Description:

This step retrieves all groups from a Microsoft Entra ID tenant.

The List All EntraID Groups workflow step connects to Microsoft Entra ID (formerly Azure Active Directory) and retrieves the complete list of groups available within the configured tenant.

The retrieved group information is stored in a FlowWright variable or global variable, allowing subsequent workflow steps to process, filter, or iterate through the group collection.

The step supports:

• Microsoft Entra ID group enumeration
• Configurable Entra ID connections
• Storage of group collections in workflow variables
• Dynamic workflow processing
• Integration with Microsoft Graph through FlowWright connections

This step can be used for:

• Group directory synchronization
• Security group reporting
• Microsoft 365 group audits
• Bulk group processing
• Access review workflows
• Identity lifecycle management
• Business process automation

Usage:

The List All EntraID Groups step is typically placed at the beginning of a workflow that needs to process or report on Microsoft Entra ID groups.

The workflow stores the retrieved group collection in the specified workflow variable or global variable.

Once the groups have been retrieved, later workflow steps can:

• Iterate through the group collection
• Generate group reports
• Perform security audits
• Synchronize group information
• Update external systems
• Execute bulk identity and access management operations

You need to set up an EntraID connection. Go to Integration > Connections > Generic Connections. On the Manage Generic Connections page, click Actions > Create. A sample connection is included here for reference. 

Example:

Let’s build and execute the “clsListAllEntraIDGroupsDef” example:

• Create a new process definition named “clsListAllEntraIDGroupsDef” and open it in designer mode. 
• Drag a “clsListAllEntraIDGroups” step to the canvas.
• Connect the dots between the “Start” and “clsListAllEntraIDGroups” steps.
• Define a variable or a global to store the groups.
• Click the "clsListAllEntraIDGroups" step to configure its "Required" properties. Provide a name for the step. Select the EntraID connection from the drop-down list. Provide the variable or global reference. Click the Save button. Note: Click the "AI Predict" button to have the Copilot add new process steps that match your process description. 

• The “Logging” configuration is necessary for documentation and also measures workflow progress and percent complete. This is achieved by configuring the step state and percent fields individually, as shown below. Configure the “Logging” using the following properties.

• Save the Process Definition. Create a new Process Instance and execute it. When the workflow reaches the List All Groups step, FlowWright connects to the configured Microsoft Entra ID tenant and retrieves all available groups. The complete group collection is stored in the specified workflow variable or global variable. If the group list is successfully retrieved, the workflow follows the True return path. If the connection cannot be established or the group information cannot be retrieved, the workflow follows the False return path.

Tips:

• Verify that the Microsoft Entra ID connection has been configured before using this step.
• Store the returned group collection in a workflow variable that can be referenced by subsequent workflow steps.
• Use the returned data together with For Each or collection-processing steps to perform bulk operations.
• Use this step when generating group reports or performing security and compliance audits.
• Use the True and False return paths to implement appropriate success and error handling.
• Combine this step with group membership, provisioning, or reporting steps to automate Microsoft Entra ID administration.

Notes:

• A valid Microsoft Entra ID connection must exist before this step can execute.
• The configured connection must have sufficient Microsoft Graph permissions to read directory groups.
• The number of groups returned depends on the Microsoft Entra ID tenant.
• Network connectivity or authentication issues may prevent successful retrieval.
• The workflow should include appropriate error handling for the False return path.
• Large tenants may require additional processing time when retrieving all groups.

Definition Sample:

You may download the sample definition(s) from the link provided and later import them (drag-and-drop) into your FlowWright Process Definition (XML file) or Form Definition (HTML file) page.

Note: Verify and complete any missing configuration after importing the sample, including:

• Microsoft Entra ID connection
• Output variable mapping
• Workflow variable mappings
• Microsoft Graph permissions
• Environment-specific settings

After verifying the configuration, save the Process Definition before execution.

Click here to download the sample file.