Phone Live Chat
US: +1 888 720 9500
US: +1 800 443 6694
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9393

Move Group API

Move group API

Use this API to move a group in Active Directory (AD) from your application.

Request URL (JSON) format: http://<hostname>:<port>/RestAPI/MoveGroup

Request parameters:

AD Groups can be moved using the POST method. Following are the request parameters that can be used in the request:

Parameters Mandatory Description
domainName Yes Domain where the group is located.
AuthToken Yes Authentication token that is generated either from the Delegation tab (Delegation > Configuration > Technician Authtokens) or from the My account tab (My Account > Active Authtokens) in the top right corner of the product.
inputFormat Yes Details of the group that has to be moved in AD. This attribute should be JSONArray string and must be specified in this format:
[<JSONObject>,<JSONObject>,<JSONObject>]; JSONObject - key/value pair of LDAP attributes and their corresponding values.
PRODUCT_NAME Yes Product name/module name from which the request is being sent; will be needed for auditing.
destination Yes Distinguished name of the OU where the group has to be moved.


The response will be a JSON array string with a list of JSONObjects. Each JSONObject in the list represents an object sent in the inputFormat attribute in the request. Each object will contain the following properties about the status:

Parameter name Description
sAMAccountName sAMAccountName of the group moved from one OU to another.
status Status of the operation.
statusMessage Contains the message about the issues or errors that occur while performing the specified action.

Sample Input / Output


http://Byron:8080/RestAPI/MoveGroup?domainName=division-dc1.local&AuthToken=3e7181fe-4777-449e-bc21-86fc213ef6e0&inputFormat=[{"sAMAccountName": "Accounts Department"},{"sAMAccountName":"Sales Department"}]&PRODUCT_NAME=MODULE&destination=OU=custom_hcm,DC=division-dc1,DC=local


        "sAMAccountName": "Accounts Department",
        "statusMessage": "Successfully Modified.",
        "status": "1"
        "sAMAccountName": "Sales Department",
        "statusMessage": "Successfully Modified.",
        "status": "1"

Technician-based create group limit

The total number of groups that technicians can move in a day using the move group API depends on the total number of licensed help desk technicians (HDTs) in ADManager Plus.

If an API is used to move five AD groups, and three of them are successfully moved while two fail, it will be considered as three API calls. The maximum number of API calls an HDT can make is 50/day, irrespective of the tasks the HDT performs. If you have two HDT licenses, the total number of API calls that you can make is 100/day.

As the per day API call limit is not task-specific, you can perform any operation but the total number of API calls should not exceed 100. That is, an HDT can perform a variety of operations like user creation, OU creation, password reset, etc., but the number of API calls for all the tasks put together should not exceed 100.


  • The default admin account will not be considered a HDT.
  • Ensure that you URL encode all the special and reserved characters used in REST API requests. Since the client sending the request (browser, postman or TP tools) does not fall under the purview ADManager Plus, encoding the URL for special, reserved and unsafe characters is solely the users' responsibility.

Reserved characters include ; /? : @ = &
Unsafe characters include < > # % { } | \ ^ ~ [ ] ` "'

ADManager Plus Trusted By

The one-stop solution to Active Directory Management and Reporting
Email Download Link