Automating Office 365 Group Access Requests in ADMP with ServiceDesk Integration

Automating Office 365 Group Access Requests in ADMP with ServiceDesk Integration

Use-Case:
This document describes a typical scenario where an organisation uses an Active Directory Management Platform (ADMP) and a ServiceDesk system to manage access requests for various resources, including Office 365 groups. The current process involves manually creating access requests through the ServiceDesk platform and then adding approved users to the corresponding Office 365 groups using ADMP.

Implementation Plan
Automating the user provisioning process upon request approval to ensure efficiency and accuracy in user addition to Office 365 groups, will be achieved through an integration mechanism established between ServiceDesk and ADMP, enabling seamless data exchange. Once a request is approved in ServiceDesk, the required user details will be automatically passed to ADMP, which will process the incoming data and automatically add the approved users to the designated Office 365 group without requiring manual intervention.

Steps to Configure:
  1. Download the attached scripts. 
  2. Go to Admin > Developer Space > Custom Function > Global Functions > Copy & Paste the attached  ADMP_Configuration.txt  and save it with a name.
    1. We will need the ADMP hosted url, AuthToken and Domain Name for establishing the connection with ADMP and update those at LOC: 1-3 as per your instance.
    2. Set the return type to "Map" and copy the script from attachment. [FileName - ADMP_Configuration.txt] .
    3. Storing these informations as a global function will help us re-use these in other scripts as well.
    4. Refer to the screenshot below.

  3. Go to Admin > Developer Space > Custom Function > Approval > Copy & paste AddUserToO365Group.txt and save it with a name.
    1. Update the global function name at LOC: 1 as per your instance
    2. Updated the Group_matrix at LOC : 9  &  APIField names which contain user name and required O_365_GroupName at LOC: 8 & 9 respectively.
    3. To get Group names and group IDs in ADMP.
      1. Go to Microsoft 365 >> Reports >>  Group Reports >> All groups >> It contains id vs group name
    4. Provide required group names and group id at the group_matrix.
  4. Go to Admin > Automation > Custom Triggers > Approval > Configure the created custom function. Refer to the screenshot below.


Conclusion:
The automation of Office 365 group access requests through the integration of ServiceDesk and ADMP presents a significant opportunity for the organisation to optimise their access management workflow. By streamlining the user provisioning process, the organisation can achieve increased efficiency, reduced manual efforts, and improved accuracy in handling access requests, ultimately leading to enhanced user experience and improved IT service management.