Need to add entra user / group to a vm local admin group

Your VM would have to be Entra joined

Once you join it, follow https://learn.microsoft.com/en-us/entra/identity/devices/assign-local-admin

Manually elevate a user on a device

In addition to using the Microsoft Entra join process, you can also manually elevate a regular user to become a local administrator on one specific device. This step requires you to already be a member of the local administrators group.

Starting with the Windows 10 1709 release, you can perform this task from Settings -> Accounts -> Other users. Select Add a work or school user, enter the user's user principal name (UPN) under User account and select Administrator under Account type

Additionally, you can also add users using the command prompt:

• If your tenant users are synchronized from on-premises Active Directory, use net localgroup administrators /add "Contoso\username".
• If your tenant users are created in Microsoft Entra ID, use net localgroup administrators /add "AzureAD\UserUpn"

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

The box was already Entra joined.

I did follow the steps in the link provided to add the assignments, however when i went back in the box to see if the local admin group already had the users assigned... no such luck.

I was able to manually add the users manually via the account settings.

If you can show me why it did not work with the assignments made on entra it would be a great help.

Thank you

From what I recall, this might be a limitation of the interface.

Once you sign in as the user, run

whoami /groups

or

net localgroup administrators

to validate that the change you applied via an assignment took effect

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

as suspected, i ran the net localgroup administrators and only the local admin originally created was the only member. There is something else that may need to happen in order for the entra user to be added to the group.

Hello @Jose Calderin,

Did your issue get resolved, or are you still looking for assistance? Do let me know—I'm happy to help you."

Thank you!