ADv2 Spoke "Error - Insufficient access rights to perform the operation"
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
Hi Community,
I am testing the Azure AD V2 Spoke action "Add User to Group" in ServiceNow.
I have resolved the previous issues, but now I am getting the following error:
"Insufficient access rights to perform the operation."
The connection is successful, but the action fails when trying to add a user to an AD group.
Has anyone encountered this issue before? Could you please suggest what permissions or configurations I should check to resolve it?
- Labels:
-
IntegrationHub
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
3 weeks ago
The error "Insufficient access rights to perform the operation" usually indicates a Microsoft Entra ID (Azure AD) permissions issue, not a ServiceNow issue.
Check that:
- The app registration has Group.ReadWrite.All and User.Read.All (or the required Microsoft Graph permissions).
- Admin consent has been granted for those permissions.
- The service account/app has permission to manage the target group (especially if it's a privileged or role-assignable group).
- The user being added and the group both exist and are valid.
If the permissions are correct, test the same operation directly against the Microsoft Graph API to confirm it's not an Azure AD permission issue.
Please Accept the solution if it assisted you with your question & Mark this response as Helpful.