IT Service Management AI agent collection Manage Microsoft 365 group members agentic workflow
Summarize
Summary of IT Service Management AI agent collection Manage Microsoft 365 group members agentic workflow
The Manage Microsoft 365 group members agentic workflow enables ServiceNow customers to autonomously add or remove users from Microsoft 365 email distribution lists. This workflow integrates with Microsoft Entra ID (formerly Microsoft Azure Active Directory) via the Microsoft Entra ID spoke, which must be installed to enable this functionality. The workflow is manually triggered and designed to simplify management of Microsoft 365 group memberships directly within ServiceNow.
Show less
Key Features
- Microsoft 365 Group Membership AI Agent: Looks up Microsoft 365 groups and manages member additions or removals within email distribution lists.
- Approval Process Control: Customers can configure whether membership changes require approval by setting system properties:
snitsmaia.office365groupmemberapproval.requiredcontrols if approval is needed (default is true).snitsmaia.office365groupmemberapproval.groupidspecifies the approval group’s sysid.
- Role-Based Access: Access to the workflow output can be configured by assigning roles, with the itil role assigned by default. Corresponding ACLs must be updated if roles are changed.
- Customizable Workflow: The default agentic workflow can be duplicated and tailored to specific organizational requirements. Any modifications require updating related instructions and settings.
- Notification and Human Agent Interaction: Upon user additions or removals, human agents are notified within AI Agent Studio to review and complete the tasks following on-screen guidance.
Practical Use and Next Steps
- Install the Microsoft Entra ID spoke to enable the workflow.
- Manually invoke the workflow via AI Agent Studio under All > AI Agent Studio > Create and manage > Manage Microsoft 365 group members.
- Configure approval requirements and approval groups as needed to align with organizational policies.
- Adjust role permissions for users who need access to the workflow output, ensuring ACLs are updated accordingly.
- Duplicate and modify the agentic workflow if custom behavior or integration is required, maintaining consistency in instructions.
- Leverage the AI Agent Studio interface to monitor and act on group membership changes efficiently.
This agentic workflow streamlines Microsoft 365 group membership management within ServiceNow, reducing manual overhead and integrating approval workflows to maintain governance.
Use the Microsoft 365 group membership AI agent to manage users in the Microsoft 365 email distribution list.
Manage Microsoft 365 group members agentic workflow overview
Using the Manage Microsoft 365 group members agentic workflow, add or remove names and their email address from the Microsoft 365 email distribution list.
- To enable the Manage Microsoft 365 group members agentic workflow, you must install the Microsoft Entra ID spoke. For more information, see Microsoft Entra ID Spoke (formerly Microsoft Azure Active Directory spoke).
- After you add or remove users to the group using the Microsoft 365 agentic workflow, follow the instructions listed in the table.
If Do this You want the workflow output of adding or removing users to go through an approval process. - Add the sn_itsm_aia.office_365_group_member_approval.required system property.Note:This property is set to true by default.
- Add the sn_itsm_aia.office_365_group_member_approval.group_id system property.
- Add the sys_id of the group that you want to use for approvals as the value of the sn_itsm_aia.office_365_group_member_approval.group_id system property.
- Add users that you'd like to approve the output for this agentic workflow in the Office 365 Approval group.
You don’t want the workflow output of adding or removing users to go through an approval process. Set the sn_itsm_aia.office_365_group_member_approval.required system property to false. - Add the sn_itsm_aia.office_365_group_member_approval.required system property.
To modify the Manage Microsoft 365 group members agentic workflow, duplicate it, and adjust the settings according to your requirements.
Manage Microsoft 365 group members
Autonomously manage adding and removing users in a Microsoft 365 email distribution list.
- Navigate to .
- Select Manage Microsoft 365 group members.
AI agents used in the Manage Microsoft 365 group members agentic workflow
The Microsoft 365 group membership AI agent is used to look up Microsoft 365 groups and add or remove members from the email distribution list.
Add or remove group members in a Microsoft 365 group
- Review the information in the Describe and connect screen and in the Define trigger screen, make the necessary updates, and then select Save and Continue.
- In the Select display screen:
- Choose where you want the agentic workflow output to be displayed.
- Use the arrow next to it to add roles that can access the agentic workflow.Note:The itil role is added by default. You can change the role for the agent. If you change the role, you must also change the role in the following three flow and flow action ACLs:
- sn_itsm_aia.look_up_group
- sn_itsm_aia.look_up_user
- sn_itsm_aia.manage_office_365_group_member
- Select Save and test.
The agent executes the request for the agentic workflow.
In the AI Agent Studio, the human agent gets notified as soon as one or more users are added or removed so that they can follow the on-screen instructions and complete the task. For more information, see Request the generative AI capabilities in ITSM by using the Now Assist panel.