Runbook: ACT-CreateADGroup.ps1

📘 Description

Creates an Active Directory group inside the customer’s on-prem AD environment.
Supports:

• Standard security groups
• Distribution groups (mail-enabled)
• Mail-enabled security groups
• Group descriptions
• Jira ticket updates (comments + transitions)

---

🧩 Required Parameters

Name	Description	Example
DisplayName	The name of the group	"HR Administrators"
IssueKey	Jira issue key for updates	"ITSD-5521"

---

🪄 Optional Parameters

Name	Description	Example
Description	Description of the group	"Group for HR staff"
GroupAlias	Email alias used if mail-enabled	"hr-admins"
GroupType	Security, Distribution, or MailSecurity	"Distribution"

---

📤 Input Payload (Webhook JSON Example)

{
  "customer": "Contoso",
  "runbook": "ACT-CreateADGroup.ps1",
  "issue_key": "{{issue.key}}",
  "params": {
    "DisplayName": "{{issue.fields.customfield_10401}}",
    "Description": "{{issue.fields.customfield_10402}}",
    "GroupType": "{{issue.fields.customfield_10403}}",
    "GroupAlias": "{{issue.fields.customfield_10404}}",
    "IssueKey": "{{issue.key}}"
  }
}

---

📩 Example Jira Automation Rule

When Issue Created → Send Web Request → POST

{
  "customer": "Contoso",
  "runbook": "ACT-CreateADGroup.ps1",
  "issue_key": "{{issue.key}}",
  "params": {
    "DisplayName": "{{triggerIssue.fields.customfield_10401}}",
    "GroupType": "{{triggerIssue.fields.customfield_10403}}",
    "GroupAlias": "{{triggerIssue.fields.customfield_10404}}",
    "IssueKey": "{{triggerIssue.key}}"
  }
}

---

📥 Response (Success)

{
  "job_id": "job-fd8292aa",
  "status": "success",
  "output": "Group 'HR Administrators' created successfully."
}

---

📥 Response (Error)

{
  "job_id": "job-fd8292aa",
  "status": "error",
  "message": "Group creation failed: Access denied.",
  "raw": "New-ADGroup : Access is denied"
}

---

🗃 Requirements

• SymphonyDesk runner installed
• AD domain controller reachable from runner
• Secrets configured:
• ADCred
• JiraCred
• Customer config must include:
• "GroupOU"
• "MailDomain"
• "DomainController"
• Exchange Management Shell installed if using mail-enabled groups

---

🏗 Version History

Version	Date	Changes
1.0	2025-01-01	Initial release
1.1	2025-01-02	Added mail-enabled group support