Microsoft Azure AD-Error adding user to group-Method failed: 403 - Forbidden username/password combo

[Rahul Singh6]

Hi,

I am trying to add an existing user to an existing Azure AD group using their respective IDs via flow action "Add User To Group".  Though the user and group exist (and the user is created by another action which means it is not an authentication issue), I can't add this newly created user to the group and get the following error.

----------------------

Error Message - 'Method failed: (/v1.0/groups/<Azure AD Group ID>/members/$ref) with code: 403 - Forbidden username/password combo'

---------------------

The error description matches SN KBA https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0823811. However, I find that some context is missing the KBA and I am unable to make the suggested resolution work for me.

Seeking suggestions/fix to this issue.

Thanks.

[V S Jithendra K]

Hi @Santvana Vaid,

We are also facing the same issue. What do you mean by adding role to the calling/integration user? Which user are you referring here? Please clarify. 

[shivaniamborkar]

@Rahul Singh6 @Community Alums @Santvana Vaid 

Need help!!

I want to know how to get Microsoft azure AD groups id by flow. So that, I can add users to group by using flow action - Add Users to group.

Thanks in Advance!!

[Santvana Vaid]

Hello @shivaniamborkar 

You can use either of the two oob action under same spoke:

1. Look up Group ID

2. Look up Group Details

The output will result in the Azure group ID and that can be used further in the flow.

Hope this helps!

Thanks 

[shivaniamborkar]

Hello @Santvana Vaid 

Thanks for quick reply.

As you mentioned for using Look up Group ID or Look up Group Details. I have checked the Microsoft Azure Active Directory spoke and it's action. These two action which you have mentioned is not available. Please suggest some different solution.

Thank you

[Santvana Vaid]

@shivaniamborkar 

If you have the plugin with version 4.1.3 for Microsoft Azure Active directory spoke then the action that you need to use is "Look up Group". This is oob action with the given version of spoke.

It will have an output of object type and you can select ID to get Azure group object id.

Refer the screenshot:

Hope it helps!