Skip to content

Commit 6f3ae43

Browse files
committed
task updates
1 parent 162681b commit 6f3ae43

File tree

1 file changed

+20
-17
lines changed

1 file changed

+20
-17
lines changed

articles/active-directory/governance/lifecycle-workflow-tasks.md

Lines changed: 20 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -25,12 +25,12 @@ Lifecycle Workflows currently support the following tasks:
2525
|---------|---------|
2626
|[Send welcome email to new hire](lifecycle-workflow-tasks.md#send-welcome-email-to-new-hire) | 70b29d51-b59a-4773-9280-8841dfd3f2ea |
2727
|[Generate Temporary Access Pass and send via email to user's manager](lifecycle-workflow-tasks.md#generate-temporary-access-pass-and-send-via-email-to-users-manager) | 1b555e50-7f65-41d5-b514-5894a026d10d |
28-
|[Add user to group](lifecycle-workflow-tasks.md#add-user-to-group) | 22085229-5809-45e8-97fd-270d28d66910 |
29-
|[Add user to team](lifecycle-workflow-tasks.md#add-user-to-team) | e440ed8d-25a1-4618-84ce-091ed5be5594 |
28+
|[Add user to groups](lifecycle-workflow-tasks.md#add-user-to-groups) | 22085229-5809-45e8-97fd-270d28d66910 |
29+
|[Add user to teams](lifecycle-workflow-tasks.md#add-user-to-teams) | e440ed8d-25a1-4618-84ce-091ed5be5594 |
3030
|[Enable user account](lifecycle-workflow-tasks.md#enable-user-account) | 6fc52c9d-398b-4305-9763-15f42c1676fc |
3131
|[Run a custom task extension](lifecycle-workflow-tasks.md#run-a-custom-task-extension) | 4262b724-8dba-4fad-afc3-43fcbb497a0e |
3232
|[Disable user account](lifecycle-workflow-tasks.md#disable-user-account) | 1dfdfcc7-52fa-4c2e-bf3a-e3919cc12950 |
33-
|[Remove user from group](lifecycle-workflow-tasks.md#remove-user-from-groups) | 1953a66c-751c-45e5-8bfe-01462c70da3c |
33+
|[Remove user from selected group](lifecycle-workflow-tasks.md#remove-user-from-selected-groups) | 1953a66c-751c-45e5-8bfe-01462c70da3c |
3434
|[Remove users from all groups](lifecycle-workflow-tasks.md#remove-users-from-all-groups) | b3a31406-2a15-4c9a-b25b-a658fa5f07fc |
3535
|[Remove user from teams](lifecycle-workflow-tasks.md#remove-user-from-teams) | 06aa7acb-01af-4824-8899-b14e5ed788d6 |
3636
|[Remove user from all teams](lifecycle-workflow-tasks.md#remove-users-from-all-teams) | 81f7b200-2816-4b3b-8c5d-dc556f07b024 |
@@ -46,16 +46,19 @@ Lifecycle Workflows currently support the following tasks:
4646
Common task parameters are the non-unique parameters contained in every task. When adding tasks to a new workflow, or a workflow template, you can customize and configure these parameters so that they match your requirements.
4747

4848

49+
> [!NOTE]
50+
> The user's employee hire date is used as the start time for the Temporary Access Pass. Please make sure that the TAP lifetime task setting and the [time portion of your user's hire date](how-to-lifecycle-workflow-sync-attributes.md#importance-of-time) are set appropriately so that the TAP is still valid when the user starts their first day.
51+
4952
|Parameter |Definition |
5053
|---------|---------|
5154
|category | A read-only string that identifies the category or categories of the task. Automatically determined when the taskDefinitionID is chosen. |
5255
|taskDefinitionId | A string referencing a taskDefinition which determines which task to run. |
5356
|isEnabled | A boolean value that denotes whether the task is set to run or not. If set to “true" then the task will run. Defaults to true. |
5457
|displayName | A unique string that identifies the task. |
5558
|description | A string that describes the purpose of the task for administrative use. (Optional) |
56-
|executionSequence | An integer that is read-only which states in what order the task will run in a workflow. For more information about executionSequence and workflow order, see: [Execution conditions](understanding-lifecycle-workflows.md#parts-of-a-workflow). |
59+
|executionSequence | An integer that is read-only which states in what order the task will run in a workflow. For more information about executionSequence and workflow order, see: [Configure Scope](understanding-lifecycle-workflows.md#configure-scope). |
5760
|continueOnError | A boolean value that determines if the failure of this task stops the subsequent workflows from running. |
58-
|arguments | Contains unique parameters relevant for the given task |
61+
|arguments | Contains unique parameters relevant for the given task. |
5962

6063

6164

@@ -158,29 +161,29 @@ For Microsoft Graph the parameters for the **Generate Temporary Access Pass and
158161
> The employee hire date is the same as the startDateTime used for the tapLifetimeInMinutes parameter.
159162
160163

