Add a member

Namespace: microsoft.graph

Use this API to add a member (user, group, or device) to an administrative unit. Currently it's only possible to add one member at a time to an administrative unit.


One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) AdministrativeUnit.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application AdministrativeUnit.ReadWrite.All

To add a member to an administrative unit, the calling principal must be assigned one of the following Azure AD roles:

  • Privileged Role Administrator
  • Global Administrator

HTTP request

POST /directory/administrativeUnits/{id}/members/$ref

Request headers

Name Description
Authorization Bearer {token}. Required.
Content-type application/json. Required.

Request body

In the request body, provide the id of a user, group, device, or directoryObject to be added.


If successful, this method returns 204 No Content response code. It does not return anything in the response body.



Here is an example of the request.

Content-type: application/json



Here is an example of the response.

HTTP/1.1 204 No Content