Before
An administrator likely reviewed the submitted user details, manually created the directory account, and then performed a separate group-membership update. The two actions required the administrator to carry information from the request into each provisioning step and verify that the account existed before assigning it to a group.
How it works
- Receive and transform the user information submitted through the form.
- Create the new directory user and stop the process if account creation fails.
- Add the created user to the specified group after successful account creation.
Workflow details
- Form intake and data preparation: The workflow starts with information submitted through a form and transforms the user details into a format suitable for account provisioning.
- User creation: The prepared information is used to create a new user in Azure AD, ensuring the account is established before group membership is assigned.
- Group assignment: After the account is created successfully, the workflow adds the new user to the specified group.
- Sequential control: The group-assignment stage runs after user creation, and each service step is configured to stop the execution if it fails, preventing the workflow from continuing after an unsuccessful operation.
- Operational result: A form submission becomes a provisioned directory account with the requested group membership, reducing administrative handoffs between account creation and access setup.
What changed
User creation and group assignment now occur as one sequential workflow triggered by the form submission. The group update is performed only after the account is created successfully, while failures stop the process instead of allowing the next provisioning action to run.
Work removed
Manually entering form details to create the directory user, performing a separate group-membership update, and coordinating the handoff between account creation and access assignment.
Expected outcome
Removes at least two recurring administrator actions per request—creating the account and assigning group membership—while producing a consistently sequenced provisioning result.
