Dynamic Group

Question

Hi,

I am trying to add a member in Dynamic group but it says error.

Unable to add the selected members. This may be due to a permission or policy restriction.

Answer 1

You don't add members to a dynamic group directly, instead you need to adjust the group's membership query.

Answer 2

The error you are encountering when trying to add a member to a dynamic group may be due to permission or policy restrictions. Here are a few things to check:

1. Permissions: Ensure that the account you are using has the appropriate permissions to manage group memberships. For dynamic groups, the application or account needs to have the GroupMember.ReadWrite.All permission.
2. Group Type: Verify if the group is a dynamic group. If it is, remember that dynamic group memberships cannot be managed through Microsoft Graph API directly.
3. Role-Assignable Groups: If the group is role-assignable, you will need additional permissions, specifically the RoleManagement.ReadWrite.Directory permission, in addition to GroupMember.ReadWrite.All.
4. Guest User Policy: If the member you are trying to add is a guest user, check the directory settings to ensure that guest user additions are allowed. If the setting AllowToAddGuests is set to false, you won't be able to add guest users to the group.
5. Processing Status: Check the membership processing status of the group to confirm if there are any errors or if it is still processing. Sometimes, it may take time for the group to update its membership based on the rules defined.

If you have verified these aspects and the issue persists, consider reaching out to your administrator for further assistance.

---

References:

• Troubleshoot dynamic groups
• Troubleshoot 403 error when adding a user to a group by using Microsoft Graph API