Skip to content
InvardiaInvardia
Why InvardiaProductsFeaturesPricingCommunity
Docs
All documentation
Product documentationPIM ManagerSecurityInsight
SettingsPIM Manager settingsSecurityInsight settingsEntra Policy Suite settings
ScriptsPIM Manager scriptsSecurityInsight scriptsEntra Policy Suite scriptsInvardia scripts
Error codesPIM Manager error codesSecurityInsight error codes
API and MCPPIM Manager APIPIM Manager MCP toolsSecurityInsight APISecurityInsight MCP tools
SecurityPIM Manager security packSecurityInsight security packEntra Policy Suite security pack
Network and designPIM Manager network guidesPIM Manager command wizardNetwork egressDesign your installationCalculate your cost
SupportSetup scriptsRemote support access
Search the docs
SupportAboutContactBook a demoCustomer portalDesign your installationFree Pro trial

PIM Manager settings · Settings > Approvals & policy

Refuse to create a group that has no owner

KeyRequireGroupOwners
WhereSettings > Approvals & policy > Groups
TypeOn / off
DefaultOff

What it does

When the engine creates a group in Microsoft Entra ID it looks for an owner: the owners or sponsor on the group's definition, or the contact of its department. This switch decides what happens when none of them resolves to a person.

When enabled

When on: the engine does not create the group and reports the failure on Jobs, naming the group. The group is created on a later run once an owner is set.

When disabled

When off (the default): the group is created without an owner and the run says so in a warning every time. An owner set later is attached by a later run without touching the group.

Risk and how to reverse it

On: a definition without an owner blocks its group, and everything that depends on the group, until someone fills the owner in -- on an estate where many definitions have no owner, most new groups will not be created. Off: groups can exist that nobody is responsible for. Reversible: switch it back; groups already created are not changed.

Requires

SuperAdmin to change it. The engine reads it at its next run.

Recommended

Off until your group definitions carry owners. Switch it on when you want every new group to have a responsible person from the start.

Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack

InvardiaInvardia

See the risk. Control the access.

Products

PIM ManagerSecurityInsightEntra Policy SuiteAll featuresPricingFree 60-day Pro trialBook a demoWhy Invardia

Docs

DocumentationSearch the docsPIM Manager settingsSecurityInsight settingsPIM network guidesCommand wizardNetwork egressPIM Manager design configuratorSecurityInsight design configuratorDesign your installationCalculate your cost

Company

AboutContactCustomer portalSupportHow support worksHow updates reach youSupport in numbersSetup scriptsRemote support accessContact: info@invardia.com

Legal

Terms of saleLicence termsData processingPrivacyCookiesCompany information
© 2026 Invardia – a brand of 2LINKIT, founded and owned by Morten Knudsen · Strandvejen 21A, 6000 Kolding, Denmark · VAT DK39208032 · Contact: info@invardia.com