Description:

This step creates a new Active Directory group.

The Create Active Directory Group workflow step connects to Microsoft Active Directory using a configured LDAP connection and creates a new group with the specified group name and description.

Optionally, the new group can be associated with an existing parent group, allowing organizations to automate hierarchical group provisioning and maintain structured group management.

This step provides an efficient way to automate group creation during application provisioning, department setup, project onboarding, security administration, or identity lifecycle workflows.

The step supports:

• Active Directory group creation
• Configurable LDAP connections
• Group provisioning with group name and description
• Optional parent group association
• Dynamic input values using workflow variables
• Integration with Microsoft Active Directory

This step can be used for:

• Department provisioning
• Project onboarding
• Security group management
• Application provisioning
• Identity lifecycle management
• Access management
• Business process automation

Usage:

The Create Active Directory Group step is typically placed during department provisioning, project setup, application deployment, or access management workflows.

The workflow creates the specified Active Directory group using the configured LDAP connection.

A typical workflow might look like this:

Once the group has been created, later workflow steps can:

• Add users to the group
• Assign application permissions
• Configure access policies
• Synchronize identity systems
• Notify administrators
• Generate audit reports
• Continue identity lifecycle management processes

You need to set up an LDAP connection before using this step.

Go to:

Integration → Connections → Generic Connections

On the Manage Generic Connections page, click:

Actions → Create

Configure an Active Directory connection before using this workflow step.

A sample connection is provided here for reference. 

Example:

Let’s build and execute the “clsCreateADGroupDef” example:

• Create a new process definition named “clsCreateADGroupDef” and open it in the designer. 
• Drag a “clsCreateADGroup” step to the canvas.
• Connect the dots between the “Start” and “clsCreateADGroup” steps.
• Click the "clsCreateADGroup" step to configure its "Required" properties. Provide a name for the step. Select the LDAP connection from the drop-down list. Enter the “Group Name and Description”. Click Save. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• Click the "clsCreateADGroup" step to configure its "Optional" properties. Enter the Active Directory parent group name (optional). Then click the Save button. 

• The “Logging” configuration is necessary for documentation and for measuring workflow progress and percent complete. This is done by configuring the step state and percent fields individually, as shown in the images below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the Create Group step, FlowWright connects to the configured Active Directory server using the selected LDAP connection and attempts to create the specified Active Directory group. If the operation completes successfully, the workflow follows the Created return path. If the group already exists, the group name is invalid, the specified parent group cannot be found, or the LDAP connection cannot be established, the workflow follows the NotCreated return path.

• Click the process step to view its properties. The step should create the specified Active Directory group and return Created upon successful completion. Use the List All Groups or Get Group Members workflow step to verify that the new group has been created successfully.

Tips:

• Verify that the LDAP connection has been configured before using this step.
• Ensure that the LDAP account has permission to create Active Directory group objects.
• Verify that the specified group name is unique within the Active Directory domain.
• Use meaningful group descriptions to simplify administration and auditing.
• Specify a parent group only when your organization's directory structure requires hierarchical group organization.
• Use workflow variables to dynamically populate the group name, description, and parent group.
• Use the Created and NotCreated return paths to implement appropriate success and error handling.
• Combine this step with Add User To Groups, Delete Group, Get Group Members, or List All Groups steps to automate complete Active Directory group lifecycle management workflows.

Notes:

• A valid LDAP connection must exist before this step can execute.
• The configured LDAP account must have sufficient permissions to create Active Directory group objects.
• The specified group name should be unique within the Active Directory environment.
• The parent group is optional and should reference an existing Active Directory group when specified.
• Creating a group does not automatically assign users or permissions to it.
• Network connectivity or authentication issues may prevent the group from being created.
• The workflow should include appropriate error handling for the NotCreated return path.
• The workflow result depends on the current state of Active Directory and the permissions granted to the configured LDAP connection.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• LDAP connection
• Group name mapping
• Description mapping
• Parent group mapping (if applicable)
• Workflow variable mappings
• Active Directory permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.