Microsoft AD v2 spoke – Permissions required to execute actionsMicrosoft AD v2 spoke provides several actions to automate tasks in Microsoft AD. Each action or set of actions requires permissions for its successful execution. This article provides information about these required roles or permissions.Affected Versions: AllRequired permissions:ActionSvc accountMember of Built-in Account OperatorDomain AdminsGroup Group Membership Add User to GroupNoYesYesRemove User from GroupNoYesYesIs User in GroupYesYesYes User Authentication Change User PasswordYesYesYesIs User LockedYesYesYesReset User PasswordNoYesYesUnlock UserNoYesYesGenerate Random PasswordYesYesYesLook up User Password Expiration DetailsYesYesYes User Management Delete UserNoYesYesDisable UserNoYesYesEnable UserNoYesYesIs User DisabledYesYesYesDoes User ExistsYesYesYes