Assign Groups By Template

Assign cloud-only groups to a device based on a template

Description

Adds a device to one or more Entra ID groups using either group object IDs or display names. The list of groups is typically provided via runbook customization templates.

Location

Device → General → Assign Groups By Template

Full Runbook name

rjgit-device_general_assign-groups-by-template

Details

Property	Value
Version	1.0.3
Required modules	RealmJoin.RunbookHelper (>= 0.8.9) Microsoft.Graph.Authentication (>= 2.39.0)
Schedulable	no

Permissions

Application permissions

• Type: Microsoft Graph

  • Device.Read.All

    • Resolves the Entra device and reads its current group memberships
  • Group.Read.All

    • Looks up the template's target groups by display name or id and checks existing membership
  • GroupMember.ReadWrite.All

    • Adds the device to each template group via [e-mail]

Parameters

DeviceId

ID of the target device in Microsoft Graph.

Property	Value
Required	true
Default Value
Type	String
Hidden in portal	yes (preset via runbook customization)

GroupsTemplate

Template selector used by portal customization to populate the group list.

Property	Value
Required	false
Default Value
Type	String

GroupsString

Comma-separated list of group object IDs or group display names.

Property	Value
Required	true
Default Value
Type	String

UseDisplaynames

If set to true, treats values in GroupsString as group display names instead of IDs.

Property	Value
Required	false
Default Value	True
Type	Boolean
Hidden in portal	yes (preset via runbook customization)

Back to Runbook Reference overview