161-
### Add user to group
164+
### Add user to groups
162165

163-
Allows users to be added to a cloud-only group. To control access to on-premises applications and resources, you need to enable group writeback. For more information, see [Azure AD Connect group writeback](../hybrid/how-to-connect-group-writeback-v2.md).
166+
Allows users to be added to cloud-only groups. To control access to on-premises applications and resources, you need to enable group writeback. For more information, see [Azure AD Connect group writeback](../hybrid/how-to-connect-group-writeback-v2.md).
164167

165168
You're able to customize the task name and description for this task.
166169
:::image type="content" source="media/lifecycle-workflow-task/add-group-task.png" alt-text="Screenshot of Workflows task: Add user to group task.":::
167170

168171

169-
For Microsoft Graph the parameters for the **Add user to group** task are as follows:
172+
For Microsoft Graph the parameters for the **Add user to groups** task are as follows:
170173

171174
|Parameter |Definition |
172175
|---------|---------|
173176
|category | joiner,leaver |
174177
|displayName | AddUserToGroup (Customizable by user) |
175-
|description | Add user to group (Customizable by user) |
178+
|description | Add user to groups (Customizable by user) |
176179
|taskDefinitionId | 22085229-5809-45e8-97fd-270d28d66910 |
177180
|arguments | Argument contains a name parameter that is the "groupID", and a value parameter which is the group ID of the group you are adding the user to. |
178181

179182

180183
```Example for usage within the workflow
181184
{
182185
"category": "joiner,leaver",
183-
"description": "Add user to group",
186+
"description": "Add user to groups",
184187
"displayName": "AddUserToGroup",
185188
"isEnabled": true,
186189
"continueOnError": true,
@@ -196,19 +199,19 @@ For Microsoft Graph the parameters for the **Add user to group** task are as fol
196199
```
197200

198201

199-
### Add user to team
202+
### Add user to teams
200203

201204
You're able to add a user to an existing static team. You're able to customize the task name and description for this task.
202205
:::image type="content" source="media/lifecycle-workflow-task/add-team-task.png" alt-text="Screenshot of Workflows task: add user to team.":::
203206

204207

205-
For Microsoft Graph the parameters for the **Add user to team** task are as follows:
208+
For Microsoft Graph the parameters for the **Add user to teams** task are as follows:
206209

207210
|Parameter |Definition |
208211
|---------|---------|
209212
|category | joiner,leaver |
210213
|displayName | AddUserToTeam (Customizable by user) |
211-
|description | Add user to team (Customizable by user) |
214+
|description | Add user to teams (Customizable by user) |
212215
|taskDefinitionId | e440ed8d-25a1-4618-84ce-091ed5be5594 |
213216
|argument | Argument contains a name parameter that is the "teamID", and a value parameter which is the team ID of the existing team you are adding a user to. |
214217

@@ -336,16 +339,16 @@ For Microsoft Graph the parameters for the **Disable user account** task are as
336339
337340
```
338341

339-
### Remove user from groups
342+
### Remove user from selected groups
340343

341-
Allows you to remove a user from cloud-only groups. To control access to on-premises applications and resources, you need to enable group writeback. For more information, see [Azure AD Connect group writeback](../hybrid/how-to-connect-group-writeback-v2.md).
344+
Allows you to remove a user from cloud-only groups. Dynamic and Privileged Access Groups not supported. To control access to on-premises applications and resources, you need to enable group writeback. For more information, see [Azure AD Connect group writeback](../hybrid/how-to-connect-group-writeback-v2.md).
342345

343346
You're able to customize the task name and description for this task in the Azure portal.
344347
:::image type="content" source="media/lifecycle-workflow-task/remove-group-task.png" alt-text="Screenshot of Workflows task: Remove user from select groups.":::
345348

346349

347350

348-
For Microsoft Graph the parameters for the **Remove user from groups** task are as follows:
351+
For Microsoft Graph the parameters for the **Remove user from selected groups** task are as follows:
349352

350353
|Parameter |Definition |
351354
|---------|---------|
@@ -378,7 +381,7 @@ For Microsoft Graph the parameters for the **Remove user from groups** task are
378381

379382
### Remove users from all groups
380383

381-
Allows users to be removed from every cloud-only group they are a member of. To control access to on-premises applications and resources, you need to enable group writeback. For more information, see [Azure AD Connect group writeback](../hybrid/how-to-connect-group-writeback-v2.md).
384+
Allows users to be removed from every cloud-only group they are a member of. Dynamic and Privileged Access Groups not supported. To control access to on-premises applications and resources, you need to enable group writeback. For more information, see [Azure AD Connect group writeback](../hybrid/how-to-connect-group-writeback-v2.md).
382385

383386

384387
You're able to customize the task name and description for this task in the Azure portal.

0 commit comments

Comments
 (0)