Add-AcctAzureADSecurityGroupMember

Last published : Oct 31, 2026
Introduced in: Citrix Virtual Apps and Desktop 7 2212
Adds an Azure AD security group to an assigned security group.
Related information
about_AcctADIdentitySnapIn

Syntax

Add-AcctAzureADSecurityGroupMember
   [-AccessToken] <String>
   [-GroupId] <String>
   [-RefGroupId] <String>
   [<CitrixCommonParameters>]
   [<CommonParameters>]
Add-AcctAzureADSecurityGroupMember
   -ServiceAccountUid <Guid>
   [-GroupId] <String>
   [-RefGroupId] <String>
   [<CitrixCommonParameters>]
   [<CommonParameters>]

Description

Provides the ability to add a Citrix-created device security group as a member to an assigned security group.

Examples

EXAMPLE 1

Adds the security group of a device as a direct member to an assigned security group.
Add-AcctAzureADSecurityGroupMember -AccessToken $accessToken -GroupId $groupId -RefGroupId $refGroupId"
True

Parameters

-ServiceAccountUid

The service account's UID.
Type: Guid
Position: Named
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False
Introduced in: Citrix Virtual Apps and Desktop 7 2503

-AccessToken

Access token of Microsoft Graph API. Make sure grant consent to following permissions:
  • Group.ReadWrite.All
  • GroupMember.ReadWrite.All
Type: String
Position: 2
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

-GroupId

The assigned security group's ID.
Type: String
Position: 3
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

-RefGroupId

The device security group's ID.
Type: String
Position: 4
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

CitrixCommonParameters

This cmdlet supports the common Citrix parameters: -AdminAddress, -AdminClientIP, -BearerToken, -TraceParent, -TraceState and -VirtualSiteId. For more information, see about_CitrixCommonParameters.

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

None

You can't pipe objects to this cmdlet.

Outputs

None

By default, this cmdlet returns no output.

Notes

In the case of failure, the following errors can result:
  • PartialData
    Only a subset of the available data was returned.
  • PermissionDenied
    The user does not have administrative rights to perform this operation.
  • ConfigurationLoggingError
    The operation could not be performed because of a configuration logging error
  • CommunicationError
    An error occurred while communicating with the service.
  • InvalidFilter
    A filtering expression was supplied that could not be interpreted for this cmdlet.
  • ExceptionThrown
    An unexpected error occurred. To locate more details, see the Windows event logs on the controller being used or examine the XenDesktop logs.
  • AzureADTenantIdMismatchAzureADAccessToken
    Mismatch between the given AzureADTenantID and TenantID in Azure AD AccessToken.