Description:

This step adds multiple users to a Microsoft Entra ID group.

The Add EntraID Users To Group workflow step connects to Microsoft Entra ID (formerly Azure Active Directory) and adds one or more existing users to a specified security group or Microsoft 365 group.

The step accepts a list of usernames, allowing multiple users to be added to the same group in a single workflow operation. Usernames can be entered manually or supplied dynamically using FlowWright workflow variables.

The step supports:

• Microsoft Entra ID group membership management
• Adding multiple users in a single operation
• Configurable Entra ID connections
• Keyword list input for usernames
• Integration with Microsoft Graph through FlowWright connections

This step can be used for:

• Employee onboarding
• Department provisioning
• Project team assignment
• Role-based access management
• Security group administration
• Identity lifecycle management
• Business process automation

Usage:

The Add EntraID Users To Group step is typically placed after user accounts have been created or approved within a workflow.

The workflow adds the specified users to the selected Microsoft Entra ID group using the configured connection.

Once the users have been added, later workflow steps can:

• Assign Microsoft 365 licenses
• Configure application permissions
• Notify administrators
• Generate audit reports
• Synchronize external systems
• Continue identity lifecycle management processes

You need to set up an EntraID connection. Go to Integration > Connections > Generic Connections. On the Manage Generic Connections page, click Actions > Create. A sample connection is included here for reference. 

Example:

Let’s build and execute the “clsAddEntraIDUsersToGroupDef” example:

• Create a new process definition named “clsAddEntraIDUsersToGroupDef” and open it in designer mode. 
• Drag a “clsAddEntraIDUsersToGroup” step to the canvas.
• Connect the dots between the “Start” and “clsAddEntraIDUsersToGroup” steps.
• Click the "clsAddEntraIDUsersToGroup" step to configure its "Required" properties. Provide a name for the step. Select the EntraID connection from the drop-down list. Enter the “Group Name”. Click the button to enter multiple "Usernames". Click the Save button. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• Click the button to enter "Usernames". A pop-up is displayed for configuration. Click the Add Row (+) button to insert an empty row. Provide the Username. Click the Save button. You may insert multiple usernames by using the Add Row button.  

• The “Logging” configuration is necessary for documentation and also measures workflow progress and percent complete. This is achieved by configuring the step state and percent fields individually, as shown below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Add Users To Group step, FlowWright connects to the configured Microsoft Entra ID tenant and attempts to add all specified users to the selected group. If all users are successfully added, the workflow follows the Added return path. If one or more users cannot be added—for example, because the group does not exist, a user cannot be found, or the connection cannot be established—the workflow follows the NotAdded return path.

Tips:

• Verify that the Microsoft Entra ID connection has been configured before using this step.
• Use workflow variables to dynamically populate the group name and user list.
• Verify that the specified group exists before attempting to add users.
• Ensure that each User Principal Name (UPN) is valid and already exists in Microsoft Entra ID.
• Use the keyword list editor to simplify managing multiple usernames.
• Use the Added and NotAdded return paths to implement appropriate success and error handling.
• Combine this step with the Create EntraID User or Create EntraID Group steps to automate complete user provisioning.

Notes:

• A valid Microsoft Entra ID connection must exist before this step can execute.
• The configured connection must have sufficient Microsoft Graph permissions to manage group memberships.
• The specified group and user accounts must already exist in Microsoft Entra ID.
• Duplicate memberships are ignored or handled according to Microsoft Entra ID behavior.
• Network connectivity or authentication issues may prevent successful updates to group membership.
• The workflow should include appropriate error handling for the NotAdded return path.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• Microsoft Entra ID connection
• Group name mapping
• User list mappings
• Workflow variable mappings
• Microsoft Graph permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.