Microsoft Entra IDInstall

Summary

Create a Microsoft Entra group by sending its required display name and mail alias to Microsoft Graph. Choose a Microsoft 365 or Security group, set membership options as needed, and optionally supply extra group properties.

Inputs

• Group Type — Choose Microsoft 365 or Security. For Security, the node sets mailEnabled to false and securityEnabled to true. For Microsoft 365, configure the displayed Mail Enabled and Security Enabled fields.
• Group Name (required) — Display name for the group; limited to 256 characters.
• Group Email Address (required) — Mail alias local-part only, without a domain. Limited to 64 characters and restricted to ASCII characters excluding @ () \ [] " ; : <> , and spaces.
• Mail Enabled (required) — For Microsoft 365 groups, whether mail is enabled.
• Membership Type — Choose Assigned or Dynamic. Dynamic adds DynamicMembership to the group's groupTypes; its membership rule and processing state can be supplied under Additional Fields.
• Security Enabled — For Microsoft 365 groups, whether the group is security enabled. Defaults to true.
• Additional Fields — Optionally set role assignability, description, dynamic membership rule and processing state, preferred data location, unique name, and visibility. Role assignability requires security enabled; for Microsoft 365 groups it also requires mail enabled, and visibility must be Private. Role assignability is hidden for dynamic membership.

Output shape

A single group record returned by Microsoft Graph, including any additional fields successfully applied.

Creates the group with POST /groups. Additional fields without direct request-body routing, such as description, visibility, preferred data location, and unique name, are applied in a follow-up PATCH; if that PATCH fails, the node attempts to delete the newly created group and then raises the error. API errors are surfaced as node errors.

Links

• n8n community nodes installation guide