Add task to add user to Azure Security group

We want to add task which adds a user to Azure AD Security group.

Currently we have added task which users LamdaAPI / POST which adds a user as a member of group on onPrem AD.

However we have moved to Azure AD and there is no option of Azure function or logic app on solar winds to achieve this tasks.

Is there a way to acheive this ?

Parents
  • Hi there! 

    This only works for Service Catalog forms so I don't know if it would work for your scenario, but I just set up something similar using a Process Integration and Power Automate. Basically you can create a Power Automate flow or Logic App that uses an HTTP request as the trigger type. Then you add a new Process Integration in the Setup area of Service Desk and configure it with the URL for your Flow/Logic App. 

    In a Service Catalog form you can add a task and a Process Integration step into the process so that the process integration triggers the Flow/Logic App once the task is completed. In your process integration action you can pass some JSON or XML with whatever data you need in order to add the user to a group (user email, AAD group ID, etc.)

    I have this set up to happen automatically after an approval step, but you should be able to do something similar with a regular task. 

Reply
  • Hi there! 

    This only works for Service Catalog forms so I don't know if it would work for your scenario, but I just set up something similar using a Process Integration and Power Automate. Basically you can create a Power Automate flow or Logic App that uses an HTTP request as the trigger type. Then you add a new Process Integration in the Setup area of Service Desk and configure it with the URL for your Flow/Logic App. 

    In a Service Catalog form you can add a task and a Process Integration step into the process so that the process integration triggers the Flow/Logic App once the task is completed. In your process integration action you can pass some JSON or XML with whatever data you need in order to add the user to a group (user email, AAD group ID, etc.)

    I have this set up to happen automatically after an approval step, but you should be able to do something similar with a regular task. 

Children
No Data