Add Or Remove Nested Group

Add/remove a nested group to/from a group

Description

This runbook adds a nested group to a target group or removes an existing nesting. It supports Microsoft Entra ID groups and Exchange Online distribution or mail-enabled security groups. Use the Remove switch to remove the nested group instead of adding it.

Location

Group → General → Add Or Remove Nested Group

Full Runbook name

rjgit-group_general_add-or-remove-nested-group

Details

Property	Value
Version	1.0.1
Required modules	RealmJoin.RunbookHelper (>= 0.8.9)
Schedulable	no

Permissions

Application permissions

• Type: Microsoft Graph

  • Group.ReadWrite.All

    • Reads target and nested group and backs the nesting changes
  • GroupMember.ReadWrite.All

    • Checks nesting and adds or removes the nested group via /groups/{id}/members/$ref
• Type: Office 365 Exchange Online

  • Exchange.ManageAsApp (optional — feature: Mail-enabled groups)

    • Manages nesting via the Exchange Online distribution group cmdlets

RBAC roles

• Exchange Administrator

  • Required for the app-only Exchange Online session managing distribution group nesting

Parameters

GroupID

Object ID of the target group.

Property	Value
Required	true
Default Value
Type	String
Hidden in portal	yes (preset via runbook customization)

NestedGroupID

Object ID of the group to add as a nested member.

Property	Value
Required	true
Default Value
Type	String

Remove

Set to true to remove the nested group membership, or false to add it.

Property	Value
Required	false
Default Value	False
Type	Boolean
Portal display name	Remove this group

Back to Runbook Reference overview