Microsoft AD Add user to group(distribution list)

[Jube]

Hi,

I'm having an issue in form automation. I have catalog item with flow, in flow i added action from Microsoft AD > Add user to Group.

I have filled field with username data > with user ID. And in Group name > i have pasted in Object ID from AD.

When i check execution logs i get an error:  Invalid GroupName

Any ideas why it is like that? Is this because im doing this in sub production and it does not access MS AD info? 

Or should i do additional config steps like do some Ajax calls, which runs PowerShell query to return group info? or it should just work fine without additional tuning, just adding user id and groupname?

Thanks

[Kieran Anson · Accepted solution]

Based on the constructed query, it's expecting the samAccountName not the GUID. You need to provide the group name in which the user is to be added to 

[Jube]

Hi! thanks for letting me know, after your comment i double checked the MID server script and it true, it is asking for samAccountName. Now have updated the flow and getting different error:

IPaaSActionProbe | PowerShell script execution failed. Script returned status 1 using account user dspa.integrationUser32325.

Failed while executing ActionAddUserToADGroup.ps1 (Access denied)

PowerShell script execution failed. Script returned status 1 using account user dspa.integrationUser32325.

I assume thats because im in sub prod? Or its something else? Because when I check AD Connection & Credential Aliases there is active user account with valid password.

[Kieran Anson]

It possibly doesn't have the necessary permissions. Access denied means it doesn't have access to either modify the user, or the group. You'd need to work with your AD team to understand the full issue