Unable to add user to AAD group

Question

I am the Owner of my subscription, but I am unable to edit/add new member to the existing AD group.

Answer 1

In order to manage Azure AD resources, you need to be assigned to the Azure AD role that provides the permission you need, probably User Administrator. Be aware AAD have a different control plane than Azure.

• Azure AD built-in roles -> You don´t have Azure AD User Administrator role.
• Azure built-in roles -> You have Azure owner role. This does not allow you to manage users in the associated Azure AAD tenant.

Answer 2

@Satya Koduri

Thank you for posting your question in Microsoft Q&A.

If you have owner role assigned on the subscription that means you can perform any tasks on subscriptions, resource Groups and on resources in Azure.

To perform anything inside Azure AD you need to have Azure AD roles assigned.

Azure role is different from Azure AD roles.

Currently, owner role on subscription is the part of Azure role.

The task you are trying to perform (adding member to group) is within Azure AD. This means you need to have particular role in Azure AD assigned to your user account.

You can go through below article to get more details on permission under each Azure AD role. Depending on the permission you can assign specific roles to your user account to fix your issue.

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#groups-administrator

Let me know if you have any further questions on this.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.