Adding guest user to Azure AD Security Group using Power Automate

Question

Adding guest user to Azure AD Security Group using Power Automate

Anonymous

Hello,

I am trying to automate the process of creating a new guest user and adding him to a certain Azure AD security group using Power Automate. But when the process gets to adding the new guest user, the following error occurs:

User's image

The output error message states that "code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation." On Azure AD, my account has permissions to add members to groups. Why is the flow ending in an error, when my account should have the permission to add members to Azure AD groups?

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2023-06-26T20:26:08.8266667+00:00
@Anonymous

Thank you for your post!

Error Message:
"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation."

I understand that you're trying to automate the creation of new guest users and adding them to certain Azure AD Groups using Power Automate but are running into the error above. To hopefully point you in the right direction or resolve your issue, I'll share some troubleshooting steps below.

I wasn't able to reproduce your issue using Power Automate, but I performed a similar operation within my Logic App.

Troubleshooting:

When it comes to your Azure AD Connection, can you make sure that the user connected is your user?

If the user connected to your flow is correct, can you navigate to Azure Active Directory and confirm the connected user's permissions?

If the user connected to your flow has the correct permissions, can you ensure that your directories Azure AD Group settings aren't restricting this operation?

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
Anonymous

2023-06-28T08:28:53.8166667+00:00

Thank you for your help @JamesTran-MSFT but unfortunately my problems haven't been solved using your suggestions. My account has the Groups Administrator role on Azure AD, should these be sufficient to grant me the permission to add users to groups? Manually adding users works just fine, but Power Automate isn't allowing my account to add new users. The flow is triggered by a Power App user, but the final adding of the new created user is connected to my account.
JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2023-06-28T19:05:38.2133333+00:00

@Anonymous

Thank you for following up on this!

I tested this within my tenant and didn't run into any issues when using the Groups Admin role and adding user(s) to an Azure AD Group. Because you're able to manually add users within Azure AD, and your issue seems to be more related to troubleshooting your Power Automate flow, I'd recommend reaching out to the Microsoft Power Automate Community since Power Automate currently isn't supported here on the Q&A forums.

I hope this helps! Thank you for your time and patience throughout this issue.

Your answer

JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2023-06-26T20:26:08.8266667+00:00

@Anonymous

Thank you for your post!

Error Message:
"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation."

I understand that you're trying to automate the creation of new guest users and adding them to certain Azure AD Groups using Power Automate but are running into the error above. To hopefully point you in the right direction or resolve your issue, I'll share some troubleshooting steps below.

I wasn't able to reproduce your issue using Power Automate, but I performed a similar operation within my Logic App.

Troubleshooting:

When it comes to your Azure AD Connection, can you make sure that the user connected is your user?

If the user connected to your flow is correct, can you navigate to Azure Active Directory and confirm the connected user's permissions?

If the user connected to your flow has the correct permissions, can you ensure that your directories Azure AD Group settings aren't restricting this operation?

I hope this helps!

If you have any other questions, please let me know. Thank you for your time and patience throughout this issue.
Anonymous

2023-06-28T08:28:53.8166667+00:00

Thank you for your help @JamesTran-MSFT but unfortunately my problems haven't been solved using your suggestions. My account has the Groups Administrator role on Azure AD, should these be sufficient to grant me the permission to add users to groups? Manually adding users works just fine, but Power Automate isn't allowing my account to add new users. The flow is triggered by a Power App user, but the final adding of the new created user is connected to my account.
JamesTran-MSFT 36,906 Reputation points Microsoft Employee Moderator

2023-06-28T19:05:38.2133333+00:00

@Anonymous

Thank you for following up on this!

I tested this within my tenant and didn't run into any issues when using the Groups Admin role and adding user(s) to an Azure AD Group. Because you're able to manually add users within Azure AD, and your issue seems to be more related to troubleshooting your Power Automate flow, I'd recommend reaching out to the Microsoft Power Automate Community since Power Automate currently isn't supported here on the Q&A forums.

I hope this helps! Thank you for your time and patience throughout this issue.

Share via

Adding guest user to Azure AD Security Group using Power Automate

Your answer