- In the Azure Portal, go to Microsoft Entra ID → Groups → New group

- Set Group type to Security
- Name it clearly, e.g. “TOTAL-Admin”, “TOTAL-Analyst”
- Add the people who should have that access level as Members

- Click Create
- After creation, click on the group → Overview → copy the Object ID
- SCIM Tenant URL — you will enter this in Azure in Part 3
- SCIM Secret Token — you will enter this in Azure in Part 3

