Add-AcctAzureADSecurityGroupMember

Last published : Oct 31, 2026
Introduced in: Citrix Virtual Apps and Desktop 7 2212
Adds an Azure AD security group to an assigned security group.
Related information
about_AcctADIdentitySnapIn

Syntax

Add-AcctAzureADSecurityGroupMember
   [-AccessToken] <String>
   [-GroupId] <String>
   [-RefGroupId] <String>
   [-SkipCertificateValidation]
   [<CitrixCommonParameters>]
   [<CommonParameters>]
Add-AcctAzureADSecurityGroupMember
   -ServiceAccountUid <Guid>
   [-GroupId] <String>
   [-RefGroupId] <String>
   [-SkipCertificateValidation]
   [<CitrixCommonParameters>]
   [<CommonParameters>]

Description

Provides the ability to add a Citrix-created device security group as a member to an assigned security group.

Examples

EXAMPLE 1

Adds the security group of a device as a direct member to an assigned security group.
Add-AcctAzureADSecurityGroupMember -AccessToken $accessToken -GroupId $groupId -RefGroupId $refGroupId"
True

Parameters

-ServiceAccountUid

The service account's UID.
Type: Guid
Position: Named
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False
Introduced in: Citrix Virtual Apps and Desktop 7 2503

-AccessToken

Access token of Microsoft Graph API. Make sure grant consent to following permissions:
  • Group.ReadWrite.All
  • GroupMember.ReadWrite.All
Type: String
Position: 2
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

-GroupId

The assigned security group's ID.
Type: String
Position: 3
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

-RefGroupId

The device security group's ID.
Type: String
Position: 4
Default value: None
Required: True
Accept pipeline input: False
Accept wildcard characters: False

-SkipCertificateValidation

Forces the cmdlet to skip checking SSL certificates. By default, the cmdlet will check the certificate from the server. If the certificate is not valid, the cmdlet will not connect to the server.
Type: SwitchParameter
Position: Named
Default value: None
Required: False
Accept pipeline input: False
Accept wildcard characters: False
Introduced in: Citrix Virtual Apps and Desktop 7 2511

CitrixCommonParameters

This cmdlet supports the common Citrix parameters: -AdminAddress, -AdminClientIP, -BearerToken, -TraceParent, -TraceState and -VirtualSiteId. For more information, see about_CitrixCommonParameters.

CommonParameters

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutVariable, -OutBuffer, -PipelineVariable, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.

Inputs

None

You can't pipe objects to this cmdlet.

Outputs

None

By default, this cmdlet returns no output.

Notes

In the case of failure, the following errors can result:
  • PartialData
    Only a subset of the available data was returned.
  • PermissionDenied
    The user does not have administrative rights to perform this operation.
  • ConfigurationLoggingError
    The operation could not be performed because of a configuration logging error
  • CommunicationError
    An error occurred while communicating with the service.
  • InvalidFilter
    A filtering expression was supplied that could not be interpreted for this cmdlet.
  • ExceptionThrown
    An unexpected error occurred. To locate more details, see the Windows event logs on the controller being used or examine the XenDesktop logs.
  • AzureADTenantIdMismatchAzureADAccessToken
    Mismatch between the given AzureADTenantID and TenantID in Azure AD AccessToken.