The Microsoft Azure AD Spoke cannot be used to Manage Mail-Enabled Security GroupsSummaryThe Microsoft Azure AD Spoke has Actions such as 'Add User to Group' and 'Remove User from Group'. These Actions cannot be used to manage mail-enabled Security Groups. The cause of this is that in Azure AD Mail-enabled security groups cannot be managed or updated via API and are read-only: Working with groups in Microsoft Graph ReleaseThis is a limitation on the Microsoft Azure side. There is some indication that the limitation was put in place in late 2021 (i.e previously it was possible to manage Mail-Enabled Security groups via API calls), however, we do not have definite information on that and further questions would need to be directed to Microsoft support.