IT Service Management AI agent collection Manage Microsoft 365 group members agentic workflow

  • Release version: Zurich
  • Updated July 31, 2025
  • 2 minutes to read
  • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of IT Service Management AI agent collection Manage Microsoft 365 group members agentic workflow

    The Manage Microsoft 365 group members agentic workflow enables ServiceNow customers to autonomously add or remove users from Microsoft 365 email distribution lists. This workflow integrates with Microsoft Entra ID (formerly Microsoft Azure Active Directory) via the Microsoft Entra ID spoke, which must be installed to enable this functionality. The workflow is manually triggered and designed to simplify management of Microsoft 365 group memberships directly within ServiceNow.

    Show full answer Show less

    Key Features

    • Microsoft 365 Group Membership AI Agent: Looks up Microsoft 365 groups and manages member additions or removals within email distribution lists.
    • Approval Process Control: Customers can configure whether membership changes require approval by setting system properties:
      • snitsmaia.office365groupmemberapproval.required controls if approval is needed (default is true).
      • snitsmaia.office365groupmemberapproval.groupid specifies the approval group’s sysid.
    • Role-Based Access: Access to the workflow output can be configured by assigning roles, with the itil role assigned by default. Corresponding ACLs must be updated if roles are changed.
    • Customizable Workflow: The default agentic workflow can be duplicated and tailored to specific organizational requirements. Any modifications require updating related instructions and settings.
    • Notification and Human Agent Interaction: Upon user additions or removals, human agents are notified within AI Agent Studio to review and complete the tasks following on-screen guidance.

    Practical Use and Next Steps

    • Install the Microsoft Entra ID spoke to enable the workflow.
    • Manually invoke the workflow via AI Agent Studio under All > AI Agent Studio > Create and manage > Manage Microsoft 365 group members.
    • Configure approval requirements and approval groups as needed to align with organizational policies.
    • Adjust role permissions for users who need access to the workflow output, ensuring ACLs are updated accordingly.
    • Duplicate and modify the agentic workflow if custom behavior or integration is required, maintaining consistency in instructions.
    • Leverage the AI Agent Studio interface to monitor and act on group membership changes efficiently.

    This agentic workflow streamlines Microsoft 365 group membership management within ServiceNow, reducing manual overhead and integrating approval workflows to maintain governance.

    Use the Microsoft 365 group membership AI agent to manage users in the Microsoft 365 email distribution list.

    Manage Microsoft 365 group members agentic workflow overview

    Using the Manage Microsoft 365 group members agentic workflow, add or remove names and their email address from the Microsoft 365 email distribution list.

    Important:
    Note:
    The Manage Microsoft 365 group members agentic workflow doesn’t have a trigger and is invoked manually.

    To modify the Manage Microsoft 365 group members agentic workflow, duplicate it, and adjust the settings according to your requirements.

    Important:
    When you modify an agentic workflow, AI agent, or tool, make sure that you update all instructions accordingly.

    Manage Microsoft 365 group members

    Autonomously manage adding and removing users in a Microsoft 365 email distribution list.

    To access the agentic workflow:
    1. Navigate to All > AI Agent Studio > Create and manage.
    2. Select Manage Microsoft 365 group members.

    AI agents used in the Manage Microsoft 365 group members agentic workflow

    The Microsoft 365 group membership AI agent is used to look up Microsoft 365 groups and add or remove members from the email distribution list.

    Important:
    In the Define availability screen for the AI agent, make sure that the Status field is enabled to activate the AI agent.

    Add or remove group members in a Microsoft 365 group

    In the agentic workflow record:
    1. Review the information in the Describe and connect screen and in the Define trigger screen, make the necessary updates, and then select Save and Continue.
    2. In the Select display screen:
      1. Choose where you want the agentic workflow output to be displayed.
      2. Use the arrow next to it to add roles that can access the agentic workflow.
        Note:
        The itil role is added by default. You can change the role for the agent. If you change the role, you must also change the role in the following three flow and flow action ACLs:
        • sn_itsm_aia.look_up_group
        • sn_itsm_aia.look_up_user
        • sn_itsm_aia.manage_office_365_group_member
      3. Select Save and test.

        The agent executes the request for the agentic workflow.

    Example of the Manage Microsoft 365 group members agentic workflow output in the ServiceNow AI Agent StudioMicrosoft 365 group members agentic workflow output.

    In the AI Agent Studio, the human agent gets notified as soon as one or more users are added or removed so that they can follow the on-screen instructions and complete the task. For more information, see Request the generative AI capabilities in ITSM by using the Now Assist panel.