How can I add a new user to a cloud only Entra ID licensing group?

Question

I'm currently writing an "After User Creation" rule and I have a PowerShell script that adds the newly created, on-premises synced user to a handful of cloud-only Entra ID groups used for group based licensing. The problem I'm having is that the script keeps saying the user isn't found when I run the command using sAMAccountName or SID but it works fine if I go and find the Entra ID specific SID number for the user. The problem is that the Entra specific SID doesn't appear to be an option in the value references for my script.

So, how can I add an on-premises synced user to a cloud only group in an "After User Creation" rule using PowerShell?

I should note that using the regular actions (outside of PowerShell) work fine in this scenario, it is only the powershell cmdlet that fails. I need to use PowerShell for the additional condtional flexibility.

Answer 1

Hello,

If the built-in Add to group action works fine, you already have the pre-create function enabled for Microsoft Entra accounts. In this case, the script should also work fine. Make sure to set the -Server parameter to cloud domain, e.g. company.onmicrosoft.com. Should the issue persist, please, send the full script you are using without hiding anything at support@adaxes.com.

Comments

I think I figured it out, the script is working when I actually run the business rule but does not work when I run the script from the script editor.

Thank you for your help.