Guidance / Example Workflow for AD Group Creation using Privileged Task Automation

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi everyone,

I’m currently working on implementing Active Directory group creation using Privileged Task Automation (PTA) in Identity Security Cloud, and I would appreciate some guidance from the community.

So far, I have:

  • A Standard cluster with the Privileged Access Gateway (PAG) component enabled

  • The PAG Virtual Appliance deployed and healthy

  • Parameter Storage configured with:

    • One Connection parameter (Active Directory)

    • One Authentication parameter (service account credentials)

I’m using the workflow template “Create a security group in Active Directory”, but the template requires configuring several PAG actions (search group, find manager, create group, etc.), and the documentation around this is quite high-level.

My main question is:

  • Does anyone have a step-by-step guide, best practices, or an example workflow for creating AD groups using PTA/PAG that could be shared as a reference?

Even a high-level explanation of how the PAG actions are typically wired together in this workflow would be extremely helpful.

Thanks in advance for any guidance or examples you can share.

1 Like
2

I agree. Would love some guidance.

1 Like
3

Did you try to execute a powershell script through PTA and see if you can create the AD group ?

4

After spending some time on this, I found a work around for my workflow:

Creating an AD Security Group with PTA: How to Handle Required Distinguished Name via Action: AD - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

The main issue I hit was that PAG Create Group requires a DN, but the DN field doesn’t support JSONPath or string concatenation.

The workaround was to build the DN using Define Variable (Replace operator) and then pass it into the Create Group action via Choose Variable.

Hopefully this helps as a reference pattern! But I also hope anyone else can provide further guidance too.

5

Laura, thank you for your reply with what worked for you. Did you have a topic open with this issue? Your response would be helpful for someone running into this exact issue and is detailed enough that they should find it. While it doesn’t answer the original topic completely, it does provide some guidance on a specific issue.

As for the original idea, I do not know of any step-by-step guidance on this. You could check out the Navigate announcements from 2024 when PTA was announced and see if there is a high level overview of it.