Previously one could add members to mail-enabled security groups via Graph API. But turns out that was a bug, and it was fixed some weeks ago removing this functionality. Would it be possible to allow add-remove of members in mail-enabled security groups via Graph API?
45 Comments
Same problem to this date. I built a power automate with "When a group member is added or removed" then "Add member to group" or "Remove member from group" Office365 connectors.
It should add or remove users from a distro mail and I get this:
{ "error": { "code": "Request_BadRequest", "message": "Cannot Update a mail-enabled security groups and or distribution list.", "innerError": { "date": "2024-11-01T13:09:30", "request-id": "-8153-47c1-8e8b-", "client-request-id": "-8153-47c1-8e8b-" } }}{ "error": { "code": "Request_BadRequest", "message": "Cannot Update a mail-enabled security groups and or distribution list.", "innerError": { "date": "2024-11-01T13:09:30", "request-id": "-8153-47c1-8e8b-", "client-request-id": "-8153-47c1-8e8b-" } } }At the same time, MS offers to create dynamic distro emails with the least & worst options ever, not even close to the dynamic groups' options offered.
It's bad.
Almost 3 years later and we're still waiting for this feature to be re-added.
We use a product called 'Code Two Signatures' whereby all our email signatures are managed in the cloud, not client level. Users are required to be added to a mail-enabled security group within exchange.
To update this group, I have to manually remember to add & remove users when they join/leave. Why is not possible to automate such a simple task?
I have an on-boarding flow where power automate creates the user, assigns licenses, adds to groups and more, yet I have to login to exchange and update this group.
Does anyone have an solution?
It's a shame because Microsoft do so many things well, but always fall short in listening to their customers.I have a different use case, but I suspect it is caused by the same limitation.
I need a group to override the default outbound Anti-spam policy in the Defender portal.
The group need an approval flow to join it. First the manager, and next a specific person or group.
It would be obvious to do this with an Access Package.
But no:- Apparently this has to be a "distribution group or mail-enabled security group", which lives in Exchange.
- These group types cannot be managed from Entra ID through the Graph API
And possibly for that reason, you cannot use an Access Package to control membership.
Maybe an M365 group can, but brings a lot of things I have no need or wish for. It cannot be hidden etc.
Strangely I can use a synched onprem group. Maybe we should do the flow in ServiceNow.
Or use two groups, one in Entra ID and one in Exchange. Unfortunately it seems Exchange dynamic group memberships cannot be based on other group memberships, so I guess I will have to schedule my own script or something....it must be realized for corporate use!!!. there are many types of groups with different management points are existed in EntraID/EXO. The main big issue, we cannot migrate this functionality from AD to EntraID/EXO in a good way.
This would be very helpful if MS add this feature.
Hope to get update very soon.
Nearly a thousand day have passed and Microsoft still didn't even react to such a simple a request like this, disappointing.
Would really love to see this feature. Hate having to use EXO powershell module when nearly everything else has been migrated to Graph. Any updates would be appreciated!
Why are we still waiting for this? I've seen MS involvement in the conversation thread but we're still here 3 years later voicing our desire to have this added to the Graph API.
First comment of 2024!
I just want to add my voice to the crowd- We want this. We need this. Thank you.+1 Would love to have this in Graph. Can manage M365 groups, but too much baggage for auto-updated distributions. DLs and MESGs are what we need to manage new joins, moves and terminations!
