You have an Azure subscription that contains the Microsoft Entra identities shown in the following table. You need to enable self-service password reset (SSPR). For which identities can you enable…

While User1 is eligible, SSPR can also be configured to apply to members of security groups like Group1.

Group1 is a group and does not have a password to reset itself; SSPR applies to its members. User1, a direct user, is also eligible.

SSPR is designed for users to reset their own passwords, so User1, being a user account, is directly eligible. Group1, as a security group, can be selected in SSPR policy to allow its members to use the feature.

Microsoft 365 groups like Group2 are generally supported for SSPR scoping, but in scenarios prioritizing security group structures, it might not be the intended or typical selection. User1 is also eligible.

Microsoft 365 groups (Group2), while technically supportable for SSPR scoping, might not be considered the primary or designated group type for such security policy application in some contexts, favoring security groups instead.