Documentation

{{docApp.title}}

{{docApp.description}}

How can we help?

{{docApp.searchError}}
{{product.name}}

Searching in {{docApp.searchFilterBySpecificBookTitle}}

{{docApp.searchResultFilteredItems.length}} results for: {{docApp.currentResultsSearchText}} in {{docApp.searchFilterBySpecificBookTitle}}
Search results have been limited. There are a total of {{docApp.searchResponse.totalResultsAvailable}} matches.

You have an odd number of " characters in your search terms - each one needs closing with a matching " character!

{{docApp.libraryHomeViewProduct.title || docApp.libraryHomeViewProduct.id}}

{{docApp.libraryHomeViewProduct.description}}

  1. {{book.title}}

{{group.title || group.id}}

{{group.description}}

  1. {{book.title}}

{{group.title}}

Entra ID Group Management

Logo for package Entra ID Group Management

Managing Entra ID Groups

Get visibility of Entra ID group information within Hornbill. Save time by centralizing and automating changes to Entra ID groups, users, and computers.

Package Details

  • Vendor: Microsoft
  • Target Platform: Windows Universal
  • Package Type: Windows Account Management
  • Subscription Tiers: BasicServerDevOps

Why use this

Automate Entra ID Group Management

If manual Entra ID updates are holding up your processes, use this integration plug-in to automate updates for improved efficiency. Entra ID updates can be triggered by your Business Process workflows, saving you time and reducing IT team workloads.

Example: Automatically add a new user to Entra ID as part of your Newstart Onboarding process. It also empowers your Service Desk agents to make changes without leaving Hornbill-reducing call times. No need to log in to Azure or send a task to another team. Agents can add/remove groups, users, and computers in just a few clicks.

Benefits

  • Reduce service desk call times
  • Reduce IT ops workloads
  • Accelerate service delivery
  • Eliminate human error

How to get it

  • You can try out ITOM for free (not for production use, limited runs) by installing the ITOM application from the Hornbill App Store.
  • If you would like to explore ITOM and consider subscribing, please contact your Hornbill account manager.

Requirements

  • Install the Hornbill Site Integration Server inside your firewall (if you don’t already have it)
  • To manage an Entra ID instance, Microsoft Graph must be present.
  • PowerShell v7.x
  • Microsoft Graph PowerShell module installed on the machine that will be execute the scripts (the correct Remote Server Administration Tools (RSAT) package for your OS)
  • If the script execution policy on the machine executing these operations is set to Restricted, then this will need to be updated to RemoteSigned. See the Microsoft website for more information.

Authentication

When creating jobs for operations contained within this package, they need to be run on the target machine as a user who has the correct privileges within your environment. To create and securely store keys:

  • In the Configuration area of your Hornbill instance, navigate to Platform Configuration > Security > KeySafe;

  • Click on the + Create New Key button, then select Entra ID ITOM;

  • Give the KeySafe Key a Title (this is the name/identifier for the Entra ID account as you will see it when creating an IT Automation Job, or adding an IT Automation node to a Workflow);

  • Optionally add a Description;

  • Populate the Application ID field with the application ID (sometimes called client ID)

  • Populate the Client Secret field with the Client Secret

  • Populate the Tenant ID field with the Tenant ID

  • Select Create Key to save.

Once you have created your KeySafe Key, you can then use it to populate the Credentials > Admin or Run As inputs when creating IT Automation Jobs from this package.

Package Automations

OperationDescription
Add Computer This operation can be used to add a Computer object to an Entra ID Group.
Add Group This operation can be used to add an Entra ID Group object to an Entra ID Group.
Add User This operation can be used to add a User object to an Entra ID Group.
Create This operation can be used to create a new Entra ID Group.
Delete This operation can be used to delete an Entra ID Group.
Get This operation can be used to get information about an Entra ID Group
Remove Computer This operation can be used to remove a Computer object from an Entra ID Group.
Remove Group This operation can be used to remove a group from an Entra ID Group
Remove User This operation can be used to remove a user from an Entra ID Group
In This Document