Adding a user to Azure AD group via graph api

Question

I am following the microsoft docs on https://learn.microsoft.com/en-us/graph/api/group-post-members?view=graph-rest-1.0. My goal is to use the graph api to add a user to a specific group. When I make the request

POST https://graph.microsoft.com/v1.0/groups/{group-id}/members/$ref

With a body of

{"@odata.id": "https://graph.microsoft.com/v1.0/directoryObjects/{user-id}"}

I get the following error

{
  "error": {
    "code": "Authorization_RequestDenied",
    "message": "Insufficient privileges to complete the operation.",
    "innerError": {
      "date": "2020-09-08T00:14:25",
      "request-id": "bcc05c0f-8195-4744-8736-bd30586a7663"
    }
  }
}

What needs to be added to get this to work?

unknown · Accepted Answer · 2020-09-08 01:35:25Z

4

According to the document of Add member, we need one of the following permission in scope:

Please navigate to your application -> API permission in the portal. Add one of the permissions of Microsoft Graph, and grant admin consent for your tenant.

If you use the client credentials flow, you need to add application permission. Delegated permission is suitable for other flows.

answered Sep 8, 2020 at 1:35

unknown

7,5531 gold badge9 silver badges18 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Evan Gertis Over a year ago

btw I was able to get this to work with just GroupMember.ReadWrite.All Thank you for the help!

Collectives™ on Stack Overflow

Adding a user to Azure AD group via graph api

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related