How to add an user to group in microsoft AD spoke using snow

prasannah · ‎02-17-2025

Hi All,

I got Requirement like if I submit a catalog form then user or user email needs to be added in Microsoft entra group.
please help me on this. how I can configure the flow designer what are all the plugin I need to install and need steps on configuring the both side.

thanks in advance,
Prasanna

Viraj Hudlikar · ‎02-17-2025

Hello @prasannah

To achieve this requirement, you can use the Microsoft Entra ID Spoke in ServiceNow's Flow Designer.

Prerequisites:

1) Ensure you have a ServiceNow instance with the necessary permissions.

2) You need a Microsoft Entra subscription.

3) Install the following plugins in ServiceNow:

-> Microsoft Entra ID Spoke - Configure ServiceNow for automatic user provisioning with Microsoft Entra ID - Microsoft Entra ID | ...

-> Integration Commons for CMDB

Now your flow will be as:

Trigger will be when a catalog item is submitted.

First use a Lookup User action to find the user based on the email provided in the catalog form. If user reference field is provided in catalog item then you can skip this step and directly use from req item variable value by dot walk and pass to next step.

Use the Add User to Group action from the Microsoft Entra ID Spoke to add the user to the specified group (you can take from form or if you have fix group pass that value)

If my response has helped you hit helpful button and if your concern is solved do mark my response as correct.

Thanks & Regards
Viraj Hudlikar.

View solution in original post

automator · ‎02-26-2025

{
    "Action Status": {
        "code": 1,
        "message": "Error:  Unknown Error (Process Automation.bc3088ea0bd4a110cfed40976877b252; line 6)"
    }
}

JuberS · ‎08-13-2025

Facing Same issue

{
    "Action Status": {
        "code": 1,
        "message": "Error:  Unknown Error (Process Automation.bc3088ea0bd4a110cfed40976877b252; line 6)"
    }
}

Steven Parker · ‎08-14-2025

I am seeing the same error and I am using a Lookup User and Lookup Group to get the IDs for both. I have both the Group ID and the User ID from the lookups and I am still getting the error you are seeing when I use them in the "Add User to Group".

Please mark this response as correct and/or helpful if it assisted you with your question.
Steven

prasannah · ‎08-14-2025

Hi Steven,
1. don't use mid-server( if you are using)
2. try to repair plugin once
3. check the roles required in azure ad
4. try to pass mail id in lookup user and use that in add user to group action

regards
Prasanna