# Has anyone create/update Entitlements in AD/AAD using IIQ REST API

**URL:** <https://developer.sailpoint.com/discuss/t/has-anyone-create-update-entitlements-in-ad-aad-using-iiq-rest-api/1523>\
**Category:** IdentityIQ (IIQ)\
**Created:** [September 9, 2021, 4:47pm UTC](https://developer.sailpoint.com/discuss/t/has-anyone-create-update-entitlements-in-ad-aad-using-iiq-rest-api/1523 "2021-09-09T16:47:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![manny\_iam](https://avatars.discourse-cdn.com/v4/letter/m/b77776/32.png) [@manny\_iam](https://developer.sailpoint.com/discuss/u/manny_iam)\
**Post date:** [September 9, 2021, 4:47pm UTC](https://developer.sailpoint.com/discuss/t/has-anyone-create-update-entitlements-in-ad-aad-using-iiq-rest-api/1523/1 "2021-09-09T16:47:07Z")

</div>

We are planning to provide entitlement/group management API collection to enterprise application teams to perform CRUD operations on AD/AAD entitlements. I looked at SCIM API and it is not supporting the group management with IIQ 8.0. Can you suggest an optimal way to achieve this.

---

<div class="post-metadata">

**Author:** ![paulo\_urcid](https://avatars.discourse-cdn.com/v4/letter/p/848f3c/32.png) [@paulo\_urcid](https://developer.sailpoint.com/discuss/u/paulo_urcid)\
**Post date:** [September 9, 2021, 6:02pm UTC](https://developer.sailpoint.com/discuss/t/has-anyone-create-update-entitlements-in-ad-aad-using-iiq-rest-api/1523/2 "2021-09-09T18:02:50Z")

</div>

The SCIM API does allow you to launch a Workflow using the POST /LaunchedWorkflows endpoint and pass in a ProvisioningPlan in JSON format. So, you could launch the LCM Provisioning WF and pass in a “plan” to create/update an Account Group object. Of course, your connector must support the creation/update of Group objects (entitlements) and you will also need to have the corresponding Provisioning Policies defined.