Description:

This step adds a Microsoft Entra ID user to multiple groups.

The Add EntraID User To Groups workflow step connects to Microsoft Entra ID (formerly Azure Active Directory) and adds an existing user to one or more specified security groups or Microsoft 365 groups.

The step accepts a keyword list of group names, allowing a single user to be assigned to multiple groups in one workflow operation. Group names can be entered manually or supplied dynamically using FlowWright workflow variables.

The step supports:

• Microsoft Entra ID group membership management
• Adding a user to multiple groups in a single operation
• Configurable Entra ID connections
• Keyword list input for group names
• Integration with Microsoft Graph through FlowWright connections

This step can be used for:

• Employee onboarding
• Department provisioning
• Role-based access assignment
• Project team membership
• Security group administration
• Identity lifecycle management
• Business process automation

Usage:

The Add EntraID User To Groups step is typically placed after a user account has been created or approved within a workflow.

The workflow adds the specified Microsoft Entra ID user to all configured groups using the selected Entra ID connection.

Once the user has been added to the groups, later workflow steps can:

• Assign Microsoft 365 licenses
• Configure application permissions
• Notify administrators
• Generate audit reports
• Synchronize external systems
• Continue identity lifecycle management processes

You need to set up an EntraID connection. Go to Integration > Connections > Generic Connections. On the Manage Generic Connections page, click Actions > Create. A sample connection is included here for reference. 

Example:

Let’s build and execute the “clsAddEntraIDUserToGroupsDef” example:

• Create a new process definition named “clsAddEntraIDUserToGroupsDef” and open it in designer mode. 
• Drag a “clsAddEntraIDUserToGroups” step to the canvas.
• Connect the dots between the “Start” and “clsAddEntraIDUserToGroups” steps.
• Click the "clsAddEntraIDUserToGroups" step to configure its "Required" properties. Provide a name for the step. Select the EntraID connection from the drop-down list. Enter the “Username”. Click the button to enter "Group Names". Click the Save button. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• Click the button to enter "Group Names". A pop-up is displayed for configuration. Click the Add Row (+) button to insert an empty row. Provide the Group Name. Click the Save button. You may insert multiple group names by using the Add Row button.  

• The “Logging” configuration is necessary for documentation and also measures workflow progress and percent complete. This is achieved by configuring the step state and percent fields individually, as shown below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Add User To Groups step, FlowWright connects to the configured Microsoft Entra ID tenant and attempts to add the specified user to each configured group. If the user is successfully added to all specified groups, the workflow follows the Added return path. If one or more groups cannot be updated—for example, because a group does not exist, the user cannot be found, or the connection cannot be established—the workflow follows the NotAdded return path.

Tips:

• Verify that the Microsoft Entra ID connection has been configured before using this step.
• Use workflow variables to dynamically populate the username and group list.
• Verify that each specified group exists before attempting to add the user.
• Ensure that the specified User Principal Name (UPN) already exists in Microsoft Entra ID.
• Use the keyword list editor to simplify managing multiple group assignments.
• Use the Added and NotAdded return paths to implement appropriate success and error handling.
• Combine this step with the Create EntraID User or Create EntraID Group steps to automate complete user provisioning.

Notes:

• A valid Microsoft Entra ID connection must exist before this step can execute.
• The configured connection must have sufficient Microsoft Graph permissions to manage group memberships.
• The specified user account and groups must already exist in Microsoft Entra ID.
• Duplicate group memberships are ignored or handled according to Microsoft Entra ID behavior.
• Network connectivity or authentication issues may prevent successful updates to group membership.
• The workflow should include appropriate error handling for the NotAdded return path.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• Microsoft Entra ID connection
• Username mapping
• Group list mappings
• Workflow variable mappings
• Microsoft Graph permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.