft Q&A.

I understand that you are creating self-service sign-up user flows for apps in external tenants and now want to assign roles by automatically adding users to groups.

We can add users to groups automatically using dynamic membership groups. However, in Microsoft Entra External (B2C), dynamic membership groups are not available, so users cannot be automatically assigned to groups upon sign-up. Additionally, roles are not supported for customer accounts, as they do not have access to tenant resources.

Currently, there is no built-in way to automatically assign groups for role-based authentication in an Entra External (B2C) tenant.

For more information about supported features in external tenants: https://learn.microsoft.com/en-us/entra/external-id/customers/concept-supported-features-customers

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.