capabilities.work

Provision User Into New Group

A 3-step recipe with Microsoft Active Directory. We can help you get access.

Recipe · 3 steps

Provision User Into New Group

with Microsoft Active Directory · Identity & Access Management

Provision a new user and a new group, then make the user a member of the group.

  1. Create the new, enabled Microsoft Entra user account with a password profile that forces a password change at first sign-in.
  2. Create a security group (mail-disabled, security-enabled) that will govern the new user's access.
  3. Add the newly created user to the newly created group by passing an OData reference to the user object.
What you'll need to have ready
  • displayName: Display name for the new user (e.g. "Adele Vance").
  • mailNickname: Mail alias for the new user (without the domain suffix).
  • userPrincipalName: UPN for the new user in alias@domain format.
  • password: Initial password meeting tenant complexity requirements.
  • groupDisplayName: Display name for the new security group.
  • groupMailNickname: Mail alias for the new security group.
For your developer

Arazzo workflow active-directory:provision-user-into-new-group, 3 operations: create-user → create-group → add-group-member. Specs on APIs.io.

More recipes with Microsoft Active Directory

Active Directory Audit User Group MembershipsActive Directory Create Group And Add Two MembersActive Directory Create Microsoft 365 Group With OwnerActive Directory Decommission ApplicationActive Directory Find User And Update ProfileActive Directory Offboard User From GroupActive Directory Onboard User To Existing GroupActive Directory Provision Application With Service PrincipalActive Directory Rename Group And List MembersActive Directory Self-Service Profile Review