Add Member button greyed out on Microsoft Azure Active Directory with proper roles?

Question

I basic subscription to Microsoft AAD. I was able to create groups and add members/owners to these groups at one point. After that, both buttons greyed out for me. I don't have a global admin role but I have the following role which I believe are what needed in order to add member/owner to the group.
The person who has a global admin role can still add member/owner. Is there another role I need to be assigned to have proper access to adding group members? Do I need a higher subscription? Why was I able to do it at one point but then cannot do it anymore with no setting change?

Answer 1

Hello @Jane You should be able to add members and owners to the groups that you have created during creation and after creation as well. However, using azure portal, you get add members and owners during creation but not afterwards. If you have Group Administrators role assigned to your account, you can manage all aspects of any group in your tenant via Azure Portal as well. If you don't want to assign Group Admin role and want to add members or owners only to the groups that you have created, you can use any of the below methods in addition to the methods suggested by @Vasil Michev

Using PowerShell:

• Add-AzureADGroupMember -ObjectId "object_id_of_group" -RefObjectId "object_id_of_member_to_add"
• Add-AzureADGroupOwner -ObjectId "object_id_of_group" -RefObjectId "object_id_of_owner_to_add"

Using Graph Explorer:

• Add Members: Call: PATCH https://graph.microsoft.com/v1.0/groups/{group-id}
  Body:
  {
  "members@odata.bind": [
  "https://graph.microsoft.com/v1.0/directoryObjects/{id}",
  "https://graph.microsoft.com/v1.0/directoryObjects/{id}",
  "https://graph.microsoft.com/v1.0/directoryObjects/{id}"
  ]
  }
• Add Owner: Call: POST https://graph.microsoft.com/v1.0/groups/{id}/owners/$ref
  Body:
  {
  "@odata.id": "https://graph.microsoft.com/v1.0/users/{id}"
  }

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

Some group types cannot be managed inside the Azure AD blade, use the O365 admin portal or the Exchange Admin Center instead.