ADv2 Spoke "Error - Insufficient access rights to perform the operation"

AswinKumarP1343
Tera Contributor

Hi Community,

I am testing the Azure AD V2 Spoke action "Add User to Group" in ServiceNow.

I have resolved the previous issues, but now I am getting the following error:

"Insufficient access rights to perform the operation."

The connection is successful, but the action fails when trying to add a user to an AD group.

Has anyone encountered this issue before? Could you please suggest what permissions or configurations I should check to resolve it?

AswinKumarP1343_0-1784195307341.png

 

 

1 REPLY 1

Bhargavi Patel
Kilo Guru

Hi @AswinKumarP1343 

The error "Insufficient access rights to perform the operation" usually indicates a Microsoft Entra ID (Azure AD) permissions issue, not a ServiceNow issue.

Check that:

  • The app registration has Group.ReadWrite.All and User.Read.All (or the required Microsoft Graph permissions).
  • Admin consent has been granted for those permissions.
  • The service account/app has permission to manage the target group (especially if it's a privileged or role-assignable group).
  • The user being added and the group both exist and are valid.

If the permissions are correct, test the same operation directly against the Microsoft Graph API to confirm it's not an Azure AD permission issue.

Please Accept the solution if it assisted you with your question & Mark this response as Helpful.