Guidance / Example Workflow for AD Group Creation using Privileged Task Automation

After spending some time on this, I found a work around for my workflow:

Creating an AD Security Group with PTA: How to Handle Required Distinguished Name via Action: AD - Identity Security Cloud (ISC) / ISC Discussion and Questions - SailPoint Developer Community

The main issue I hit was that PAG Create Group requires a DN, but the DN field doesn’t support JSONPath or string concatenation.

The workaround was to build the DN using Define Variable (Replace operator) and then pass it into the Create Group action via Choose Variable.

Hopefully this helps as a reference pattern! But I also hope anyone else can provide further guidance too.