Unable to add users to a group, though I am a user administrator.

Question

I have a user who is assigned the role of "user administrator" but is still failing to add members to another group. he keeps getting the error " failed to add users"

when I check audit logs of the group, i do not see any entry about this failure. where should I start looking for this issue.

Answer 1

What sort of group is this?

Synced from on-prem? then you can't add in Azure.

Role-Assignable Group? then you would need an elevated role like Priv Role Admin or Global Admin

Dynamic? Then you can't assign users directly to the group.

Answer 2

@RaviSS

I have just tried the same in my lab to check if there is any outage. i am able to add members to group using account which has user administrator role assigned.

Can you check if you are trying to add members to dynamic group. By default, you cannot add any users to dynamic groups.

I have tried in both Azure portal and also in Entra portal. I am able to add users to group.

Can you check now and confirm if it is working fine.

As per below article you should be able to Create and manage all groups without any issues with account which has user administrator role assigned.

https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#user-administrator

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.