From d29d6515ddbbff6156b43b9f5c0e9b34d4de1bc1 Mon Sep 17 00:00:00 2001
From: AndHarri-MSFT <99029649+ruaden94@users.noreply.github.com>
Date: Fri, 3 Oct 2025 16:02:56 -0400
Subject: [PATCH] Update assign-user-or-group-access-portal.md

update to prerequisites to include the types of groups that are allowed.
---
 .../enterprise-apps/assign-user-or-group-access-portal.md        | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/identity/enterprise-apps/assign-user-or-group-access-portal.md b/docs/identity/enterprise-apps/assign-user-or-group-access-portal.md
index def262bc3c4..a31cca8957d 100644
--- a/docs/identity/enterprise-apps/assign-user-or-group-access-portal.md
+++ b/docs/identity/enterprise-apps/assign-user-or-group-access-portal.md
@@ -41,6 +41,7 @@ To assign users to an enterprise application, you need:
   - User Administrator
   - Owner of the service principal.
 - Microsoft Entra ID P1 or P2 for group-based assignment. For more licensing requirements for the features discussed in this article, see the [Microsoft Entra pricing page](https://azure.microsoft.com/pricing/details/active-directory).
+- Group-based assignment is supported for Security groups, Microsoft 365 groups, and Distribution groups whose SecurityEnabled setting is set to True only.
 
 :::zone pivot="portal"