Unanswered

Error message: failed: Insufficient privileges to complete the operation.

(0) Share

Report

Posted on by Gabriel Guadamuz

Hi Guys,

How can I resolve the 'Insufficient privileges to complete the operation' issue when adding a user to an Azure AD security group in Power Automate? The action 'Controller - Security_group' fails due to authorization problems. What steps should I take to fix this in the flow designer?
The flow is able to create the new user through the completed form, but it cannot add the selected security group due to lack of privileges. The connectors have been checked and are working correctly. We recreated the actions in another flow to test if the user could be added manually, but we get the same error. Do you think this could be a permissions issue in Microsoft Graph or with AD Sync?

I’ve already added the following permissions: Global Admin, User Admin, People Admin, Group Admin, and Privileged Role Admin.

regards,

Categories:

General topics

I have the same question (0)

All responses (2)

Answers (0)

Expiscornovus 33,830 Most Valuable Professional on at

Like (0)

Report
Copy link

Link copied!

Hi @GG-23101926-0,

Just to double check. If I understand you correctly the group is a synced/hybrid Active Directory group?

In that case wouldn't you be managing group membership on the Active Directory side of things instead of in Entra Id (source of authority)? Or do you have a different setup?
https://learn.microsoft.com/en-us/microsoft-365/enterprise/manage-microsoft-365-groups?view=o365-worldwide#hybrid

Happy to help out 😁

I share more #PowerAutomate and #SharePointOnline content on my Blog, LinkedIn, Bluesky profile or Youtube Channel

Was this reply helpful? Yes No
Gabriel Guadamuz 2 on at

Like (0)

Report
Copy link

Link copied!

Hi @Expiscornovus

Thanks for your response and help. Just to clarify, the group we’re working with is a cloud-based security group, not a synced/hybrid AD group. In Azure Entra ID, its source is listed as “Cloud”, which means it was created directly in Entra ID and is managed entirely in the cloud.
So in this case, we can manage membership directly through Entra ID or via Power Automate, and there’s no need to handle it on the on-premises Active Directory side.

Was this reply helpful? Yes No